Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a343032383a3a2f34362d3436203d3e20323632343934.roa
File:                     323830343a6164383a343032383a3a2f34362d3436203d3e20323632343934.roa (raw, json)
Hash identifier:          xPK/DFr5w69AyJ9n9+AAw/gKt70aAf2DgYg/DFaGVO8=
Subject key identifier:   D0:39:0C:92:DF:33:7E:D5:A7:FD:90:75:88:AF:18:88:62:98:C9:3E
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       40CA88D1A2540DC3D79F5273C3C1CC336697CB86
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a343032383a3a2f34362d3436203d3e20323632343934.roa
Signing time:             Sat 24 Feb 2024 01:13:43 +0000
ROA not before:           Sat 24 Feb 2024 01:08:43 +0000
ROA not after:            Mon 24 Feb 2025 01:13:43 +0000
asID:                     262494
IP address blocks:        2804:ad8:4028::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:ca:88:d1:a2:54:0d:c3:d7:9f:52:73:c3:c1:cc:33:66:97:cb:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Feb 24 01:08:43 2024 GMT
            Not After : Feb 24 01:13:43 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:df:a1:75:ce:05:a6:64:86:42:a4:ab:61:88:
                    f0:bf:72:9e:90:30:a7:9d:0a:bb:66:b9:5d:ea:40:
                    18:69:ad:20:d7:d3:45:7a:5a:a7:22:6e:16:2d:06:
                    9d:7e:45:6f:37:b1:65:c8:73:5f:3d:3f:e6:81:53:
                    7b:50:0f:d9:f3:78:02:2d:fb:45:93:1f:55:56:bf:
                    5b:4f:ca:8a:1a:cd:71:90:c9:e6:2f:a5:db:56:6c:
                    5b:ed:c6:e4:0f:c8:59:57:1a:02:20:b6:6c:5f:cd:
                    ff:af:9d:40:39:fa:9a:e0:f3:e4:91:47:88:26:4c:
                    a5:17:cb:da:ac:77:0f:19:65:15:fc:b2:94:27:f0:
                    7e:af:25:e6:ba:e9:45:ea:31:71:0b:b2:04:8c:73:
                    8b:81:44:3a:69:f4:2b:bd:04:dd:59:c3:94:11:67:
                    b4:f2:db:81:8e:37:b1:29:ba:4e:47:e5:71:f0:02:
                    70:85:4c:78:5a:f9:3e:02:15:8e:b3:ac:95:30:5f:
                    c3:7b:a1:42:7e:7c:fb:90:46:9f:95:f8:a9:30:05:
                    47:16:a9:55:e1:40:f5:b2:9e:1d:0d:2e:55:60:e3:
                    7e:82:ca:61:44:9e:1e:b4:fc:41:29:ac:a8:a5:47:
                    3c:d5:a9:90:7e:63:cf:c0:3b:b6:76:9d:65:a5:3f:
                    57:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:39:0C:92:DF:33:7E:D5:A7:FD:90:75:88:AF:18:88:62:98:C9:3E
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a343032383a3a2f34362d3436203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8:4028::/46

    Signature Algorithm: sha256WithRSAEncryption
         3b:3e:c3:69:8a:b0:b7:8e:41:66:68:c3:29:ec:fb:66:56:53:
         58:f9:fd:aa:da:4c:c1:d7:f5:99:58:a4:b4:12:b4:c2:40:a0:
         47:4d:44:17:e4:ee:b4:04:51:09:90:86:31:95:58:97:bb:d8:
         b7:7c:07:1a:bb:d5:ba:25:3e:76:ec:09:d4:e4:6f:65:32:93:
         7c:2d:cc:b1:cf:68:74:57:c5:ad:5f:e3:1b:8b:25:bd:ca:49:
         fc:88:b2:47:42:d8:c8:1f:9c:28:f9:a6:46:03:1e:3e:a7:36:
         ce:8d:5c:80:7a:90:d7:54:71:ae:c7:c6:a3:8b:9a:fb:f3:e5:
         b9:1d:4c:41:6b:59:c0:54:35:1a:cf:63:dc:43:22:51:88:35:
         37:13:09:45:c9:14:7e:29:99:05:00:92:3a:f6:72:58:cd:4d:
         95:d3:19:b0:87:a6:d7:81:f1:4e:57:20:12:b2:f1:b9:37:07:
         38:5f:ec:ec:fd:3e:6f:8d:dd:5f:06:bf:bf:7c:6d:0b:55:0f:
         ee:8d:3a:57:4e:2a:07:e9:30:1e:83:ad:be:22:b8:e0:64:d7:
         84:e8:12:43:0f:c8:e4:fc:f8:95:da:c7:05:61:02:c6:9d:b8:
         13:bb:d2:a2:38:19:62:60:d3:dc:09:e2:32:47:19:b2:aa:a6:
         6a:0f:73:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----