Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/323830343a323337303a3a2f33322d313238203d3e20323634313632.roa
File:                     323830343a323337303a3a2f33322d313238203d3e20323634313632.roa (raw, json)
Hash identifier:          q5Ubh5LpgPmogW6d/fgaUekRc75P9qIBTVUZkNveTmc=
Subject key identifier:   9D:E3:FD:9A:9E:E0:BA:4A:E0:09:D1:8A:12:32:B1:7E:7F:1C:6B:43
Certificate issuer:       /CN=574500A1D4795583CC49317322D2ACF95685FAD9
Certificate serial:       74C4682C22783A7CAAF14B45EAE72EA954447C72
Authority key identifier: 57:45:00:A1:D4:79:55:83:CC:49:31:73:22:D2:AC:F9:56:85:FA:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/574500A1D4795583CC49317322D2ACF95685FAD9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/323830343a323337303a3a2f33322d313238203d3e20323634313632.roa
Signing time:             Wed 26 Jun 2024 20:37:22 +0000
ROA not before:           Wed 26 Jun 2024 20:32:22 +0000
ROA not after:            Wed 25 Jun 2025 20:37:22 +0000
asID:                     264162
IP address blocks:        2804:2370::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:c4:68:2c:22:78:3a:7c:aa:f1:4b:45:ea:e7:2e:a9:54:44:7c:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=574500A1D4795583CC49317322D2ACF95685FAD9
        Validity
            Not Before: Jun 26 20:32:22 2024 GMT
            Not After : Jun 25 20:37:22 2025 GMT
        Subject: CN=9DE3FD9A9EE0BA4AE009D18A1232B17E7F1C6B43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:31:11:c6:36:f3:03:ac:17:0d:9c:84:d5:99:
                    2d:b8:91:00:17:bd:87:2a:a2:a8:00:84:5b:c1:b2:
                    49:d5:7d:47:56:89:27:72:4a:7d:f8:3d:46:a8:b8:
                    a1:52:f8:05:56:f7:c8:5c:19:e6:fc:df:01:39:5b:
                    57:0a:62:16:b9:e9:70:72:c6:e4:ac:7c:86:86:04:
                    25:b4:91:45:c8:39:5d:fb:dd:d8:76:f3:68:43:57:
                    f2:f8:60:57:16:8e:a9:0b:10:98:7b:a2:c0:f1:63:
                    a2:82:16:ec:ca:3a:04:dc:75:9d:4d:d5:fc:40:25:
                    4a:1e:df:6a:48:47:f9:0c:99:31:97:12:6f:1e:87:
                    0d:5c:a8:02:9f:0a:f5:5e:1b:6f:e8:28:34:ed:08:
                    09:30:9b:38:19:ac:c5:90:c2:9d:9c:2f:ab:ed:9a:
                    3b:e0:f5:26:aa:07:20:20:f5:a4:b6:c3:04:bb:90:
                    38:64:6c:10:0c:23:d9:e8:00:66:93:c0:f1:b3:69:
                    21:aa:6f:a5:0e:9f:e7:0b:b5:92:db:fc:b3:cc:01:
                    d8:58:46:ee:02:25:dd:18:f3:bf:2c:0f:ea:44:91:
                    d5:28:8a:89:ac:29:7f:8e:e2:c7:77:b9:ae:a6:51:
                    e6:0d:00:7f:39:1a:e6:1a:ee:db:d1:fb:00:a5:9e:
                    7f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:E3:FD:9A:9E:E0:BA:4A:E0:09:D1:8A:12:32:B1:7E:7F:1C:6B:43
            X509v3 Authority Key Identifier:
                keyid:57:45:00:A1:D4:79:55:83:CC:49:31:73:22:D2:AC:F9:56:85:FA:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/574500A1D4795583CC49317322D2ACF95685FAD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/574500A1D4795583CC49317322D2ACF95685FAD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/323830343a323337303a3a2f33322d313238203d3e20323634313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2370::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:33:74:a7:21:ce:61:2d:dd:d9:7c:ce:a2:d7:d7:79:f5:4f:
         1f:e9:73:92:7a:c9:03:60:6a:36:8d:0c:cb:a5:1c:1e:fc:ea:
         83:4f:2a:75:3f:b6:25:c8:75:bb:ed:8e:93:fe:f6:92:49:ce:
         38:73:3d:fb:d2:22:0c:56:79:43:02:89:33:43:c9:5d:49:fc:
         68:94:17:a4:4d:e5:ef:96:8a:b6:28:2c:76:fb:5d:6c:d6:b6:
         9a:d5:51:50:cb:40:20:e8:24:9d:20:e3:91:57:d5:db:c8:b9:
         d6:bc:21:73:9f:a0:84:4e:be:62:94:ea:94:60:09:58:9c:51:
         2f:74:c5:1c:7e:d5:1b:c1:f4:33:28:25:3d:0a:28:2e:a8:20:
         58:9c:7e:4b:2c:15:f8:35:40:e6:15:5d:52:cd:ec:7c:20:1d:
         ef:8a:8b:f3:bb:ca:69:4f:01:83:e5:d9:ac:86:e3:89:2c:21:
         4f:d2:4b:25:be:28:9c:79:e2:c6:76:bc:98:7e:b7:56:1b:50:
         b3:82:18:ae:57:6c:86:2c:1a:31:17:ba:94:91:78:06:4e:cc:
         38:7c:fa:04:ae:7e:41:d1:a3:2c:d2:a9:bc:64:56:3d:fe:db:
         5f:1e:a2:45:95:e7:38:38:55:c1:90:5f:da:6d:1e:4a:70:2f:
         64:19:6f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----