Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a3a2f33322d3332203d3e20323634393336.roa
File:                     323830343a333033343a3a2f33322d3332203d3e20323634393336.roa (raw, json)
Hash identifier:          GG06tOpL+m4gyzJvwYoAKFpUW2pIGQz9stPflSwP5/Y=
Subject key identifier:   B8:F1:A0:25:BB:46:F4:B2:11:10:69:8F:04:80:EE:1C:7D:73:67:C7
Certificate issuer:       /CN=13FDACDC2F1641AAEF2664C2C19927624122A6A5
Certificate serial:       348CE877C29EDCE31ED26DDECE4E0A9D6B3AFC7A
Authority key identifier: 13:FD:AC:DC:2F:16:41:AA:EF:26:64:C2:C1:99:27:62:41:22:A6:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13FDACDC2F1641AAEF2664C2C19927624122A6A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a3a2f33322d3332203d3e20323634393336.roa
Signing time:             Tue 02 Apr 2024 14:40:20 +0000
ROA not before:           Tue 02 Apr 2024 14:35:20 +0000
ROA not after:            Tue 01 Apr 2025 14:40:20 +0000
asID:                     264936
IP address blocks:        2804:3034::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:8c:e8:77:c2:9e:dc:e3:1e:d2:6d:de:ce:4e:0a:9d:6b:3a:fc:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13FDACDC2F1641AAEF2664C2C19927624122A6A5
        Validity
            Not Before: Apr  2 14:35:20 2024 GMT
            Not After : Apr  1 14:40:20 2025 GMT
        Subject: CN=B8F1A025BB46F4B21110698F0480EE1C7D7367C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ba:91:b0:97:a6:47:29:fa:53:e6:f9:5a:a6:
                    da:11:fa:a6:68:c9:dd:68:45:d6:d7:c5:00:c1:b2:
                    19:62:8c:92:f4:86:45:10:02:54:54:87:8e:cb:32:
                    79:41:18:11:e0:e7:86:51:f6:a0:75:60:44:df:a5:
                    d6:c3:ee:48:a9:4f:9e:76:c9:45:cc:dd:04:ac:91:
                    73:66:93:31:58:34:e3:7c:61:ce:f0:4a:68:86:40:
                    0d:e3:79:a2:e3:e3:10:a1:0b:73:4f:b4:7d:79:e1:
                    8e:da:86:8c:78:c5:d7:9c:e1:e2:58:ff:2c:71:07:
                    d1:c5:36:31:ee:53:60:51:ce:19:d3:71:55:96:9a:
                    56:e3:3a:d0:11:61:d7:22:79:ea:5a:c7:6a:af:91:
                    fa:5f:7a:7a:2e:cd:a9:95:14:77:a8:8a:1c:bb:0b:
                    18:fc:1d:22:8e:8e:4b:8b:19:ec:1b:e9:dc:f7:1c:
                    dd:52:f2:db:d4:8c:ab:5a:6f:7e:ff:df:d9:72:4e:
                    40:65:81:6f:84:ce:47:49:03:23:8e:97:9a:cd:bb:
                    77:b4:fb:74:6c:0b:73:e9:5c:e5:84:cb:9b:4c:5b:
                    f4:b2:2d:aa:1e:99:9b:47:b3:8f:fc:80:c3:e2:43:
                    69:28:4b:55:99:fd:41:d1:ab:d2:d6:10:73:f0:94:
                    98:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F1:A0:25:BB:46:F4:B2:11:10:69:8F:04:80:EE:1C:7D:73:67:C7
            X509v3 Authority Key Identifier:
                keyid:13:FD:AC:DC:2F:16:41:AA:EF:26:64:C2:C1:99:27:62:41:22:A6:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/13FDACDC2F1641AAEF2664C2C19927624122A6A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13FDACDC2F1641AAEF2664C2C19927624122A6A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a3a2f33322d3332203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3034::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:fb:70:29:30:9f:8d:84:b7:2c:31:14:b8:8d:99:cc:7b:41:
         a9:d5:5e:a0:94:30:9e:ee:30:38:28:8e:6e:3e:5b:ba:fb:b5:
         f2:b6:33:bd:6b:44:b7:0d:f8:a3:d3:bf:8e:b7:2d:c2:11:f6:
         02:c9:de:47:b2:cb:67:2b:b1:9f:f2:6d:a8:db:85:80:87:0a:
         82:c0:c5:6f:ed:6f:7c:30:51:4c:9a:75:b8:48:34:9d:27:e6:
         2c:76:02:56:5f:75:3b:4b:c8:cb:54:b8:e4:28:c9:a5:18:a6:
         b5:6a:f2:95:41:74:16:1d:1c:17:54:78:b6:d7:a4:36:4e:2e:
         f6:6a:29:5c:2d:40:b5:66:24:97:0a:89:65:18:5b:3b:c4:58:
         ca:5f:80:86:f4:38:ba:ff:01:e5:e0:6f:62:20:41:06:de:9c:
         f0:44:22:76:cc:3a:44:17:64:81:fc:17:49:92:34:e9:45:27:
         96:70:0d:2b:1b:89:5e:08:36:44:88:a2:15:c8:45:0d:60:34:
         38:cb:1e:bf:1d:aa:a8:03:60:e2:44:c8:64:bf:9e:c3:da:59:
         21:76:63:58:62:53:87:87:fc:24:38:4b:b2:5c:c4:63:e3:44:
         85:7c:51:78:73:19:ab:cf:75:65:79:61:e3:a9:62:b1:96:cc:
         13:17:09:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----