Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a383238643a3a2f34382d3438203d3e20323632343934.roa
File:                     323830343a6164383a383238643a3a2f34382d3438203d3e20323632343934.roa (raw, json)
Hash identifier:          8WpzraWaPO3MPPBSjnbtotgsN/2Xbjyp6EdQXW/yCBU=
Subject key identifier:   AC:3C:13:37:1F:6F:0D:D0:FF:A3:28:07:33:DC:50:BF:57:47:32:0A
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       63DD1B1F347C03C4B78461F5F373A50C44EF3328
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a383238643a3a2f34382d3438203d3e20323632343934.roa
Signing time:             Thu 11 Apr 2024 12:07:52 +0000
ROA not before:           Thu 11 Apr 2024 12:02:52 +0000
ROA not after:            Fri 11 Apr 2025 12:07:52 +0000
asID:                     262494
IP address blocks:        2804:ad8:828d::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:dd:1b:1f:34:7c:03:c4:b7:84:61:f5:f3:73:a5:0c:44:ef:33:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Apr 11 12:02:52 2024 GMT
            Not After : Apr 11 12:07:52 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ea:1d:4c:9d:27:62:4d:e0:a2:c7:9a:49:ce:
                    42:02:43:80:f3:eb:a5:ed:74:d4:b9:fc:9f:ed:1e:
                    4c:c7:c1:cc:07:60:e6:4a:63:a8:a3:5e:1d:31:cc:
                    31:36:a8:a5:fe:1e:1a:64:02:c9:23:3a:1f:0d:78:
                    aa:63:1e:40:be:9d:f4:df:52:7c:a9:45:5e:c7:44:
                    ad:80:96:2f:44:57:b2:c9:a1:59:9d:fe:a3:be:3b:
                    d1:d1:7a:e4:af:49:b3:43:e0:63:b4:05:5a:91:f3:
                    a3:52:a6:a6:19:7f:2c:31:6a:1e:d7:d4:34:21:28:
                    24:79:71:72:3a:6f:4d:ae:7e:78:35:92:75:a4:b7:
                    ce:04:e2:45:db:a5:5e:eb:b2:2e:58:96:62:b4:d6:
                    b9:71:aa:3f:f5:a9:74:49:3d:fd:a1:c6:a8:6e:e1:
                    e5:09:de:64:97:59:7f:41:e5:01:c7:28:75:f2:4c:
                    46:1b:90:21:08:f0:fb:ce:fe:1a:f3:f9:d4:46:22:
                    70:f9:bd:05:b2:47:5b:c5:a2:f7:20:7f:15:af:be:
                    2d:87:f8:99:1e:3f:c2:f7:b9:52:1e:0d:b3:00:d3:
                    42:84:f7:97:65:33:d8:3c:20:7b:cb:b0:72:7c:bd:
                    d4:9a:4a:fe:e8:eb:23:93:3d:58:ca:fd:a5:43:63:
                    55:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:3C:13:37:1F:6F:0D:D0:FF:A3:28:07:33:DC:50:BF:57:47:32:0A
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a383238643a3a2f34382d3438203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8:828d::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:bb:57:82:5c:27:34:81:90:6b:55:99:cb:0f:7b:f5:07:76:
         84:49:62:9c:90:28:95:b7:71:52:14:5a:44:ac:21:30:45:f4:
         2a:1b:4e:0b:bb:a3:39:cd:cf:ed:c0:5e:21:5f:ce:9e:60:8a:
         80:a5:ec:87:6d:40:01:e5:d6:68:87:b2:d5:39:bf:1e:1b:93:
         84:5b:54:cb:5b:fe:71:e1:ae:8d:33:68:3e:55:3b:31:78:92:
         a6:de:45:74:a8:9d:97:b9:2d:9a:96:88:7f:41:ed:f3:54:be:
         d0:ab:65:45:ca:66:38:0b:1f:87:b4:8e:3d:e5:a7:0a:95:e6:
         dc:f2:9e:77:b7:92:08:78:13:b1:89:f4:de:8c:de:e3:a6:9d:
         c6:b0:c4:84:9b:42:96:13:e3:1d:c5:bf:f7:6f:86:b6:06:81:
         93:ee:2c:f3:2d:74:19:73:cb:eb:96:be:9e:7b:ce:7c:b6:a1:
         2d:91:22:d3:d3:95:e7:3b:0f:ea:ca:a3:f3:90:2a:7f:c2:de:
         ae:04:6b:38:6c:1c:6c:0d:45:0c:af:77:af:85:7f:ec:d7:68:
         16:b8:40:d7:9a:10:b8:51:6c:b6:ed:ec:4d:ba:05:12:98:fd:
         3b:7b:1f:c9:3b:13:88:a4:96:4e:c0:64:de:aa:86:81:84:56:
         94:1d:bd:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----