Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/1/323830343a373737383a3a2f33322d3332203d3e20323731313830.roa
File:                     323830343a373737383a3a2f33322d3332203d3e20323731313830.roa (raw, json)
Hash identifier:          e58AYYQq52xySadab1cut7FwB/ziu0M9ekofmfbkAvQ=
Subject key identifier:   C0:61:07:E3:73:29:8B:7F:00:53:6A:81:41:2D:81:FD:BE:20:3D:6A
Certificate issuer:       /CN=2BE96A9D00DF227936266A4035089C530868CA3A
Certificate serial:       274F9C5B47E4C89622E1FF5A03A9FF1B948EC327
Authority key identifier: 2B:E9:6A:9D:00:DF:22:79:36:26:6A:40:35:08:9C:53:08:68:CA:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BE96A9D00DF227936266A4035089C530868CA3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/1/323830343a373737383a3a2f33322d3332203d3e20323731313830.roa
Signing time:             Thu 04 Apr 2024 18:27:15 +0000
ROA not before:           Thu 04 Apr 2024 18:22:15 +0000
ROA not after:            Thu 03 Apr 2025 18:27:15 +0000
asID:                     271180
IP address blocks:        2804:7778::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:4f:9c:5b:47:e4:c8:96:22:e1:ff:5a:03:a9:ff:1b:94:8e:c3:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BE96A9D00DF227936266A4035089C530868CA3A
        Validity
            Not Before: Apr  4 18:22:15 2024 GMT
            Not After : Apr  3 18:27:15 2025 GMT
        Subject: CN=C06107E373298B7F00536A81412D81FDBE203D6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:3e:a0:96:ad:51:f8:ae:6d:5d:48:e3:f1:7c:
                    66:d2:4b:40:b0:c3:f0:dd:68:8a:14:94:bb:16:f2:
                    4f:7d:af:5b:a5:e9:88:f7:ac:1f:69:d5:33:ae:82:
                    8f:9b:3a:39:d5:26:85:0d:37:60:b3:0a:06:53:cf:
                    72:d0:5a:75:49:a7:2a:61:a2:87:6c:0c:ce:8c:c7:
                    e8:46:0e:7c:b6:f4:d4:f3:28:30:0c:b4:bb:e1:0b:
                    11:18:ff:dd:cd:64:5f:b0:16:c6:c4:7d:05:bf:0b:
                    3e:be:f5:6c:91:3d:08:cd:55:ef:d8:e4:14:b4:4e:
                    e1:f0:f1:02:58:4b:72:ff:01:4b:93:bb:3b:c8:3f:
                    d7:24:dd:9d:fc:43:b4:1d:5f:ed:6e:e8:27:b5:82:
                    03:d6:3c:44:12:ef:b0:46:80:a7:bb:92:90:c9:db:
                    64:2b:a1:60:da:29:db:30:1e:d4:11:08:38:21:1e:
                    76:aa:2b:f3:67:82:34:b9:5a:51:2d:33:e4:c6:08:
                    53:e3:c3:fa:ea:7d:a8:4e:3a:d1:8a:8e:a5:95:31:
                    7d:f1:f1:b1:fd:95:72:88:7b:77:5c:b1:90:20:40:
                    12:fd:84:4c:23:e6:03:61:87:3d:7e:40:82:f6:57:
                    1a:e0:02:d5:c4:80:75:25:04:1e:e3:bd:e8:77:4f:
                    ea:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:61:07:E3:73:29:8B:7F:00:53:6A:81:41:2D:81:FD:BE:20:3D:6A
            X509v3 Authority Key Identifier:
                keyid:2B:E9:6A:9D:00:DF:22:79:36:26:6A:40:35:08:9C:53:08:68:CA:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/1/2BE96A9D00DF227936266A4035089C530868CA3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BE96A9D00DF227936266A4035089C530868CA3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/1/323830343a373737383a3a2f33322d3332203d3e20323731313830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7778::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:56:aa:47:d9:6a:46:9a:d0:eb:2b:a6:10:4d:c4:a7:e9:50:
         62:96:6b:c2:7c:68:3f:b2:4b:5f:37:d2:04:a5:25:32:7c:e2:
         b9:cd:a7:24:b5:99:1d:ef:4f:32:b5:c6:6d:62:db:33:1e:7c:
         16:03:46:97:ba:51:80:bd:d5:e3:b3:4e:65:be:07:10:fc:c5:
         82:06:3c:24:50:90:08:34:b8:85:44:59:9b:06:ab:5b:70:d5:
         49:2f:a1:2e:c2:c0:26:67:08:b0:ce:7b:4d:b0:45:4c:41:b1:
         06:ee:d2:de:8f:99:05:2a:af:26:69:99:9d:23:48:09:23:6b:
         01:6c:ab:52:44:a8:a8:cd:c5:9a:6b:3e:5c:42:85:7a:35:c2:
         d8:39:2b:b2:82:e8:83:e8:39:ea:c1:a2:bf:41:f8:92:dd:b0:
         1c:85:41:4c:98:d4:dc:8a:1e:e9:0b:cf:80:c7:64:a7:78:e8:
         12:9b:53:2d:12:6b:f8:2a:4a:dd:16:7f:a3:21:22:ee:7b:82:
         ea:64:00:6d:04:25:e0:44:b2:03:1e:ad:05:8f:a9:6e:02:6c:
         b7:56:4a:28:92:05:c9:af:ce:cf:91:60:80:d9:a7:88:1d:81:
         23:90:5d:07:df:f2:0d:f1:bf:a7:98:21:76:7b:33:b7:f6:be:
         63:c8:92:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----