Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/0/323830343a356665383a3a2f33322d313238203d3e20323639313331.roa
File:                     323830343a356665383a3a2f33322d313238203d3e20323639313331.roa (raw, json)
Hash identifier:          88mc5oYYUt4YsYHu0M+qOsgI4uaxQSqF3n7NHOyBjmk=
Subject key identifier:   45:8D:0D:40:EA:C8:30:45:3C:D9:23:22:DD:4E:71:CF:F5:06:05:5A
Certificate issuer:       /CN=977763171B41C527CE9BEBF931FB49B2ED545A8B
Certificate serial:       37D6E46BB9C95955E28D9C03D04B69CC208C06E6
Authority key identifier: 97:77:63:17:1B:41:C5:27:CE:9B:EB:F9:31:FB:49:B2:ED:54:5A:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/977763171B41C527CE9BEBF931FB49B2ED545A8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/0/323830343a356665383a3a2f33322d313238203d3e20323639313331.roa
Signing time:             Wed 13 Mar 2024 14:20:31 +0000
ROA not before:           Wed 13 Mar 2024 14:15:31 +0000
ROA not after:            Wed 12 Mar 2025 14:20:31 +0000
asID:                     269131
IP address blocks:        2804:5fe8::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:d6:e4:6b:b9:c9:59:55:e2:8d:9c:03:d0:4b:69:cc:20:8c:06:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=977763171B41C527CE9BEBF931FB49B2ED545A8B
        Validity
            Not Before: Mar 13 14:15:31 2024 GMT
            Not After : Mar 12 14:20:31 2025 GMT
        Subject: CN=458D0D40EAC830453CD92322DD4E71CFF506055A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:45:b8:5b:d1:9e:d7:8f:86:6b:4f:81:53:2f:
                    f4:74:94:17:c0:b5:da:f4:7d:0f:ce:6f:c6:79:12:
                    9d:aa:62:9e:c8:1b:41:17:6c:d6:66:49:15:d4:a4:
                    00:13:b6:4d:3a:87:c8:1a:8a:6e:9a:ee:03:7e:8b:
                    12:b1:da:d4:f5:06:6a:f9:4a:e3:6f:30:9b:9c:82:
                    af:fa:a4:2d:1e:8c:b5:9a:7d:8b:b0:a9:f4:36:f4:
                    6c:98:0f:4d:53:55:8b:66:04:31:d7:45:af:db:68:
                    44:55:99:4c:2c:58:37:dd:05:ff:a0:83:e7:3a:93:
                    cc:3b:d0:ed:c6:e7:1d:72:f3:95:82:58:a3:97:a2:
                    4b:81:84:6d:96:d7:b5:ab:82:02:1c:e8:92:61:30:
                    5f:6d:0c:c6:20:d2:a3:e3:da:79:eb:f2:02:a0:87:
                    29:7f:68:aa:84:41:14:34:f9:0a:b6:63:c6:5c:dc:
                    13:a5:c0:ba:55:55:ce:ef:95:5e:61:01:85:96:a7:
                    0d:d8:b9:20:9b:44:44:7c:b6:e9:63:14:bc:df:de:
                    0c:01:d0:a9:55:dc:e1:87:86:5a:25:d2:f4:e6:8f:
                    75:d5:cc:a6:97:cb:16:14:c9:ea:e3:db:c3:4e:c4:
                    54:58:10:50:90:ba:b4:0f:ab:18:f2:2c:83:ae:9c:
                    f7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:8D:0D:40:EA:C8:30:45:3C:D9:23:22:DD:4E:71:CF:F5:06:05:5A
            X509v3 Authority Key Identifier:
                keyid:97:77:63:17:1B:41:C5:27:CE:9B:EB:F9:31:FB:49:B2:ED:54:5A:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/0/977763171B41C527CE9BEBF931FB49B2ED545A8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/977763171B41C527CE9BEBF931FB49B2ED545A8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/0/323830343a356665383a3a2f33322d313238203d3e20323639313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5fe8::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:b5:9b:72:07:a3:46:05:06:d3:20:fa:d5:11:31:df:d8:d4:
         87:4c:f8:dd:ca:9b:4f:47:1a:d7:10:5d:90:25:39:36:d0:20:
         6b:17:bc:79:f3:6d:0b:ff:e2:5c:c8:9d:d0:d2:ab:2b:69:d0:
         be:ee:03:80:e1:d1:a0:1d:df:6c:f4:9a:ef:c4:85:33:7d:b9:
         d3:cc:20:5e:ba:ba:3e:5c:3b:00:89:3d:35:15:e7:3e:82:60:
         00:f4:37:1c:8f:e7:3e:47:c9:ea:1a:b6:df:9f:a3:a0:f3:88:
         fa:68:23:1b:72:f4:c4:90:9c:88:18:cf:d2:a9:23:de:e2:6b:
         f9:1e:1e:51:b5:c7:49:19:ef:a3:c7:95:51:bf:89:b6:0f:26:
         7f:4c:18:4b:03:0b:1b:7d:e4:78:33:10:0e:0d:e0:c4:2d:38:
         6f:14:7c:e6:9b:0e:ce:ea:b9:96:08:4d:31:8e:6b:35:c5:d8:
         b0:21:f7:ae:53:1f:af:01:aa:9c:98:b8:68:16:98:5e:90:1f:
         77:f0:bc:04:51:d4:7d:83:32:57:7c:26:8e:a8:63:1f:4d:ca:
         9b:44:a0:a6:12:2d:47:f9:10:87:e7:1f:e9:45:ce:26:fe:ba:
         45:8c:81:72:0a:20:33:57:e7:91:1d:bd:cd:17:2b:90:4d:dd:
         cd:1b:ba:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----