Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/1/323830343a356237633a3a2f33322d3438203d3e20323638383438.roa
File:                     323830343a356237633a3a2f33322d3438203d3e20323638383438.roa (raw, json)
Hash identifier:          Qc/09v+F6/3v3CB7OhjPijfRzQgXGdOcj9JRpwrGsps=
Subject key identifier:   87:95:57:DB:88:63:F6:92:CC:89:5B:E9:01:C7:86:2F:99:DA:10:8A
Certificate issuer:       /CN=DF9D4D261E0C38ACA23C40A6C8ECE39A6FD9A186
Certificate serial:       7F59CDA87144C96CA547807D5C52F0DA18BFA278
Authority key identifier: DF:9D:4D:26:1E:0C:38:AC:A2:3C:40:A6:C8:EC:E3:9A:6F:D9:A1:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF9D4D261E0C38ACA23C40A6C8ECE39A6FD9A186.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/1/323830343a356237633a3a2f33322d3438203d3e20323638383438.roa
Signing time:             Wed 17 Jul 2024 18:14:42 +0000
ROA not before:           Wed 17 Jul 2024 18:09:42 +0000
ROA not after:            Wed 16 Jul 2025 18:14:42 +0000
asID:                     268848
IP address blocks:        2804:5b7c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:59:cd:a8:71:44:c9:6c:a5:47:80:7d:5c:52:f0:da:18:bf:a2:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF9D4D261E0C38ACA23C40A6C8ECE39A6FD9A186
        Validity
            Not Before: Jul 17 18:09:42 2024 GMT
            Not After : Jul 16 18:14:42 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4a:fe:6d:bc:b4:c0:2f:bc:16:f5:78:aa:8b:
                    6f:7f:45:22:d5:de:11:d2:ac:18:da:67:03:5c:74:
                    96:6d:88:88:5d:c8:2c:5d:a6:2c:4b:2f:b0:64:c3:
                    f1:6a:8c:89:c1:76:e8:3d:e8:14:22:2f:39:da:9f:
                    65:ed:bd:b4:67:68:da:7e:2a:39:07:21:aa:95:e5:
                    19:cc:cb:db:4b:65:9b:8f:4e:0a:8a:11:29:8e:0c:
                    95:50:97:33:74:2d:c0:72:eb:66:bb:c7:a2:6b:df:
                    78:9a:f8:8b:01:b6:f4:67:ba:02:a4:b3:c3:c9:5e:
                    46:34:c3:a8:a0:f5:72:d1:df:5a:5b:3d:05:71:43:
                    4e:61:46:f1:42:c0:33:23:50:26:8b:b4:31:f4:1b:
                    16:79:54:3d:29:ad:c1:b6:f2:b1:50:12:5b:3c:2c:
                    1e:14:85:a1:a5:f7:8a:10:03:8b:05:68:1e:d0:5b:
                    d5:f5:37:89:2a:ec:93:ef:72:93:b5:9e:19:b8:71:
                    3c:37:60:3e:6b:5e:03:a9:9c:02:c1:f7:6d:af:aa:
                    ca:bc:36:a4:ef:de:41:78:a4:04:cb:59:af:0b:4f:
                    bf:51:a4:64:01:98:cf:5a:67:ee:1a:bd:fa:5f:53:
                    b6:88:da:de:f7:11:20:51:dd:6c:f4:55:37:1f:56:
                    01:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:95:57:DB:88:63:F6:92:CC:89:5B:E9:01:C7:86:2F:99:DA:10:8A
            X509v3 Authority Key Identifier:
                keyid:DF:9D:4D:26:1E:0C:38:AC:A2:3C:40:A6:C8:EC:E3:9A:6F:D9:A1:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/1/DF9D4D261E0C38ACA23C40A6C8ECE39A6FD9A186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF9D4D261E0C38ACA23C40A6C8ECE39A6FD9A186.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/1/323830343a356237633a3a2f33322d3438203d3e20323638383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:58:97:db:2e:9b:ce:d0:70:8e:8f:4b:f8:d3:22:71:93:a8:
         65:75:a7:d6:52:9e:e1:83:e5:88:5c:e7:90:24:0c:3f:14:9d:
         c1:1b:42:3a:47:9b:85:00:66:c7:73:e1:16:61:7c:cd:f9:1b:
         a9:64:3b:7e:46:15:4e:a1:13:d5:62:79:82:30:14:b0:fa:9f:
         58:e2:0e:0a:6c:9f:57:ab:be:02:2f:9e:57:6f:94:04:2b:51:
         e9:5c:f3:e9:02:b1:4e:76:e7:8b:73:02:c6:b7:4f:84:d4:3e:
         9b:7a:d0:6f:fb:5c:fc:9f:b7:11:f3:bd:b9:16:46:80:d4:d7:
         4a:71:b9:b3:5c:92:bd:9e:95:8f:76:61:da:c6:ad:6f:05:bc:
         1e:0a:49:0e:70:8c:8f:ba:27:e8:65:6f:32:74:70:d4:bf:aa:
         cf:a7:93:07:e2:cf:f0:b3:ed:aa:00:ee:c1:f2:87:ec:c5:f2:
         53:43:22:71:b1:48:fa:91:b3:9d:63:42:17:aa:86:40:03:21:
         74:1b:42:b1:53:9c:d2:d5:d7:d0:5c:c8:39:da:f9:81:ba:f1:
         36:78:30:72:35:73:6d:bb:22:5a:06:74:a7:82:0b:d5:90:74:
         ba:44:29:6a:77:1d:98:47:91:38:12:b0:00:34:01:63:13:15:
         e7:62:59:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----