Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2fcryUt6tZxGMcsBWirDueP7pdVkKMZz3ZXoqe6uvR7m/1/323830343a316436383a3a2f33322d3438203d3e20323634333637.roa
File:                     323830343a316436383a3a2f33322d3438203d3e20323634333637.roa (raw, json)
Hash identifier:          Fi8j6i7PElIpcXTEa6aPNKS2YbZbs9habrUR6cqD1Oc=
Subject key identifier:   7D:D5:E0:CE:0B:53:AD:F1:3A:A1:6F:B5:EC:62:ED:8D:36:67:CB:47
Certificate issuer:       /CN=F0A91B48CC984B1956E0C296E2876B54F91800B5
Certificate serial:       4443EBCB3EC607455B08DD81FB7C72C80A62980E
Authority key identifier: F0:A9:1B:48:CC:98:4B:19:56:E0:C2:96:E2:87:6B:54:F9:18:00:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0A91B48CC984B1956E0C296E2876B54F91800B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2fcryUt6tZxGMcsBWirDueP7pdVkKMZz3ZXoqe6uvR7m/1/323830343a316436383a3a2f33322d3438203d3e20323634333637.roa
Signing time:             Thu 04 Apr 2024 14:40:53 +0000
ROA not before:           Thu 04 Apr 2024 14:35:53 +0000
ROA not after:            Thu 03 Apr 2025 14:40:53 +0000
asID:                     264367
IP address blocks:        2804:1d68::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:43:eb:cb:3e:c6:07:45:5b:08:dd:81:fb:7c:72:c8:0a:62:98:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0A91B48CC984B1956E0C296E2876B54F91800B5
        Validity
            Not Before: Apr  4 14:35:53 2024 GMT
            Not After : Apr  3 14:40:53 2025 GMT
        Subject: CN=7DD5E0CE0B53ADF13AA16FB5EC62ED8D3667CB47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0c:a5:ff:5f:47:b7:88:c7:f4:1f:76:45:40:
                    f5:c6:f4:9f:36:d2:6a:0e:d1:fc:ee:99:5e:e2:28:
                    18:ee:d3:2f:e4:1f:a5:87:20:db:7a:9b:3b:35:11:
                    76:fb:40:07:49:40:a6:a8:dc:7b:0d:0f:8a:fd:1b:
                    13:6d:88:0a:31:10:a4:8b:0e:a7:8a:4e:9f:0a:99:
                    f2:25:94:d9:db:40:7f:0b:5c:e2:f1:87:be:17:ca:
                    37:5a:8a:12:5d:d3:f0:b1:56:f4:9a:b3:56:24:9b:
                    9b:e4:87:49:77:78:7f:de:76:ef:1c:ec:6a:f5:5a:
                    06:bd:fd:ce:80:90:3a:b5:68:7e:75:c0:2d:6e:55:
                    c9:75:4b:4f:bd:fb:26:ab:07:0f:11:44:bb:1f:e1:
                    f4:0f:43:b6:fe:5f:d8:6b:c8:df:62:20:a9:7c:93:
                    a6:f9:b9:9a:2d:2e:f3:5a:fc:c5:e2:77:bc:ea:58:
                    f4:6d:9c:f5:d2:d2:7c:0e:2f:61:3b:73:35:d8:a6:
                    3b:9b:83:54:6e:5d:2f:2b:02:b2:c6:a5:2b:8d:02:
                    51:15:6a:e7:59:e2:f8:a4:ab:b1:91:39:87:d5:8d:
                    7b:ca:a8:2e:aa:c8:71:eb:c2:05:58:54:16:7d:22:
                    5c:35:be:be:4b:ab:55:dd:d3:92:a6:1d:df:18:9c:
                    84:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D5:E0:CE:0B:53:AD:F1:3A:A1:6F:B5:EC:62:ED:8D:36:67:CB:47
            X509v3 Authority Key Identifier:
                keyid:F0:A9:1B:48:CC:98:4B:19:56:E0:C2:96:E2:87:6B:54:F9:18:00:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2fcryUt6tZxGMcsBWirDueP7pdVkKMZz3ZXoqe6uvR7m/1/F0A91B48CC984B1956E0C296E2876B54F91800B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0A91B48CC984B1956E0C296E2876B54F91800B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2fcryUt6tZxGMcsBWirDueP7pdVkKMZz3ZXoqe6uvR7m/1/323830343a316436383a3a2f33322d3438203d3e20323634333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d68::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:55:01:a5:b4:45:1e:c9:1a:53:3f:bc:42:9c:69:0d:d2:12:
         2f:d7:d2:de:bc:d4:c8:a6:36:4f:eb:97:7a:de:52:9a:ef:e1:
         5f:e9:07:95:51:ba:d1:03:8d:9f:e4:32:5a:9b:a5:69:ab:74:
         b9:f6:ba:8b:4c:ab:5c:23:89:1e:d8:ae:ee:e7:94:5d:40:a1:
         c6:22:a3:ee:b0:da:17:21:b9:35:d6:d1:22:b7:50:07:8a:02:
         c4:5c:d1:9d:ce:46:b2:6d:20:10:a0:b0:9b:13:1f:6b:03:c1:
         e4:01:20:15:05:6b:86:df:de:14:65:bc:c3:80:c2:c1:b0:6f:
         b5:8d:65:17:ab:9f:19:f1:9b:25:2b:7b:bc:58:5d:91:6a:29:
         9a:43:d4:a8:61:93:92:5d:40:e6:83:ef:14:9e:7d:a8:0d:b8:
         e5:8c:71:5c:ed:e2:fb:e2:d1:05:19:f0:1a:41:65:5a:55:93:
         0d:9d:94:1c:12:52:29:2d:da:63:ca:78:b1:3d:0b:c3:6b:2a:
         b4:07:bb:65:c6:46:0b:ea:e2:d1:09:4f:85:75:fd:cb:b8:77:
         4d:30:36:f2:72:25:29:67:92:c5:73:5d:02:c9:db:94:34:7d:
         14:3e:f3:e9:68:a6:51:0b:e1:da:9a:33:73:d3:4a:41:79:e1:
         66:e6:a3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----