Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/1/323830343a373737383a3130303a3a2f34302d3430203d3e20323731313830.roa
File:                     323830343a373737383a3130303a3a2f34302d3430203d3e20323731313830.roa (raw, json)
Hash identifier:          WM+m6bPgxasipkdejrAXMhDkDUfeOxTu3KektoUS95o=
Subject key identifier:   36:C6:5A:F0:C6:CB:CB:F3:C9:39:7C:D6:BC:A0:55:47:92:A9:55:A2
Certificate issuer:       /CN=2BE96A9D00DF227936266A4035089C530868CA3A
Certificate serial:       657BAEB8B41016068E600CDBE19D40DE374E7072
Authority key identifier: 2B:E9:6A:9D:00:DF:22:79:36:26:6A:40:35:08:9C:53:08:68:CA:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BE96A9D00DF227936266A4035089C530868CA3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/1/323830343a373737383a3130303a3a2f34302d3430203d3e20323731313830.roa
Signing time:             Wed 18 Sep 2024 20:01:23 +0000
ROA not before:           Wed 18 Sep 2024 19:56:23 +0000
ROA not after:            Wed 17 Sep 2025 20:01:23 +0000
asID:                     271180
IP address blocks:        2804:7778:100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:7b:ae:b8:b4:10:16:06:8e:60:0c:db:e1:9d:40:de:37:4e:70:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BE96A9D00DF227936266A4035089C530868CA3A
        Validity
            Not Before: Sep 18 19:56:23 2024 GMT
            Not After : Sep 17 20:01:23 2025 GMT
        Subject: CN=36C65AF0C6CBCBF3C9397CD6BCA0554792A955A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:89:ca:88:56:1b:4d:fe:3a:97:b9:32:e2:bd:
                    fa:2d:75:b9:43:d3:2c:ed:4b:16:50:78:f6:09:a3:
                    29:0b:49:ce:da:a5:4c:18:00:7b:8e:61:31:99:4d:
                    62:86:d3:8a:0c:5f:3a:fb:f8:54:40:ca:8b:69:d9:
                    07:9f:bc:c3:63:ee:9c:40:00:c7:ba:0c:0e:22:fb:
                    9f:f2:a6:e6:65:b0:e2:1c:06:52:77:42:c5:ac:d0:
                    d1:d9:66:04:1f:a2:bc:d8:20:de:43:c5:c6:e0:f2:
                    c6:a1:3a:05:03:cb:2a:44:3c:8b:1a:22:74:9b:f6:
                    85:4d:af:2a:ca:8a:a0:0e:01:00:2d:dd:38:11:66:
                    5e:ec:6b:ec:63:eb:68:70:85:ce:89:56:20:c4:11:
                    82:b0:5b:f5:46:26:63:23:97:e8:1c:8e:e7:90:2e:
                    e4:0f:95:d7:56:98:54:d8:39:9d:7e:aa:60:25:ff:
                    12:3b:4c:95:80:36:b7:ed:7b:56:be:b0:c9:0b:f5:
                    bb:b7:89:af:06:af:d6:9a:f3:04:64:cb:89:3c:8a:
                    38:58:8b:87:76:4a:df:14:e2:ea:0f:cc:88:a1:84:
                    83:d2:04:7c:eb:a4:d8:de:6e:b0:79:9e:ca:67:df:
                    9c:a5:7c:92:6e:a6:fe:5c:eb:39:71:30:10:16:70:
                    58:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C6:5A:F0:C6:CB:CB:F3:C9:39:7C:D6:BC:A0:55:47:92:A9:55:A2
            X509v3 Authority Key Identifier:
                keyid:2B:E9:6A:9D:00:DF:22:79:36:26:6A:40:35:08:9C:53:08:68:CA:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/1/2BE96A9D00DF227936266A4035089C530868CA3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BE96A9D00DF227936266A4035089C530868CA3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/1/323830343a373737383a3130303a3a2f34302d3430203d3e20323731313830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7778:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         a7:53:5a:bf:65:99:1a:79:17:49:83:af:47:5c:93:af:90:b7:
         e7:e9:18:01:cc:c7:b5:73:4c:95:b9:3c:c7:95:f9:97:99:22:
         2a:f6:02:46:b9:66:21:85:2f:da:08:84:a9:58:f1:96:d2:ae:
         6f:f5:25:ba:f0:77:21:1b:f3:01:8f:cc:41:e2:bf:e3:48:f8:
         99:7e:e0:93:e7:a8:f8:f9:22:cf:d3:7c:c5:99:bb:89:7d:18:
         e4:f4:61:7f:81:6f:93:ef:17:d1:25:5e:b9:6a:9d:7f:9e:b9:
         ce:fd:eb:1a:ec:41:05:2a:b4:01:4c:04:dd:0c:c8:46:a2:be:
         39:cc:f2:4f:0a:52:59:78:60:5c:06:0f:2d:d5:7c:8e:33:ca:
         0b:45:26:4a:b0:fa:de:88:3a:06:a5:29:f4:b6:f0:c7:9c:3a:
         1d:94:59:28:33:77:b1:58:cf:2a:a0:9d:77:07:d6:1d:2e:bb:
         da:e5:02:73:77:b8:8d:e7:29:5c:ea:ba:4b:58:e7:5c:90:77:
         9b:e4:fd:fd:e2:7e:9e:80:51:cb:32:53:59:b1:58:ec:a4:41:
         66:62:4a:d3:23:8a:23:44:25:7c:8e:39:c2:2c:91:db:73:2c:
         28:b0:d5:9d:ec:17:1b:ab:df:52:89:f4:d5:41:8b:49:6f:58:
         79:82:60:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----