Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/323830343a373963343a383030303a3a2f34342d3434203d3e20323731333236.roa
File:                     323830343a373963343a383030303a3a2f34342d3434203d3e20323731333236.roa (raw, json)
Hash identifier:          R4NP1h79Xi7fNkhBJOWZ47gVJFr5frD9+zM44y2i6/o=
Subject key identifier:   05:BE:53:F7:39:6C:4A:A0:61:BC:47:02:BE:D6:45:A6:83:64:63:4D
Certificate issuer:       /CN=854D67A53888C5C7A27581422DBB6973EF4A1FC0
Certificate serial:       2D7306A1C9971879277C7E64217FCA89720DCDCA
Authority key identifier: 85:4D:67:A5:38:88:C5:C7:A2:75:81:42:2D:BB:69:73:EF:4A:1F:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/854D67A53888C5C7A27581422DBB6973EF4A1FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/323830343a373963343a383030303a3a2f34342d3434203d3e20323731333236.roa
Signing time:             Tue 26 Mar 2024 06:19:51 +0000
ROA not before:           Tue 26 Mar 2024 06:14:51 +0000
ROA not after:            Tue 25 Mar 2025 06:19:51 +0000
asID:                     271326
IP address blocks:        2804:79c4:8000::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:73:06:a1:c9:97:18:79:27:7c:7e:64:21:7f:ca:89:72:0d:cd:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=854D67A53888C5C7A27581422DBB6973EF4A1FC0
        Validity
            Not Before: Mar 26 06:14:51 2024 GMT
            Not After : Mar 25 06:19:51 2025 GMT
        Subject: CN=05BE53F7396C4AA061BC4702BED645A68364634D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d8:d1:f5:72:00:04:04:25:c0:0b:13:42:82:
                    52:db:1b:45:ed:ce:48:dc:a6:11:83:2a:6f:ad:c1:
                    48:12:46:27:d8:3b:1e:5f:a4:7e:e6:8b:3e:12:e4:
                    3e:3a:40:24:3a:31:32:51:8c:6d:ae:86:8a:a5:45:
                    73:f3:13:5f:de:9a:73:45:1e:4a:7f:ca:ce:15:ae:
                    9b:24:fe:e9:5f:e5:83:50:70:84:36:dc:03:a9:de:
                    bb:c8:18:bb:ba:25:8e:57:dd:a6:2d:8b:11:a0:e2:
                    68:c1:8d:9f:73:96:f8:37:de:38:b9:d3:3d:4d:5c:
                    73:72:6f:d2:19:a4:1b:60:fd:41:f9:5a:5f:35:73:
                    0a:24:bb:12:0d:b6:3d:42:7a:84:d9:27:a9:b4:0d:
                    4d:01:97:be:e9:e0:36:2a:f7:3d:fa:f7:41:57:92:
                    b7:c1:cb:53:d4:4f:45:9e:64:32:5b:97:4f:20:f1:
                    14:94:34:ef:38:72:d9:f3:f4:6d:ef:3d:d2:e8:54:
                    ef:8b:24:05:77:f7:17:60:15:99:da:d0:f8:ee:5d:
                    38:9e:8c:56:73:8c:08:6b:eb:7b:7d:01:37:66:26:
                    6c:a9:f7:1e:0d:13:f4:c3:67:3d:6c:0a:08:eb:a4:
                    10:e2:d4:40:0e:9c:59:b8:58:2f:ea:02:72:80:65:
                    06:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:BE:53:F7:39:6C:4A:A0:61:BC:47:02:BE:D6:45:A6:83:64:63:4D
            X509v3 Authority Key Identifier:
                keyid:85:4D:67:A5:38:88:C5:C7:A2:75:81:42:2D:BB:69:73:EF:4A:1F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/854D67A53888C5C7A27581422DBB6973EF4A1FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/854D67A53888C5C7A27581422DBB6973EF4A1FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/323830343a373963343a383030303a3a2f34342d3434203d3e20323731333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:79c4:8000::/44

    Signature Algorithm: sha256WithRSAEncryption
         0a:3c:f7:43:ad:65:a4:01:f4:86:27:a5:39:44:45:de:76:e2:
         54:98:8f:ce:3c:38:2b:00:10:65:d6:fc:62:be:9a:d0:86:11:
         3d:2c:9c:85:70:18:ad:58:e8:c7:e0:a0:a9:0d:1e:6c:a3:19:
         a4:be:17:14:69:95:f0:5c:c9:8b:43:52:6b:67:54:94:76:53:
         bb:e5:b9:53:dd:b9:86:b6:1f:7d:d9:c7:23:25:50:65:e9:a5:
         cb:05:55:9d:f9:9b:39:72:e5:34:1a:1c:6c:9d:a8:4c:7b:06:
         91:02:36:6e:e6:48:63:76:1f:78:ff:8f:bc:50:2b:ea:f7:56:
         8b:ab:07:03:69:fc:e2:da:60:3e:4b:7f:73:f2:f9:a3:bc:19:
         dd:18:2e:8d:89:0a:13:ac:10:6a:fd:c0:12:e2:07:c6:1a:cb:
         35:08:a4:17:1b:b0:f5:1a:a5:33:ae:44:dd:87:4a:03:7f:65:
         16:40:e0:5a:bf:46:57:de:9a:78:ec:8c:5e:22:b2:8a:07:a5:
         51:26:fb:5a:47:0f:33:4f:d4:3f:b1:bf:6d:73:7e:06:bc:38:
         90:fa:a0:42:15:91:e7:1f:50:c3:1e:18:cb:73:25:79:cd:44:
         ba:d5:6c:ae:70:5a:c3:8f:31:2d:a9:83:fe:32:45:da:4d:f0:
         c5:d3:15:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----