Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/1/323830343a386535303a3a2f33322d313238203d3e20323733343137.roa
File:                     323830343a386535303a3a2f33322d313238203d3e20323733343137.roa (raw, json)
Hash identifier:          CqFcfhFbLnJiG5w2UufiHEPp6OwOjrrHVsQEPqAp6KY=
Subject key identifier:   9F:77:8C:9B:B4:68:F1:52:3A:EE:83:DD:C2:30:4E:5D:E5:22:58:BF
Certificate issuer:       /CN=6288854C1B45D74756C64B08ECA8E456AE06FB17
Certificate serial:       4C753908EB805E19CC0D1353656DBFA5DFA541B7
Authority key identifier: 62:88:85:4C:1B:45:D7:47:56:C6:4B:08:EC:A8:E4:56:AE:06:FB:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6288854C1B45D74756C64B08ECA8E456AE06FB17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/1/323830343a386535303a3a2f33322d313238203d3e20323733343137.roa
Signing time:             Thu 04 Apr 2024 18:33:57 +0000
ROA not before:           Thu 04 Apr 2024 18:28:57 +0000
ROA not after:            Thu 03 Apr 2025 18:33:57 +0000
asID:                     273417
IP address blocks:        2804:8e50::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:75:39:08:eb:80:5e:19:cc:0d:13:53:65:6d:bf:a5:df:a5:41:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6288854C1B45D74756C64B08ECA8E456AE06FB17
        Validity
            Not Before: Apr  4 18:28:57 2024 GMT
            Not After : Apr  3 18:33:57 2025 GMT
        Subject: CN=9F778C9BB468F1523AEE83DDC2304E5DE52258BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b6:f4:59:1b:79:09:75:81:01:a7:c8:f8:72:
                    f8:3b:35:2d:90:56:2d:21:66:34:e8:ac:74:39:2c:
                    0f:cc:49:37:56:83:f2:8c:5f:c7:6d:18:19:30:cf:
                    b5:be:92:6b:cf:78:82:fc:fe:f3:49:6a:fc:dd:86:
                    a7:4e:7f:3e:e0:1a:ed:02:4d:c2:4e:b4:ba:de:24:
                    cf:72:6e:eb:60:e0:32:03:70:77:72:ae:b5:ff:18:
                    7d:d8:b7:6a:73:2b:8c:63:2c:86:ae:df:86:41:7c:
                    83:81:84:b5:25:3d:39:14:7e:d3:55:96:ec:fc:2f:
                    0d:e5:9d:f1:94:4b:ef:84:4c:6c:84:d8:f5:7d:e4:
                    a5:a9:fa:6d:65:14:a9:cc:6d:19:43:ed:55:85:d2:
                    fc:68:79:00:10:b4:1c:32:f9:65:3a:33:66:24:22:
                    75:b1:42:6d:21:b3:44:47:f0:91:99:18:39:a7:4e:
                    cd:09:d4:3d:80:7e:7d:64:36:df:39:7b:ed:f8:09:
                    89:31:89:26:66:80:a0:d4:18:2f:9a:fa:52:99:c0:
                    aa:15:bc:92:30:5e:4d:21:2b:24:d9:f7:d8:04:ca:
                    dc:f6:8f:89:f1:56:f1:ea:1d:22:a1:8a:21:b6:1a:
                    d2:90:b6:6e:ca:42:87:a9:a2:29:61:70:d3:e5:c3:
                    fc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:77:8C:9B:B4:68:F1:52:3A:EE:83:DD:C2:30:4E:5D:E5:22:58:BF
            X509v3 Authority Key Identifier:
                keyid:62:88:85:4C:1B:45:D7:47:56:C6:4B:08:EC:A8:E4:56:AE:06:FB:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/1/6288854C1B45D74756C64B08ECA8E456AE06FB17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6288854C1B45D74756C64B08ECA8E456AE06FB17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/1/323830343a386535303a3a2f33322d313238203d3e20323733343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e50::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:05:fd:a5:82:1f:05:72:96:40:60:e8:2c:a1:ba:81:01:55:
         ab:4e:0d:9c:b2:2d:ed:0f:5f:06:a8:93:1f:10:d1:a7:c3:ba:
         d6:4e:f9:94:26:f8:45:11:e4:c5:10:27:4b:34:ab:02:43:32:
         e5:c4:6d:77:c3:3d:ce:fc:39:06:e5:61:e7:4b:99:21:30:02:
         04:5d:56:ff:0f:97:a7:a7:c9:8b:71:d0:c2:85:aa:54:93:8c:
         a7:3a:39:98:07:94:cd:7c:8d:dd:58:cb:ad:5e:6d:8a:19:72:
         4f:82:5c:41:32:c0:e0:f8:fb:c0:89:f7:8c:a7:ca:84:52:f2:
         66:82:6f:f9:73:15:81:30:59:8e:22:06:a3:6c:0f:e7:de:d3:
         15:db:96:4e:91:78:38:c1:81:49:85:4b:d6:32:ee:c5:b1:80:
         d0:79:ae:45:0b:07:ef:c2:5f:8d:e1:2e:24:65:b4:41:a7:f4:
         f8:15:1d:64:e4:af:c2:a9:f5:93:3e:ca:3b:0e:f7:45:e7:c2:
         94:44:58:2b:a0:09:d4:77:0d:6d:1e:7d:f9:5f:2a:30:15:d7:
         c1:6f:a7:30:7a:c2:25:6d:74:0e:b1:82:16:05:c9:6a:31:b2:
         ad:11:26:c6:38:9b:dc:fa:19:8f:b4:db:4f:ee:6f:6f:55:52:
         6c:85:a5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----