Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/323830343a37343a383030303a3a2f33332d3333203d3e203532343638.roa
File:                     323830343a37343a383030303a3a2f33332d3333203d3e203532343638.roa (raw, json)
Hash identifier:          NdgR2tip5hcO6cBfI9ykP6TsBfRZ0ddCszqJ8Zwl6RY=
Subject key identifier:   13:E0:06:49:3F:3F:27:70:CF:D6:A9:E7:F5:FB:57:18:AD:C2:AA:8E
Certificate issuer:       /CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
Certificate serial:       573D92E0B4311A3C79D3091D593548096811383D
Authority key identifier: 61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/323830343a37343a383030303a3a2f33332d3333203d3e203532343638.roa
Signing time:             Wed 17 Jan 2024 15:00:00 +0000
ROA not before:           Wed 17 Jan 2024 14:55:00 +0000
ROA not after:            Wed 15 Jan 2025 15:00:00 +0000
asID:                     52468
IP address blocks:        2804:74:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:3d:92:e0:b4:31:1a:3c:79:d3:09:1d:59:35:48:09:68:11:38:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
        Validity
            Not Before: Jan 17 14:55:00 2024 GMT
            Not After : Jan 15 15:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7b:16:e8:81:a1:3f:9c:81:56:54:3c:03:b9:
                    2d:f1:cb:5b:25:a1:e6:d4:7b:84:b1:46:6d:8b:83:
                    a4:f8:79:ee:8a:8b:18:d8:53:f0:2e:8e:a6:64:12:
                    6c:fc:f3:0c:20:cd:a9:83:45:1c:71:4a:f2:49:f6:
                    31:a4:75:57:1a:e6:c1:8b:35:ed:6a:5a:fb:cd:7e:
                    48:0a:dd:72:5e:88:08:12:8f:b7:c3:56:94:4c:31:
                    ba:c9:68:91:b8:12:03:b3:b4:71:56:74:89:7d:f6:
                    6d:5c:8e:69:77:0f:99:47:92:62:bf:81:ad:e9:18:
                    09:bc:e3:16:d7:9a:5c:41:36:1e:32:30:34:61:a5:
                    7b:95:37:ca:31:7e:3d:d7:db:29:f7:2a:e7:8c:7a:
                    d0:d2:b5:06:28:dc:b6:c3:74:eb:16:16:83:3c:21:
                    88:5c:30:0d:61:61:c3:87:8d:32:72:cb:4e:5b:0a:
                    e7:24:84:36:48:e1:17:e2:66:91:89:df:05:eb:ab:
                    e4:d6:47:fe:d1:4a:7d:e6:2b:17:c8:46:81:c3:3f:
                    d6:6a:c0:65:e8:60:00:29:9d:d6:3f:ca:5c:64:e0:
                    34:e5:db:c8:8c:39:14:fa:3f:66:76:29:2b:6c:49:
                    95:5c:99:a2:cb:43:c4:75:9a:60:f8:b1:b9:24:c2:
                    b2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E0:06:49:3F:3F:27:70:CF:D6:A9:E7:F5:FB:57:18:AD:C2:AA:8E
            X509v3 Authority Key Identifier:
                keyid:61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/323830343a37343a383030303a3a2f33332d3333203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         56:07:67:fa:f3:4d:e5:9e:82:e5:67:ee:c3:17:d3:0e:55:cb:
         40:e8:3f:52:58:f5:40:c0:4a:dc:9a:9d:9e:f9:f0:88:ac:b7:
         d0:f7:61:43:9a:1c:28:4d:ec:9f:1d:00:93:b0:2e:3a:47:e3:
         ae:0e:27:e3:6d:a6:90:d3:81:9f:4c:21:c7:8a:50:60:dd:62:
         e5:5a:e0:c9:96:d2:38:03:3b:84:ae:f1:d8:4c:c9:93:7c:d7:
         0f:e9:58:de:80:22:17:5f:cc:7e:b1:10:dd:57:91:3e:44:f6:
         56:74:0c:e0:ea:18:b5:db:e4:71:3d:16:fc:c6:2f:17:ca:d3:
         52:7a:88:ad:be:d1:73:e6:16:3a:fe:85:e5:23:52:93:e9:2a:
         0d:49:17:37:a3:9c:48:aa:5d:2e:7b:cf:05:56:c8:09:ed:b7:
         f9:bf:61:d8:a4:45:be:4e:b9:9f:0b:f4:c2:a8:e1:32:be:6b:
         d4:6b:b7:ad:3f:4e:09:bc:d7:98:94:c3:b4:1a:a8:3f:f5:ad:
         1e:8e:88:e4:a1:7c:bc:cf:84:1c:cb:e5:1b:70:1e:c5:c7:39:
         b2:1b:9e:f2:d2:00:b4:7d:de:8b:70:d9:5b:58:6c:34:82:72:
         f6:23:a4:bc:d8:1b:47:6c:30:32:f1:93:cb:7e:d2:2f:00:c2:
         ba:2f:40:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----