Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/323830343a37343a666666663a3a2f34382d3438203d3e203532343638.roa
File:                     323830343a37343a666666663a3a2f34382d3438203d3e203532343638.roa (raw, json)
Hash identifier:          6P1+o0n9tER20JA3hwEx06vdf7rv0lTdFdbyjPa5Q6Y=
Subject key identifier:   3E:D2:E7:B3:BB:2E:25:E1:5E:E9:D3:B4:88:5E:7C:C4:3B:39:DC:E8
Certificate issuer:       /CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
Certificate serial:       2B48A1F91630D8A81434D9ADA3850207C637FCE6
Authority key identifier: 61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/323830343a37343a666666663a3a2f34382d3438203d3e203532343638.roa
Signing time:             Fri 26 Jan 2024 14:00:00 +0000
ROA not before:           Fri 26 Jan 2024 13:55:00 +0000
ROA not after:            Fri 24 Jan 2025 14:00:00 +0000
asID:                     52468
IP address blocks:        2804:74:ffff::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:48:a1:f9:16:30:d8:a8:14:34:d9:ad:a3:85:02:07:c6:37:fc:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
        Validity
            Not Before: Jan 26 13:55:00 2024 GMT
            Not After : Jan 24 14:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ea:25:38:33:a6:9c:66:89:11:5e:13:d0:59:
                    4c:e9:3c:51:d8:78:5f:ed:16:43:aa:35:8f:8d:26:
                    b7:a3:06:11:e2:a1:ec:ec:5f:25:7c:5b:e4:c5:e6:
                    34:d8:11:5f:6e:e8:13:48:a2:b9:12:a5:0e:7f:c2:
                    51:52:4f:4b:8e:8c:ec:ee:b8:f3:71:f6:6f:67:e7:
                    ad:81:b8:66:70:d1:b6:09:c4:29:b1:ba:1d:33:de:
                    ba:c1:4b:ae:7f:0f:4f:96:75:a8:19:f6:27:fe:bf:
                    28:41:d0:07:4d:f8:ee:28:9a:a2:2e:f3:51:2d:59:
                    b7:a0:73:0c:a8:dd:ea:be:44:15:a7:3d:13:9e:42:
                    bb:0a:66:96:96:2f:f7:61:14:3b:c8:15:4e:3b:08:
                    3f:3e:b8:35:48:36:72:1c:d7:46:20:e4:c0:52:61:
                    cb:22:15:ef:7e:e6:ad:8c:d4:39:c2:d4:c6:07:4e:
                    79:87:da:e3:1e:89:39:03:67:e0:94:1e:cc:bf:3f:
                    f1:bf:57:fa:2a:02:37:87:47:9c:80:33:04:35:9e:
                    c5:11:64:4d:fa:87:47:aa:48:d1:a5:d0:d3:f0:82:
                    52:fc:b5:c7:42:45:03:64:ba:36:85:e0:f7:8d:1f:
                    a4:27:fc:fa:ab:2a:2c:4b:6e:74:c6:d1:3f:a8:4e:
                    da:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D2:E7:B3:BB:2E:25:E1:5E:E9:D3:B4:88:5E:7C:C4:3B:39:DC:E8
            X509v3 Authority Key Identifier:
                keyid:61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/323830343a37343a666666663a3a2f34382d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:25:46:22:02:19:c9:de:7b:a8:dc:67:43:40:9e:ab:1d:6e:
         50:9a:c7:3f:c5:b4:f7:66:c0:b2:3c:01:f8:ff:b1:c2:49:c1:
         1b:be:d4:c0:c1:29:e1:28:4b:e2:40:54:a6:ec:f9:ca:ce:47:
         f6:1e:88:8c:85:87:12:d5:13:73:97:4e:ee:0e:70:e1:ff:5a:
         1b:9e:4c:44:0e:95:a6:f2:f2:c5:dc:99:0c:79:72:22:67:d7:
         af:99:5a:ec:28:91:2f:20:ed:be:3f:b1:82:71:0a:c8:38:1a:
         08:ac:68:f8:c2:6c:cc:0c:2b:f8:06:bd:95:e4:99:a6:97:43:
         ad:53:12:fe:cb:53:59:5b:e6:4a:e6:33:c3:02:50:9e:33:6b:
         97:31:e2:93:f0:40:4f:2f:d6:70:3a:de:f5:64:40:00:c4:e8:
         71:5f:02:b7:51:af:49:af:5d:25:c4:fd:df:c3:30:71:80:3d:
         c7:65:45:f9:39:85:dc:d3:31:97:db:28:c7:c2:3a:9b:bd:c0:
         91:f4:7c:c3:2b:c0:17:74:57:ec:a7:26:21:72:ce:49:41:6d:
         2d:2a:31:96:5a:3a:3c:5e:ab:db:ce:90:30:e2:cb:1c:61:2a:
         e9:08:4a:58:26:01:93:2a:eb:ee:00:42:51:cc:24:ca:53:38:
         c1:96:4e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----