Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/323830343a323164383a3a2f33322d3332203d3e20323634353737.roa
File:                     323830343a323164383a3a2f33322d3332203d3e20323634353737.roa (raw, json)
Hash identifier:          +qGijBbA8D509yjZQ1mTKHO1+MIcsP0oYWRSl0RKMB4=
Subject key identifier:   36:34:46:E6:E6:23:4E:95:D4:6D:E7:26:62:E3:2B:56:D9:2A:72:82
Certificate issuer:       /CN=C0128AFEEAFC57EF19FBC626FAAC420747560569
Certificate serial:       66D58B24EA6A07BE9FB4B8210A8A2E880D6E3BC6
Authority key identifier: C0:12:8A:FE:EA:FC:57:EF:19:FB:C6:26:FA:AC:42:07:47:56:05:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C0128AFEEAFC57EF19FBC626FAAC420747560569.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/323830343a323164383a3a2f33322d3332203d3e20323634353737.roa
Signing time:             Wed 24 Jan 2024 13:33:43 +0000
ROA not before:           Wed 24 Jan 2024 13:28:43 +0000
ROA not after:            Wed 22 Jan 2025 13:33:43 +0000
asID:                     264577
IP address blocks:        2804:21d8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:d5:8b:24:ea:6a:07:be:9f:b4:b8:21:0a:8a:2e:88:0d:6e:3b:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0128AFEEAFC57EF19FBC626FAAC420747560569
        Validity
            Not Before: Jan 24 13:28:43 2024 GMT
            Not After : Jan 22 13:33:43 2025 GMT
        Subject: CN=363446E6E6234E95D46DE72662E32B56D92A7282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8e:47:48:ee:e4:1b:5b:a8:9b:9a:6a:ba:a3:
                    98:08:7d:81:c1:20:c8:bc:ee:0e:f2:75:05:56:06:
                    a6:9e:8a:e5:07:64:a5:a9:3e:46:37:96:11:8b:45:
                    68:79:5b:df:31:0f:9e:66:46:3b:8b:7a:f7:9e:0b:
                    ba:46:14:49:b0:18:ae:4f:f6:16:7f:88:e4:89:c4:
                    d3:0e:80:89:5c:0b:c9:03:66:f9:ed:56:cc:e9:6e:
                    58:ef:b6:d1:4e:a6:c2:df:6a:22:72:b7:72:1a:f6:
                    9c:6d:d0:fa:64:e0:d6:94:83:4e:e8:e5:5e:3b:c5:
                    66:8d:9d:a9:19:17:cb:98:00:55:b8:31:d7:6d:11:
                    72:93:1f:d9:bd:9b:73:92:70:b9:87:77:55:7d:18:
                    66:7c:26:5b:e0:05:44:7b:0f:2e:2d:a4:91:23:b3:
                    27:9d:9c:4b:3e:8c:18:50:f3:9b:8a:cc:99:b8:b1:
                    43:39:1e:0d:ad:ae:fb:62:7c:d8:f5:39:3b:1a:55:
                    04:49:50:92:3a:d4:1c:3c:79:e9:8e:4c:36:03:a6:
                    f4:b7:55:32:b4:42:7f:c0:fe:b2:44:ff:68:e7:77:
                    ff:44:3a:5f:43:9c:3a:d7:79:1b:5f:58:7d:76:f9:
                    80:95:4b:f9:a2:61:87:8a:20:81:12:06:bd:07:32:
                    56:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:34:46:E6:E6:23:4E:95:D4:6D:E7:26:62:E3:2B:56:D9:2A:72:82
            X509v3 Authority Key Identifier:
                keyid:C0:12:8A:FE:EA:FC:57:EF:19:FB:C6:26:FA:AC:42:07:47:56:05:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/C0128AFEEAFC57EF19FBC626FAAC420747560569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C0128AFEEAFC57EF19FBC626FAAC420747560569.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/323830343a323164383a3a2f33322d3332203d3e20323634353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:21d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:03:74:63:ad:18:50:b0:ef:e1:1c:33:24:94:f1:d8:08:77:
         09:a6:f4:02:b8:f3:78:6d:14:7d:13:a0:55:eb:ed:89:0f:ec:
         2a:0d:d5:62:f3:88:33:9f:92:d1:d3:bc:c9:74:40:eb:1f:ce:
         d1:c5:99:d5:5b:74:6e:f5:7d:42:25:82:bc:1d:0a:ba:61:12:
         82:0b:e6:62:1d:31:95:dd:e8:d8:09:94:c6:7a:34:39:c5:b8:
         02:ee:bb:86:b1:a8:ed:5a:a6:3f:1a:ef:36:e0:29:30:9a:eb:
         08:dd:c4:dc:95:15:de:8f:a1:16:11:1e:93:25:82:7f:e5:fa:
         96:84:31:3e:d4:17:2c:50:84:04:c1:75:20:f2:a4:44:bc:07:
         32:a0:33:96:ce:c1:bc:5f:75:92:b0:cf:fc:c9:a0:43:23:0e:
         e4:83:96:73:37:e6:d4:31:56:dd:1f:66:2e:f5:b7:68:de:94:
         eb:36:87:52:aa:7f:05:b4:16:26:e2:1b:71:12:a3:35:a5:64:
         ef:7b:67:ae:90:73:80:7b:a9:d2:ee:93:16:ce:e2:cb:ab:57:
         f4:33:0b:18:0d:7d:c6:c8:da:6c:ee:7a:3f:21:02:de:fd:67:
         23:52:24:ee:1c:68:54:dc:35:62:be:06:15:9d:2a:ec:9a:1e:
         c0:d0:14:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----