Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/323830343a333864633a3a2f33322d3332203d3e20323636353036.roa
File:                     323830343a333864633a3a2f33322d3332203d3e20323636353036.roa (raw, json)
Hash identifier:          0L1/nqYI1gtmmTJ37tfRu5ZsJOu4ufFLQ5lxZyLlcNU=
Subject key identifier:   19:23:B0:4F:FB:80:44:6D:D6:3B:F1:9C:29:EF:01:23:9D:5D:99:50
Certificate issuer:       /CN=CD595B734685C1E1321F4AE24C925EA2C710159F
Certificate serial:       3B263CEBAB39653CEB87A55F80DA3CC390F9DB86
Authority key identifier: CD:59:5B:73:46:85:C1:E1:32:1F:4A:E2:4C:92:5E:A2:C7:10:15:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD595B734685C1E1321F4AE24C925EA2C710159F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/323830343a333864633a3a2f33322d3332203d3e20323636353036.roa
Signing time:             Mon 19 Feb 2024 16:17:16 +0000
ROA not before:           Mon 19 Feb 2024 16:12:16 +0000
ROA not after:            Mon 17 Feb 2025 16:17:16 +0000
asID:                     266506
IP address blocks:        2804:38dc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:26:3c:eb:ab:39:65:3c:eb:87:a5:5f:80:da:3c:c3:90:f9:db:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD595B734685C1E1321F4AE24C925EA2C710159F
        Validity
            Not Before: Feb 19 16:12:16 2024 GMT
            Not After : Feb 17 16:17:16 2025 GMT
        Subject: CN=1923B04FFB80446DD63BF19C29EF01239D5D9950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9a:fd:44:ed:3a:09:50:fb:af:f2:a6:e8:34:
                    28:31:18:9d:80:7c:0a:57:c2:2e:2f:8a:f3:b8:97:
                    3d:c6:b7:14:7b:e1:57:1b:ca:9b:45:90:4c:3e:10:
                    9f:07:88:26:03:93:bf:64:59:04:50:fd:bf:65:93:
                    32:93:73:06:02:9b:33:0f:ad:6f:60:8f:7b:2e:7b:
                    61:b5:6d:8b:69:9c:fa:a2:43:ff:66:9b:f8:63:a9:
                    22:79:92:24:11:4b:2c:88:2e:b5:c5:9e:3e:0b:c3:
                    8e:9b:28:b7:ba:15:98:46:ec:17:f0:3a:18:a6:95:
                    a7:b6:41:dc:87:7d:d4:51:9b:3a:a7:57:c5:03:cf:
                    aa:5b:de:d0:be:37:50:a4:5a:d0:91:8c:79:71:d1:
                    25:98:03:7f:c8:b8:ea:11:8e:e6:21:c9:83:f3:a0:
                    74:f4:bc:9f:f6:60:5d:89:22:ee:0f:ae:21:11:1c:
                    9c:49:8e:8b:7a:6d:f4:0d:91:72:9e:c7:8b:fb:47:
                    0e:95:20:1b:15:e7:a8:90:ce:c3:96:7d:32:92:1a:
                    c5:8f:61:96:4e:2f:e1:2b:f0:6b:62:3a:6d:41:8e:
                    7e:a7:97:12:44:69:c1:de:08:b8:66:6d:90:77:b5:
                    8f:f2:88:79:9f:4a:c6:3e:36:48:f4:43:6e:1d:03:
                    92:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:23:B0:4F:FB:80:44:6D:D6:3B:F1:9C:29:EF:01:23:9D:5D:99:50
            X509v3 Authority Key Identifier:
                keyid:CD:59:5B:73:46:85:C1:E1:32:1F:4A:E2:4C:92:5E:A2:C7:10:15:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/CD595B734685C1E1321F4AE24C925EA2C710159F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD595B734685C1E1321F4AE24C925EA2C710159F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/323830343a333864633a3a2f33322d3332203d3e20323636353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:38dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:17:78:4a:1c:96:38:e7:34:27:fe:dd:66:2e:65:7a:fd:49:
         fd:b2:97:f4:fe:c2:90:08:e5:99:fb:43:27:ac:c0:f6:27:4c:
         f4:86:20:20:b3:be:20:82:32:6a:7d:62:e2:58:a8:7f:40:d0:
         d0:6a:4a:40:d1:47:1d:33:50:45:04:8a:18:c9:b7:81:ee:8d:
         40:81:d6:76:d7:02:49:50:e0:15:29:ba:b8:10:42:c4:66:82:
         58:9c:66:cb:e2:6a:7f:e4:b2:1c:a6:c9:9f:78:a2:a1:f6:21:
         8c:fd:c4:3b:d2:20:ca:c9:70:ef:ff:32:da:7e:cc:44:43:2a:
         af:36:69:c8:4b:96:85:dc:7b:5a:45:97:38:de:12:52:2f:0e:
         50:4d:40:f8:79:3d:46:e2:f3:ac:09:7d:d2:6e:af:e4:52:ce:
         c1:12:f8:30:d9:df:0b:74:d6:05:d5:cf:84:b6:c7:07:62:67:
         fa:67:3d:44:74:7f:af:9b:a2:44:c3:e8:3d:46:8b:f0:d9:1f:
         d6:08:23:f5:8d:48:88:21:de:c1:31:32:52:7a:ed:4c:98:06:
         b8:8f:df:70:a4:f9:9b:4a:93:b6:65:50:89:c9:96:b6:d3:63:
         40:41:30:82:54:a7:02:a4:2b:b0:e4:3e:b6:2e:c8:04:2d:7a:
         3d:d3:82:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----