Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/1/323830343a343261383a3a2f33322d313238203d3e20323637353137.roa
File:                     323830343a343261383a3a2f33322d313238203d3e20323637353137.roa (raw, json)
Hash identifier:          zQkb324/Mcrk+871vBVIopJIBrlw1dACgkdwH7rrt8E=
Subject key identifier:   A2:E0:9C:DE:18:2F:42:36:CC:48:44:0E:A0:74:44:52:51:8B:9B:3C
Certificate issuer:       /CN=AAF5B81D61057C224A29F86F6C466A2DE486BFFD
Certificate serial:       5EB70B5995BD62A01B471A329EEE69301D89B24F
Authority key identifier: AA:F5:B8:1D:61:05:7C:22:4A:29:F8:6F:6C:46:6A:2D:E4:86:BF:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAF5B81D61057C224A29F86F6C466A2DE486BFFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/1/323830343a343261383a3a2f33322d313238203d3e20323637353137.roa
Signing time:             Thu 04 Apr 2024 06:30:15 +0000
ROA not before:           Thu 04 Apr 2024 06:25:15 +0000
ROA not after:            Thu 03 Apr 2025 06:30:15 +0000
asID:                     267517
IP address blocks:        2804:42a8::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:b7:0b:59:95:bd:62:a0:1b:47:1a:32:9e:ee:69:30:1d:89:b2:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAF5B81D61057C224A29F86F6C466A2DE486BFFD
        Validity
            Not Before: Apr  4 06:25:15 2024 GMT
            Not After : Apr  3 06:30:15 2025 GMT
        Subject: CN=A2E09CDE182F4236CC48440EA0744452518B9B3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c6:42:25:9a:3f:7e:02:87:7d:89:92:4a:f4:
                    14:93:6f:f7:2b:aa:b2:4a:20:cb:60:90:9f:1a:1b:
                    89:e6:d9:bb:51:88:25:d5:1b:f5:22:d1:86:a0:5b:
                    94:b5:1f:00:42:97:10:1e:29:c1:9c:dd:2f:34:85:
                    43:51:d8:3d:c0:9c:63:14:12:30:2c:f7:76:48:88:
                    05:ae:00:69:26:b4:fc:c6:a7:ad:50:67:16:37:4b:
                    da:18:df:81:50:03:55:bf:aa:b8:13:0b:85:06:8f:
                    77:7d:27:56:ed:17:4c:40:dc:2d:26:e5:d6:bc:25:
                    cf:61:f3:19:e6:7d:f2:d3:e1:d2:49:00:7c:97:12:
                    dd:3a:4e:ba:bf:b7:f3:b9:f7:aa:0f:74:3d:65:fb:
                    14:9f:e6:5f:de:aa:1f:98:94:2c:20:bc:48:24:a3:
                    79:80:18:57:55:cd:9e:ee:b3:5a:38:af:87:ab:85:
                    8f:56:75:ad:ae:08:4c:f5:09:e7:2f:b7:72:5c:9a:
                    df:29:51:07:93:c0:70:8a:28:ab:5d:04:cb:41:2e:
                    55:6e:c9:4d:91:7f:59:20:05:b7:e6:1a:4f:d7:ab:
                    72:49:81:30:17:49:11:e6:95:27:59:77:33:87:c9:
                    b3:0e:cc:3d:2e:23:b7:30:20:5e:9e:bb:1e:88:2b:
                    f4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:E0:9C:DE:18:2F:42:36:CC:48:44:0E:A0:74:44:52:51:8B:9B:3C
            X509v3 Authority Key Identifier:
                keyid:AA:F5:B8:1D:61:05:7C:22:4A:29:F8:6F:6C:46:6A:2D:E4:86:BF:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/1/AAF5B81D61057C224A29F86F6C466A2DE486BFFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAF5B81D61057C224A29F86F6C466A2DE486BFFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/1/323830343a343261383a3a2f33322d313238203d3e20323637353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:42a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:6a:fb:db:ae:25:24:2b:e4:e1:16:87:36:1e:5d:01:8b:dd:
         61:e3:c4:5a:5e:c6:db:d2:fe:ad:f6:79:bc:b5:dc:ed:ad:77:
         f8:79:de:32:12:e7:d7:50:f1:86:53:35:d0:aa:74:85:70:08:
         ba:88:58:81:8a:c5:2f:8d:d7:99:a0:76:6a:3a:53:35:a8:0c:
         41:ec:28:d7:1c:95:2d:44:4f:a1:e7:5b:5f:08:3b:97:f8:60:
         4a:8e:77:95:39:5c:d0:c2:95:63:86:99:c8:8c:83:e4:f2:8f:
         9c:a4:72:a2:f8:b8:f0:db:3d:cf:90:26:9a:58:8a:92:77:50:
         fc:99:a3:30:ef:c8:69:4c:5c:17:f6:8e:4c:71:6f:1e:66:65:
         65:65:b9:e5:ec:14:57:70:04:8e:f1:aa:57:bf:a3:ef:19:3f:
         6f:bc:12:c0:66:50:46:83:16:f3:5d:9a:00:9c:df:68:eb:35:
         bb:17:30:06:35:e0:b2:cc:75:ad:29:eb:ca:e4:9c:1f:58:9e:
         b4:02:ea:e1:42:70:4b:58:2d:80:94:82:c3:60:7a:b6:f3:f3:
         eb:3e:8e:c9:09:95:40:d1:4e:f4:a8:a0:56:da:d0:8b:1c:7b:
         a3:5d:be:59:e4:96:14:7d:13:5d:2d:cc:3f:48:b4:38:ab:c0:
         ec:87:11:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----