Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a383239363a3a2f34382d3438203d3e20323632343934.roa
File:                     323830343a6164383a383239363a3a2f34382d3438203d3e20323632343934.roa (raw, json)
Hash identifier:          hjiheCtbqtOKG3vIDBORaiDDjPvicawuVcXbwNM5vYE=
Subject key identifier:   C0:BB:E6:26:F1:4B:DD:67:82:A3:01:F5:6A:3B:F3:5F:32:D9:7C:C8
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       18D88E7FD806039AC377ACF0539A1C395DC693E6
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a383239363a3a2f34382d3438203d3e20323632343934.roa
Signing time:             Fri 23 Feb 2024 16:00:00 +0000
ROA not before:           Fri 23 Feb 2024 15:55:00 +0000
ROA not after:            Sun 23 Feb 2025 16:00:00 +0000
asID:                     262494
IP address blocks:        2804:ad8:8296::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:d8:8e:7f:d8:06:03:9a:c3:77:ac:f0:53:9a:1c:39:5d:c6:93:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Feb 23 15:55:00 2024 GMT
            Not After : Feb 23 16:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1b:40:cd:87:63:ab:7d:a0:77:07:26:64:0a:
                    fa:a8:35:58:fe:a0:6f:fe:40:15:45:c1:df:5c:5d:
                    ed:4d:99:8c:2b:98:05:e3:3a:fe:4b:f6:c5:91:f1:
                    ae:c4:d2:3a:80:35:4a:03:51:6d:6b:f8:82:49:42:
                    e9:8d:4a:84:ec:b7:21:23:18:13:65:b3:0f:7f:e6:
                    8b:19:8d:06:5b:4d:66:f0:23:ae:c4:79:79:0f:32:
                    9f:80:25:04:ba:6d:ca:cf:0d:ef:3c:9b:ec:44:89:
                    53:7c:c6:b4:cf:b8:e1:51:76:97:20:2f:cd:08:38:
                    34:34:8c:11:3d:4c:28:e6:b6:3e:7b:19:c4:e3:21:
                    f9:00:bd:c4:97:f5:17:4e:95:17:dc:4c:b7:d1:45:
                    47:fe:4c:44:40:d1:fe:34:95:a8:19:e9:e3:bd:2a:
                    43:d4:5e:fb:81:a6:c9:65:73:a0:01:74:00:33:fd:
                    b2:35:43:ef:89:51:49:c1:2d:f1:34:40:64:65:40:
                    0b:31:27:6c:f3:b3:78:73:54:19:b4:24:6a:19:fc:
                    2b:49:c7:91:61:5a:21:80:61:59:62:51:45:7e:00:
                    33:b1:54:f1:82:2a:54:99:79:a9:b0:f7:7c:8a:89:
                    53:ec:e8:21:f0:c3:9d:58:e7:a1:e0:93:34:33:2e:
                    59:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:BB:E6:26:F1:4B:DD:67:82:A3:01:F5:6A:3B:F3:5F:32:D9:7C:C8
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a383239363a3a2f34382d3438203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8:8296::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:38:c8:9c:34:62:cb:b3:78:61:dc:1e:ec:62:84:e6:b4:e9:
         87:bd:42:4b:61:59:02:99:fc:9a:d2:96:ec:ef:d5:f2:a3:4f:
         d4:77:a3:58:6f:83:e3:26:47:ac:a7:18:74:6a:1c:67:fa:68:
         76:66:ff:5e:f5:07:0e:7f:09:90:0e:5a:17:a3:38:b1:47:22:
         f4:06:51:12:48:26:ee:ba:e8:61:83:13:f3:2c:ed:5a:24:2c:
         13:1d:7c:8d:f3:70:2d:3c:ce:6d:63:37:16:91:96:b8:ee:e3:
         11:67:71:bf:6e:06:7c:d0:96:ce:86:e6:a8:cb:c5:1e:27:f2:
         04:31:cf:a4:d7:36:79:a2:1c:2b:c2:8c:88:44:41:5c:94:ba:
         d8:15:0b:78:96:a2:57:b9:93:9a:1a:02:ca:26:c3:50:69:85:
         ae:e6:7e:6b:8a:86:8f:fe:fb:6e:b5:e7:17:d3:b2:cb:d6:da:
         6a:dd:a2:64:80:1c:b1:7c:24:98:86:d1:dc:e3:11:4b:dd:c9:
         ab:92:58:d4:b5:ba:05:b1:45:d7:e1:f2:78:dd:82:36:10:a7:
         52:19:f0:ab:e2:0e:d9:6c:4d:ce:e6:96:26:5d:c1:27:4e:b2:
         78:da:c5:97:93:8f:5d:0e:4d:f3:31:51:af:b2:16:0a:a4:e2:
         71:0c:fe:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----