Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/323830343a333336303a3a2f34382d3438203d3e20323632373235.roa
File:                     323830343a333336303a3a2f34382d3438203d3e20323632373235.roa (raw, json)
Hash identifier:          KTiBKjIyPnTXnP7hIaEcZWVNKX3j8o2w9Ng12+YmHoQ=
Subject key identifier:   4C:26:73:02:E3:71:07:D6:08:19:B2:D7:AA:03:98:93:84:1A:44:FB
Certificate issuer:       /CN=20DE0E6E3D621F83173025848A78216A75E502CC
Certificate serial:       390354448DCCAC5ACE9E689243ED1CBBEB523AFA
Authority key identifier: 20:DE:0E:6E:3D:62:1F:83:17:30:25:84:8A:78:21:6A:75:E5:02:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DE0E6E3D621F83173025848A78216A75E502CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/323830343a333336303a3a2f34382d3438203d3e20323632373235.roa
Signing time:             Mon 11 Nov 2024 21:01:49 +0000
ROA not before:           Mon 11 Nov 2024 20:56:49 +0000
ROA not after:            Mon 10 Nov 2025 21:01:49 +0000
asID:                     262725
IP address blocks:        2804:3360::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:03:54:44:8d:cc:ac:5a:ce:9e:68:92:43:ed:1c:bb:eb:52:3a:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DE0E6E3D621F83173025848A78216A75E502CC
        Validity
            Not Before: Nov 11 20:56:49 2024 GMT
            Not After : Nov 10 21:01:49 2025 GMT
        Subject: CN=3082010A0282010100C8CDBB81E1E6011FD9A18B92F10DBC65D16AC2D2F47A98A5EFA77AD7E4FB3845CD1BBA77AC479C73FB3A31381C8EE87D11449D07128A45C5992067F68E30783E16698FD6F3C0925A178573166753E4FCD7CA957F934B56F7A32CF9C1A988B45F7DA6B0D70E9E3EF8D880CAB5D12A2683A6D1C9CE9669F7A2176D8B036EB4B049D662515E7F70F142B8E2514682E99D2CFBF176DDBF18B0499097A40A6303A93F10EBF4BC29D7605FAA58AA45D9AC702984C9608B63C80DBBA22B795318EE77F412B931387CEF62E1A82E76EDAEBE2FD05CB8D8EE75B935E345640EACA58156B56D5F2B9071A3493F56388164E905F33FC742359C1AB17C6B3DAD19EC873A28030203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cd:bb:81:e1:e6:01:1f:d9:a1:8b:92:f1:0d:
                    bc:65:d1:6a:c2:d2:f4:7a:98:a5:ef:a7:7a:d7:e4:
                    fb:38:45:cd:1b:ba:77:ac:47:9c:73:fb:3a:31:38:
                    1c:8e:e8:7d:11:44:9d:07:12:8a:45:c5:99:20:67:
                    f6:8e:30:78:3e:16:69:8f:d6:f3:c0:92:5a:17:85:
                    73:16:67:53:e4:fc:d7:ca:95:7f:93:4b:56:f7:a3:
                    2c:f9:c1:a9:88:b4:5f:7d:a6:b0:d7:0e:9e:3e:f8:
                    d8:80:ca:b5:d1:2a:26:83:a6:d1:c9:ce:96:69:f7:
                    a2:17:6d:8b:03:6e:b4:b0:49:d6:62:51:5e:7f:70:
                    f1:42:b8:e2:51:46:82:e9:9d:2c:fb:f1:76:dd:bf:
                    18:b0:49:90:97:a4:0a:63:03:a9:3f:10:eb:f4:bc:
                    29:d7:60:5f:aa:58:aa:45:d9:ac:70:29:84:c9:60:
                    8b:63:c8:0d:bb:a2:2b:79:53:18:ee:77:f4:12:b9:
                    31:38:7c:ef:62:e1:a8:2e:76:ed:ae:be:2f:d0:5c:
                    b8:d8:ee:75:b9:35:e3:45:64:0e:ac:a5:81:56:b5:
                    6d:5f:2b:90:71:a3:49:3f:56:38:81:64:e9:05:f3:
                    3f:c7:42:35:9c:1a:b1:7c:6b:3d:ad:19:ec:87:3a:
                    28:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:26:73:02:E3:71:07:D6:08:19:B2:D7:AA:03:98:93:84:1A:44:FB
            X509v3 Authority Key Identifier:
                keyid:20:DE:0E:6E:3D:62:1F:83:17:30:25:84:8A:78:21:6A:75:E5:02:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/20DE0E6E3D621F83173025848A78216A75E502CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DE0E6E3D621F83173025848A78216A75E502CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/323830343a333336303a3a2f34382d3438203d3e20323632373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3360::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:d8:f8:c6:c1:78:84:62:47:45:5b:8e:02:20:93:dc:0e:57:
         db:a1:c7:c1:f0:88:f2:67:90:cc:18:8f:3f:ce:fa:99:72:2d:
         67:db:c4:47:77:bd:84:12:5f:11:7f:5d:fe:f0:7a:d9:d5:9e:
         a0:2a:25:06:91:17:c4:6d:55:64:b5:52:c3:a0:4c:b5:80:3f:
         3d:50:a9:b0:04:40:24:45:af:f4:36:c1:5b:71:3f:70:50:7b:
         04:41:d5:8b:73:71:3c:9a:dc:09:e4:ba:e1:65:8d:bb:e9:42:
         ca:ee:a3:ba:0d:a8:32:12:e9:40:fd:ea:29:84:63:1a:4d:01:
         ac:2b:d4:04:35:9a:73:d3:28:95:79:39:65:70:0e:f1:42:e5:
         e6:db:ae:22:c9:95:85:45:84:73:d1:04:4e:14:b4:32:e7:fb:
         5d:48:90:80:28:cf:1b:ab:79:c6:91:5a:55:f0:df:61:f7:42:
         be:ed:81:55:81:87:c2:6a:f5:c6:a6:15:16:42:5d:ba:10:4c:
         d6:0b:4c:12:f4:0f:8f:c1:79:89:ab:0a:21:13:49:4b:1c:4f:
         29:d7:9e:34:a6:cf:f0:17:03:31:7e:5a:48:d6:24:27:39:35:
         23:98:15:84:d7:70:86:1a:64:0d:9f:99:09:3a:81:aa:e5:7f:
         9c:fc:4e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----