Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a3230303a3a2f34312d3431203d3e20323632343934.roa
File:                     323830343a6164383a3230303a3a2f34312d3431203d3e20323632343934.roa (raw, json)
Hash identifier:          vDTCAhnY8qHUu7Tmtrc0CviYingqeKbu3741osOcMxo=
Subject key identifier:   70:8A:D5:31:BE:9C:90:8A:5E:44:6D:EC:CF:9F:F1:9C:A9:86:FE:F5
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       5743B27ABDC09031787EF9ABFC22B8B16CEE5C62
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a3230303a3a2f34312d3431203d3e20323632343934.roa
Signing time:             Sat 24 Feb 2024 01:12:50 +0000
ROA not before:           Sat 24 Feb 2024 01:07:50 +0000
ROA not after:            Mon 24 Feb 2025 01:12:50 +0000
asID:                     262494
IP address blocks:        2804:ad8:200::/41 maxlen: 41

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:43:b2:7a:bd:c0:90:31:78:7e:f9:ab:fc:22:b8:b1:6c:ee:5c:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Feb 24 01:07:50 2024 GMT
            Not After : Feb 24 01:12:50 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2d:9a:e5:f2:49:23:06:73:0f:f4:78:d7:93:
                    37:7d:d8:87:e5:bb:a1:5f:27:05:93:de:9f:87:8a:
                    12:1f:91:b7:05:36:81:41:7a:f4:8f:4e:d5:ba:64:
                    09:3c:ea:5b:9c:58:88:fd:28:3e:ee:a8:89:9e:2c:
                    52:46:50:2f:eb:b6:8c:7d:9a:60:47:14:c1:2c:89:
                    ce:4a:30:8f:05:c8:af:8f:f8:b3:e8:c3:e8:da:91:
                    e7:fc:2f:52:32:c1:ac:83:db:8f:a4:ce:fa:dc:30:
                    7f:5a:b2:5e:ea:2e:3b:56:93:ee:ff:96:d3:7a:05:
                    18:6e:3a:2f:19:26:87:94:9f:38:42:30:b1:d2:8a:
                    bc:0a:28:44:76:b0:8c:90:19:bf:69:8d:97:97:1a:
                    04:50:c2:ab:21:ce:b4:ea:66:ed:96:09:c6:48:26:
                    08:44:9e:16:6a:60:e1:b2:6d:88:5b:aa:84:97:37:
                    02:79:97:03:3c:06:a8:bd:f3:17:33:0f:7b:03:15:
                    81:b5:04:e2:ee:3c:3c:1e:8c:6e:93:a7:c1:d2:e7:
                    f0:1b:de:7c:ea:75:e5:aa:4c:4c:82:ee:c9:e4:bd:
                    c2:fd:e6:c6:3b:4f:01:2d:a9:c3:39:ff:b2:f3:c8:
                    b2:d1:2f:ff:d7:71:a0:08:85:22:c2:0b:f8:4a:bb:
                    de:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:8A:D5:31:BE:9C:90:8A:5E:44:6D:EC:CF:9F:F1:9C:A9:86:FE:F5
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a3230303a3a2f34312d3431203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8:200::/41

    Signature Algorithm: sha256WithRSAEncryption
         36:c3:b1:83:9c:8f:fc:56:d1:54:84:b5:57:36:4f:62:16:1d:
         71:5b:0a:ea:05:23:ec:15:4a:cd:83:e2:8f:7c:49:5a:b7:2a:
         53:a6:44:ba:d0:c6:6a:1e:9e:3a:20:d6:0d:c7:b0:bf:a4:3f:
         95:bd:d3:22:35:f0:5c:53:f6:19:bc:f6:be:1a:dc:2f:a3:5f:
         f0:db:d6:21:6f:b9:a1:ef:60:30:1e:36:39:16:c5:9d:0c:35:
         d2:5e:55:6a:66:99:2f:3f:3b:dc:17:cd:a3:7a:8b:c3:b6:e2:
         56:0e:dc:cf:94:db:9d:8c:cb:96:11:5d:d7:42:26:f0:c6:52:
         d4:83:0e:ca:55:73:da:71:89:53:86:6a:cf:f3:c5:b9:15:66:
         e9:e2:d2:ee:a7:f0:c7:08:24:0f:fd:9e:48:97:3d:1f:9b:6b:
         ba:da:9b:4e:f2:7e:47:10:1c:ce:78:e8:d2:08:61:82:c4:94:
         2d:1d:0f:6a:af:a7:95:ce:a0:92:47:41:2e:ee:e4:32:00:6f:
         f4:2f:85:92:30:21:03:75:dd:77:d2:7d:98:fe:2a:9b:d0:c8:
         1f:dd:8d:65:fe:12:0e:60:1e:ff:70:70:9b:c4:a9:61:e7:03:
         40:60:e8:cb:7c:05:9d:9b:4c:7c:b6:06:4e:11:f6:f3:4c:e3:
         76:81:79:a2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----