Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3qsW2WhpTs6xD1DrP4Fxf2Yee5otGfw47tHiGqEMHegr/1/323830343a383432343a3a2f33322d3332203d3e20323732323432.roa
File:                     323830343a383432343a3a2f33322d3332203d3e20323732323432.roa (raw, json)
Hash identifier:          FYQM5QpkICTbqyxD9OvRBNdzye4L5YaGoxWQ7zom9OQ=
Subject key identifier:   A3:EB:5F:B3:E9:5B:FE:D8:C3:53:29:89:A9:42:3E:9B:FE:9E:68:26
Certificate issuer:       /CN=38E519DDEE70A7D943E82F69D4B020AC54D3BB31
Certificate serial:       1C2BDDA17E73F5F48E799F18D4D5392A1B1494DF
Authority key identifier: 38:E5:19:DD:EE:70:A7:D9:43:E8:2F:69:D4:B0:20:AC:54:D3:BB:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38E519DDEE70A7D943E82F69D4B020AC54D3BB31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3qsW2WhpTs6xD1DrP4Fxf2Yee5otGfw47tHiGqEMHegr/1/323830343a383432343a3a2f33322d3332203d3e20323732323432.roa
Signing time:             Wed 03 Apr 2024 18:31:46 +0000
ROA not before:           Wed 03 Apr 2024 18:26:46 +0000
ROA not after:            Wed 02 Apr 2025 18:31:46 +0000
asID:                     272242
IP address blocks:        2804:8424::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:2b:dd:a1:7e:73:f5:f4:8e:79:9f:18:d4:d5:39:2a:1b:14:94:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38E519DDEE70A7D943E82F69D4B020AC54D3BB31
        Validity
            Not Before: Apr  3 18:26:46 2024 GMT
            Not After : Apr  2 18:31:46 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b3:ad:be:f2:18:7b:27:45:19:b8:05:b7:a5:
                    b2:43:23:dd:55:4d:9f:f0:13:10:38:2a:67:5a:49:
                    67:06:d4:5e:d2:99:9b:9f:38:d2:2d:83:c1:1c:48:
                    2e:e2:8e:96:18:f0:02:b4:89:a6:3f:65:0f:26:91:
                    46:3d:8a:a7:a9:eb:14:c1:61:b9:19:1c:a2:fa:c5:
                    14:dd:f3:01:1c:e4:cc:f9:f0:76:db:6d:73:63:52:
                    cc:d8:64:9c:81:d3:33:b4:85:e9:59:47:a2:31:10:
                    6a:dd:65:f2:77:01:8c:54:49:d4:c7:e3:9e:83:9a:
                    ac:b6:8a:1e:6b:2c:43:ce:ec:a0:b3:de:de:d8:15:
                    7a:8a:af:45:60:08:2f:76:d6:c4:12:6c:d6:22:6b:
                    b3:80:f4:cf:82:f1:6e:d7:04:03:d0:06:b5:2f:1a:
                    1b:48:9e:23:4b:f8:20:39:58:49:c7:43:39:e1:8b:
                    05:ac:4b:fe:fb:c6:62:d1:87:86:dc:a6:25:ac:9b:
                    f1:e5:4f:66:55:94:1a:fa:06:1d:57:d5:d1:f8:29:
                    54:95:6d:91:53:86:20:b0:62:38:5f:c1:23:f4:a6:
                    1d:5f:15:b1:43:2f:83:16:79:a1:5a:a1:02:3f:d0:
                    e5:7e:3f:d0:57:9d:06:8f:83:6c:9f:26:73:4e:5d:
                    e0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:EB:5F:B3:E9:5B:FE:D8:C3:53:29:89:A9:42:3E:9B:FE:9E:68:26
            X509v3 Authority Key Identifier:
                keyid:38:E5:19:DD:EE:70:A7:D9:43:E8:2F:69:D4:B0:20:AC:54:D3:BB:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3qsW2WhpTs6xD1DrP4Fxf2Yee5otGfw47tHiGqEMHegr/1/38E519DDEE70A7D943E82F69D4B020AC54D3BB31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38E519DDEE70A7D943E82F69D4B020AC54D3BB31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qsW2WhpTs6xD1DrP4Fxf2Yee5otGfw47tHiGqEMHegr/1/323830343a383432343a3a2f33322d3332203d3e20323732323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8424::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:61:bc:56:bc:79:5b:a8:27:60:de:99:6d:95:f1:3a:58:51:
         52:02:f1:29:6b:9c:99:8d:ca:d3:82:3a:e8:87:ff:ff:e5:15:
         83:09:16:bc:02:1b:bf:55:f6:75:2d:64:77:a6:da:b7:b1:bd:
         c4:dd:72:c8:c6:28:6d:01:90:2b:a5:78:d2:c8:2f:9d:4e:f8:
         ca:07:b3:52:67:47:57:79:5e:22:94:eb:dc:4f:8b:09:ee:a6:
         fb:54:d0:76:eb:5b:d5:8a:98:21:2b:c2:03:c5:2f:ae:3c:11:
         d5:04:19:1a:f6:97:1e:eb:74:b0:64:f4:88:fc:34:a8:e8:f0:
         33:bc:e5:73:a5:2d:71:8b:48:a9:d2:7d:17:4a:ae:2a:4c:20:
         6a:d6:5a:f9:6b:ab:6a:74:a0:b3:6a:72:da:d3:b5:7f:12:66:
         a4:c7:a1:f0:90:d7:ad:b1:84:dc:30:01:68:a1:52:08:7e:0e:
         08:85:5b:89:2c:4e:15:09:05:58:89:0a:f3:17:5a:51:3c:dc:
         3f:8e:97:fb:f1:df:7e:ac:7e:c0:e7:e6:31:bd:33:7a:5c:f1:
         b5:c1:e9:88:47:3c:d9:9c:61:d6:22:99:ee:fe:7b:b4:f6:b0:
         ea:fa:61:62:b7:45:82:9c:bf:d7:3b:51:57:e2:aa:13:48:71:
         23:64:63:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----