Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/323830343a333136303a3a2f33322d3332203d3e20323635303130.roa
File:                     323830343a333136303a3a2f33322d3332203d3e20323635303130.roa (raw, json)
Hash identifier:          oWGKZyKt/3r0Gq+R4njofiW9Asl7B8wqdljgWNfx3JY=
Subject key identifier:   E0:DC:DC:FB:56:79:AF:DE:65:44:E7:4F:C4:F4:9F:DA:03:EF:20:6D
Certificate issuer:       /CN=687F395543B5D15C9C42523E96B842CE61DD4B90
Certificate serial:       03C9CBBE9B9E4EB76C82BF84FDCEC4023828E32B
Authority key identifier: 68:7F:39:55:43:B5:D1:5C:9C:42:52:3E:96:B8:42:CE:61:DD:4B:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687F395543B5D15C9C42523E96B842CE61DD4B90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/323830343a333136303a3a2f33322d3332203d3e20323635303130.roa
Signing time:             Thu 04 Apr 2024 06:03:48 +0000
ROA not before:           Thu 04 Apr 2024 05:58:48 +0000
ROA not after:            Thu 03 Apr 2025 06:03:48 +0000
asID:                     265010
IP address blocks:        2804:3160::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:c9:cb:be:9b:9e:4e:b7:6c:82:bf:84:fd:ce:c4:02:38:28:e3:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687F395543B5D15C9C42523E96B842CE61DD4B90
        Validity
            Not Before: Apr  4 05:58:48 2024 GMT
            Not After : Apr  3 06:03:48 2025 GMT
        Subject: CN=E0DCDCFB5679AFDE6544E74FC4F49FDA03EF206D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c1:fb:2c:a6:55:4a:a4:e1:c4:f9:25:74:a0:
                    29:8f:99:88:b5:48:10:e0:fe:78:5b:6e:e0:1d:e0:
                    1f:f2:ad:6e:38:96:c8:bf:fb:7a:91:fa:62:4b:47:
                    ea:0a:81:9b:c3:b0:62:c6:98:a4:51:b1:a6:61:b9:
                    f9:25:7b:35:d4:f0:88:92:ac:9e:20:e0:d7:42:9f:
                    99:c3:11:c5:60:44:49:67:c3:34:97:21:08:a9:ba:
                    b1:41:70:3d:67:20:f3:cf:7a:c7:70:cc:9f:a4:20:
                    20:14:60:c3:fa:3e:33:b8:38:d8:50:78:0d:49:fa:
                    47:e6:0e:18:3d:e3:cc:99:d7:66:58:29:a6:8a:da:
                    6a:45:20:f1:58:70:f9:9a:82:a5:8e:53:e0:90:8e:
                    73:e4:b5:22:d4:43:eb:40:7e:4e:b8:3b:c8:34:0e:
                    8f:60:69:b7:71:a0:6b:9b:fc:74:ac:24:f0:2a:b0:
                    d6:ec:50:24:38:76:e4:c8:52:28:76:61:55:f6:56:
                    e9:77:ea:7a:f2:42:84:d5:a4:86:b2:6b:2b:62:3f:
                    5f:8e:3c:39:2b:d0:c4:c0:31:2a:82:2d:a1:17:7b:
                    81:f1:42:f0:ed:14:95:6f:f8:62:b4:66:95:11:20:
                    df:5a:79:5d:ac:fd:73:cb:71:d6:0a:cd:a0:9f:ea:
                    94:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:DC:DC:FB:56:79:AF:DE:65:44:E7:4F:C4:F4:9F:DA:03:EF:20:6D
            X509v3 Authority Key Identifier:
                keyid:68:7F:39:55:43:B5:D1:5C:9C:42:52:3E:96:B8:42:CE:61:DD:4B:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/687F395543B5D15C9C42523E96B842CE61DD4B90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687F395543B5D15C9C42523E96B842CE61DD4B90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/323830343a333136303a3a2f33322d3332203d3e20323635303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3160::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:f9:2e:79:15:43:81:c9:5e:bc:f1:48:a3:ed:ee:6a:4f:ae:
         50:93:e0:f4:9c:f2:81:bc:31:31:e0:ae:f4:5e:11:2b:ae:55:
         74:a6:0b:b9:5a:fb:57:01:a9:4a:2a:1b:20:64:f3:3b:ae:8d:
         da:a6:99:a2:72:3d:b7:78:69:c1:37:ba:26:44:b6:a4:1a:5d:
         23:92:e0:b0:b6:ad:02:81:e8:7a:b8:ed:3e:4e:ec:37:17:47:
         e3:c8:d8:18:0a:73:45:1c:76:82:08:6c:30:0c:0c:be:0c:33:
         d8:98:db:44:4f:6c:b7:a3:aa:1d:27:83:95:28:53:e1:98:1d:
         9c:d5:1d:c9:06:c3:a6:ea:9b:8a:e3:c7:24:2a:58:ad:0b:35:
         43:64:ca:4e:42:c6:81:49:43:1d:ff:27:9e:09:67:09:95:fb:
         d1:32:ad:ee:ad:8c:01:12:3b:01:8c:50:50:df:3f:4e:b6:18:
         4f:d6:9a:1c:87:cb:81:d2:e2:1e:6c:f8:2a:93:7c:01:3c:02:
         0e:47:5b:70:97:2b:0d:f5:cd:b0:8d:3b:e0:c5:13:11:43:ec:
         86:c3:60:3d:87:7e:00:e9:75:da:f0:a9:a5:d4:3d:ca:8b:55:
         5a:bd:c4:1b:dd:ab:28:5d:94:6a:19:f8:2f:8b:f7:48:6e:98:
         cd:f5:91:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----