Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/323830343a373935303a383030303a3a2f34302d3430203d3e20323731323938.roa
File:                     323830343a373935303a383030303a3a2f34302d3430203d3e20323731323938.roa (raw, json)
Hash identifier:          5kZiXaLaS2J7a0JWJYr9jghiL77Y0h1kwioRCGYF2c0=
Subject key identifier:   E3:9E:45:DC:64:7A:3A:34:EC:05:0B:D9:57:DC:DD:3B:FC:01:E1:4F
Certificate issuer:       /CN=0B7E676BF893065665A524EBE293E999020CF3E1
Certificate serial:       2A6A372F91E03E8748374B2B3397845962DC5C09
Authority key identifier: 0B:7E:67:6B:F8:93:06:56:65:A5:24:EB:E2:93:E9:99:02:0C:F3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B7E676BF893065665A524EBE293E999020CF3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/323830343a373935303a383030303a3a2f34302d3430203d3e20323731323938.roa
Signing time:             Tue 30 Jan 2024 19:57:00 +0000
ROA not before:           Tue 30 Jan 2024 19:52:00 +0000
ROA not after:            Tue 28 Jan 2025 19:57:00 +0000
asID:                     271298
IP address blocks:        2804:7950:8000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:6a:37:2f:91:e0:3e:87:48:37:4b:2b:33:97:84:59:62:dc:5c:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B7E676BF893065665A524EBE293E999020CF3E1
        Validity
            Not Before: Jan 30 19:52:00 2024 GMT
            Not After : Jan 28 19:57:00 2025 GMT
        Subject: CN=E39E45DC647A3A34EC050BD957DCDD3BFC01E14F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:be:b3:df:8b:f4:af:30:92:ed:10:89:13:5a:
                    14:e7:46:dd:d3:a7:76:e4:21:73:64:d5:d6:12:dd:
                    f0:43:12:cf:34:16:55:8f:47:3e:fe:5a:ee:f6:7e:
                    84:b4:00:ea:8e:b6:5b:7a:79:f8:ae:2d:49:a2:b6:
                    9e:c9:b9:f6:82:ed:ad:c6:7c:47:18:09:c2:82:0d:
                    97:b4:3e:2a:a4:51:f5:b2:b9:1b:bd:b6:c0:02:78:
                    03:52:39:f2:87:8d:92:7f:c4:c8:73:9f:56:a8:30:
                    ee:c3:ff:ea:53:3e:29:5c:8f:bc:8d:73:c4:15:87:
                    9f:e7:ba:37:0e:28:05:b8:96:db:3a:96:e6:4d:1b:
                    a9:c2:2c:ae:35:31:0f:12:25:0b:70:f3:13:cb:50:
                    f9:e1:01:8e:28:6b:2e:4c:47:f2:20:3e:8f:5c:42:
                    b6:6a:98:9f:90:45:ee:6f:61:20:9a:b0:de:b2:38:
                    b8:3b:b7:b8:af:bc:5f:d3:15:45:9a:09:2f:e5:a1:
                    91:d9:a9:65:cf:ce:c6:7b:e9:8b:43:c5:43:7e:94:
                    e7:ae:45:5d:8b:3a:4c:37:ef:4f:fa:a0:80:5f:36:
                    7b:a0:2d:f6:14:62:10:9d:1e:11:b7:ad:93:80:38:
                    14:94:44:ce:5b:50:93:5f:5f:27:30:0b:9e:e3:0e:
                    25:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:9E:45:DC:64:7A:3A:34:EC:05:0B:D9:57:DC:DD:3B:FC:01:E1:4F
            X509v3 Authority Key Identifier:
                keyid:0B:7E:67:6B:F8:93:06:56:65:A5:24:EB:E2:93:E9:99:02:0C:F3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/0B7E676BF893065665A524EBE293E999020CF3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B7E676BF893065665A524EBE293E999020CF3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/323830343a373935303a383030303a3a2f34302d3430203d3e20323731323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7950:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         91:53:07:55:92:28:8a:f0:ae:8d:c6:71:2a:8a:a6:f3:f8:33:
         a8:ca:f9:90:76:04:f5:f1:ca:12:9c:73:8e:cb:3b:ef:9f:d5:
         86:f4:da:ed:2d:46:af:ff:2d:1c:17:fa:3a:bb:fe:0b:99:1a:
         74:df:74:40:ad:e0:f8:c7:8d:ab:65:9b:53:87:c5:ba:99:ff:
         3d:ab:a2:86:36:01:39:ba:5a:c4:c2:8e:41:41:39:fe:b5:f1:
         9f:5a:c0:22:cc:7f:f9:80:05:da:d2:db:ed:eb:19:1b:01:e3:
         66:b2:77:fa:b9:a8:57:24:b3:fb:0a:eb:bd:ec:9c:d1:24:7b:
         8a:24:33:8f:cc:42:e4:9a:51:d5:82:27:16:a2:07:83:a4:cf:
         96:f0:65:ad:84:97:c1:1a:cb:19:02:b4:5b:50:3b:b2:1c:84:
         1e:fa:70:0f:5f:51:43:95:7d:e6:92:b1:c9:fc:66:52:25:b4:
         6c:cd:fb:c4:85:6c:f0:9a:15:33:db:c6:8e:3b:60:6c:f9:42:
         92:21:dd:81:9a:b1:83:50:51:95:fc:62:66:36:14:42:71:f4:
         2f:c7:4e:1a:e5:c7:4e:c6:93:33:76:c7:6a:a2:79:05:0f:20:
         7a:fc:cc:45:56:8f:e6:d7:c8:28:fa:61:df:12:f9:65:05:15:
         f6:41:7f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----