Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a343637383a343030303a3a2f33342d3334203d3e20323532343934.roa
File:                     323830343a343637383a343030303a3a2f33342d3334203d3e20323532343934.roa (raw, json)
Hash identifier:          f8/dQqBozzOEALkIpUROb+1anUQwa3u1z+0t5RGE8G4=
Subject key identifier:   7E:23:AE:85:F5:20:01:C7:B7:B3:97:7F:64:1A:5C:DD:74:15:65:55
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       10824896E547F16E878E9B62684CB4636D3B0A58
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a343637383a343030303a3a2f33342d3334203d3e20323532343934.roa
Signing time:             Sat 24 Feb 2024 08:56:10 +0000
ROA not before:           Sat 24 Feb 2024 08:51:10 +0000
ROA not after:            Mon 24 Feb 2025 08:56:10 +0000
asID:                     252494
IP address blocks:        2804:4678:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:82:48:96:e5:47:f1:6e:87:8e:9b:62:68:4c:b4:63:6d:3b:0a:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Feb 24 08:51:10 2024 GMT
            Not After : Feb 24 08:56:10 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5f:0c:0e:34:11:3e:51:36:4f:59:e4:6b:4b:
                    55:1e:a1:ac:e0:d7:d1:d9:e7:be:c4:1c:0f:39:9b:
                    5f:a5:e9:96:97:21:9c:2e:9a:51:ca:78:68:9c:84:
                    16:0c:a1:03:d8:09:ea:72:be:4f:6d:c8:b8:bf:51:
                    4a:58:55:9f:a6:e6:25:84:d4:f6:3a:97:89:b3:5f:
                    61:1f:de:c6:26:51:a7:4b:41:aa:de:3b:ce:ac:71:
                    3c:84:1d:cf:ba:44:42:69:df:8e:18:25:b0:30:b4:
                    35:5f:3c:c4:7b:b7:8f:d3:0b:8b:bc:ff:f2:14:5c:
                    0f:e0:da:6c:e5:33:80:89:3d:9b:0e:2c:4d:d8:0f:
                    89:81:c7:96:a1:53:65:1c:58:77:9c:99:70:a6:de:
                    8c:ee:38:ae:54:d4:c8:a2:e3:c4:49:c0:7b:76:b6:
                    84:65:c9:62:2f:ef:38:67:8f:d0:97:32:b0:20:87:
                    c1:cf:6f:de:60:2d:54:fc:c1:c3:08:f8:d1:83:1e:
                    26:22:c0:1a:e5:d0:40:8a:39:16:db:30:4c:94:b2:
                    ac:9b:b3:40:9d:94:1a:1d:4a:da:0c:b7:1d:64:7c:
                    d8:0f:db:68:f2:57:f7:55:1f:97:78:ab:b5:6a:46:
                    3c:5d:66:df:da:49:bf:01:d7:39:74:c0:15:61:bf:
                    45:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:23:AE:85:F5:20:01:C7:B7:B3:97:7F:64:1A:5C:DD:74:15:65:55
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a343637383a343030303a3a2f33342d3334203d3e20323532343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4678:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         35:4e:4a:73:c8:da:7c:0d:3b:a2:8e:7a:fd:0b:90:1f:6b:d7:
         a9:c7:2d:b1:09:c1:08:11:c9:d9:5f:40:79:84:fa:a7:19:1f:
         2e:f1:aa:9e:f3:ec:c2:5e:9f:cb:76:5b:80:c8:39:97:e6:ae:
         bb:6a:a3:fd:64:c3:9d:24:e2:b7:89:23:10:0a:f9:6f:6c:4d:
         96:1d:32:17:3e:a5:0a:6c:60:36:63:09:d7:7f:4a:52:69:86:
         21:99:58:2e:85:9d:50:3c:34:76:0f:17:6e:cb:fc:6b:bd:5a:
         85:1c:6c:47:3e:89:ea:24:15:86:42:63:d5:f6:77:1b:09:64:
         74:ba:03:bd:ea:34:40:e0:dd:a9:82:44:7b:4f:c3:34:1d:b1:
         b3:c3:a9:8c:9b:b2:60:5a:99:e5:cc:fa:e2:b8:fb:9b:b1:fb:
         01:10:34:e3:f7:64:65:3c:87:38:6b:cb:d8:89:33:c2:0b:e8:
         eb:f5:7a:b1:ad:8f:7b:fd:33:f0:51:c5:99:aa:53:4f:30:75:
         00:42:10:50:a1:ac:09:f9:7d:ca:52:b9:f4:97:21:63:92:b0:
         a1:86:7a:d7:a0:92:fa:cf:ed:8d:48:19:1f:e7:a7:89:81:ce:
         5a:24:b1:20:30:58:d6:89:91:0c:11:a7:4a:a4:2c:0d:59:30:
         73:cb:c9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----