Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2rE5XM5FCkYEzYy8ipKM4i8NiiL4uJGy8s8CKHyqiPkP/0/323830343a376566383a3a2f33322d3332203d3e20323731363538.roa
File:                     323830343a376566383a3a2f33322d3332203d3e20323731363538.roa (raw, json)
Hash identifier:          SqkvfOvWuL9v8j0S/YnzVowZyvMbnldg8MIBfdLok1E=
Subject key identifier:   CD:67:2D:57:10:D0:E6:EB:BA:CE:DB:4F:29:AF:4D:36:51:AE:F3:E8
Certificate issuer:       /CN=161ABBC320A5379368876CB238330293202E742A
Certificate serial:       369A07B72C212D84D15975636C0DD4291F834E16
Authority key identifier: 16:1A:BB:C3:20:A5:37:93:68:87:6C:B2:38:33:02:93:20:2E:74:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/161ABBC320A5379368876CB238330293202E742A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2rE5XM5FCkYEzYy8ipKM4i8NiiL4uJGy8s8CKHyqiPkP/0/323830343a376566383a3a2f33322d3332203d3e20323731363538.roa
Signing time:             Fri 15 Mar 2024 17:41:50 +0000
ROA not before:           Fri 15 Mar 2024 17:36:50 +0000
ROA not after:            Fri 14 Mar 2025 17:41:50 +0000
asID:                     271658
IP address blocks:        2804:7ef8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:9a:07:b7:2c:21:2d:84:d1:59:75:63:6c:0d:d4:29:1f:83:4e:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=161ABBC320A5379368876CB238330293202E742A
        Validity
            Not Before: Mar 15 17:36:50 2024 GMT
            Not After : Mar 14 17:41:50 2025 GMT
        Subject: CN=CD672D5710D0E6EBBACEDB4F29AF4D3651AEF3E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e8:a7:b4:24:b8:80:f1:1d:7e:b9:37:47:ec:
                    2a:ab:ab:27:33:dd:be:f5:18:49:b0:4a:b7:09:b6:
                    2f:8e:fb:c2:7f:6e:b0:65:d2:f1:3c:a8:cc:c1:9b:
                    e9:a1:e1:62:76:a4:15:53:7a:f4:d7:64:7d:82:aa:
                    e6:2f:32:c7:93:77:6b:ca:cb:bb:1e:53:37:63:e1:
                    5e:d4:3a:0b:f1:45:77:64:b0:f8:da:8f:27:5c:1c:
                    73:1e:72:b6:c9:1c:7e:bb:af:5f:02:8e:78:79:e5:
                    a2:2a:36:fc:4a:37:fc:bd:c0:74:61:e9:5e:b7:d1:
                    64:9a:f0:22:be:19:4f:26:fc:e8:3d:9f:51:5e:82:
                    64:1f:4e:d2:f0:87:18:07:78:bd:dd:0d:9d:7c:b8:
                    50:95:39:16:2e:2c:2f:16:32:38:f6:35:2a:57:f3:
                    2d:35:48:49:ce:41:9f:d7:b8:19:e6:44:89:0c:87:
                    f3:b4:e9:de:6d:e4:ec:0b:6d:b5:97:10:c4:5b:ed:
                    5d:2c:e3:92:f2:6a:1f:eb:27:4c:50:24:74:6f:6d:
                    ae:3d:51:07:cd:e6:cc:02:1a:21:b3:06:84:2f:24:
                    53:3b:b0:5a:97:1c:83:af:1e:21:4c:6c:e2:52:12:
                    9e:b0:52:6e:60:18:b4:ae:77:d0:28:6c:a4:a5:62:
                    b2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:67:2D:57:10:D0:E6:EB:BA:CE:DB:4F:29:AF:4D:36:51:AE:F3:E8
            X509v3 Authority Key Identifier:
                keyid:16:1A:BB:C3:20:A5:37:93:68:87:6C:B2:38:33:02:93:20:2E:74:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2rE5XM5FCkYEzYy8ipKM4i8NiiL4uJGy8s8CKHyqiPkP/0/161ABBC320A5379368876CB238330293202E742A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/161ABBC320A5379368876CB238330293202E742A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2rE5XM5FCkYEzYy8ipKM4i8NiiL4uJGy8s8CKHyqiPkP/0/323830343a376566383a3a2f33322d3332203d3e20323731363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ef8::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:73:ad:90:14:b6:4b:c7:77:9f:77:25:fb:f2:18:6a:7a:3d:
         2f:d0:0e:c6:cb:34:ef:84:b9:7c:4d:a0:7c:93:c9:39:86:94:
         79:95:dc:a3:50:04:97:1a:d3:9b:5a:30:29:9a:27:fc:1e:90:
         c7:a2:0a:36:02:d4:98:45:ec:1f:c3:4a:33:42:7c:14:20:da:
         ed:2e:97:09:b6:dc:90:41:c2:2a:8f:75:e1:03:a5:71:f9:9c:
         97:c8:c3:32:e2:60:cf:c0:e0:d4:34:c2:d0:f1:8f:f2:59:ec:
         d5:58:06:f3:6e:d0:62:2f:e8:8c:98:1b:1c:df:d5:87:4b:6d:
         75:9f:ed:9c:fe:45:61:7c:55:2a:3f:74:14:21:47:9d:ab:57:
         1e:3d:a1:1a:2a:c0:3a:57:0e:2b:35:92:2b:85:9e:1a:d5:ec:
         a8:2d:b1:db:7f:40:2e:74:11:01:8d:34:9e:2c:7b:8e:2b:af:
         3e:ed:da:82:72:88:c8:f7:ec:8f:69:6f:bc:3a:bb:28:f7:2a:
         cc:83:0d:00:02:45:06:b3:aa:b8:49:e7:84:3e:ec:91:4c:98:
         18:8c:de:8b:5f:a2:76:97:7b:65:87:56:4f:de:6b:57:ef:88:
         3d:cb:5a:0c:99:98:a0:38:e5:cb:2e:6e:a9:32:d0:8d:3a:d9:
         e5:1c:56:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----