Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0/323830343a373836383a3a2f33322d3332203d3e20323731323430.roa
File:                     323830343a373836383a3a2f33322d3332203d3e20323731323430.roa (raw, json)
Hash identifier:          Bnwa5cT5n7B79E8oiGetL/2YjNKO8YUiOyZyFHjgSHk=
Subject key identifier:   50:25:FC:13:D0:78:AE:50:ED:DA:B8:04:0E:42:7B:1C:CD:DC:6D:0B
Certificate issuer:       /CN=85CE4330E3308022DBE77EBC481C4AAF39692E70
Certificate serial:       088F78E444FA4B1E79938C80435B27D07B88B5A7
Authority key identifier: 85:CE:43:30:E3:30:80:22:DB:E7:7E:BC:48:1C:4A:AF:39:69:2E:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85CE4330E3308022DBE77EBC481C4AAF39692E70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0/323830343a373836383a3a2f33322d3332203d3e20323731323430.roa
Signing time:             Mon 15 Jan 2024 21:00:00 +0000
ROA not before:           Mon 15 Jan 2024 20:55:00 +0000
ROA not after:            Mon 13 Jan 2025 21:00:00 +0000
asID:                     271240
IP address blocks:        2804:7868::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:8f:78:e4:44:fa:4b:1e:79:93:8c:80:43:5b:27:d0:7b:88:b5:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85CE4330E3308022DBE77EBC481C4AAF39692E70
        Validity
            Not Before: Jan 15 20:55:00 2024 GMT
            Not After : Jan 13 21:00:00 2025 GMT
        Subject: CN=5025FC13D078AE50EDDAB8040E427B1CCDDC6D0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:49:d6:74:c1:44:a6:28:fb:07:21:0d:f1:bf:
                    28:04:aa:1d:91:5f:b9:e2:4d:87:d2:c5:b2:79:ee:
                    92:10:dc:9e:01:b2:f7:99:01:8b:3e:39:75:5e:dc:
                    ae:b3:3c:e1:f3:da:f1:d5:90:24:e6:ab:40:22:6b:
                    0e:a1:b6:b0:ea:8b:0a:ea:8e:3f:6d:d9:95:ad:60:
                    41:7e:d6:31:50:26:6a:31:7d:4b:f8:4b:2d:22:3d:
                    a9:a4:e0:21:c1:39:22:cf:c4:52:1d:1c:72:8d:2c:
                    d2:dc:fa:56:5d:52:a6:7f:93:73:ac:60:f5:ce:52:
                    98:ef:43:21:4a:21:c0:2a:cf:58:e9:de:64:a5:00:
                    12:47:e7:72:7e:51:fa:36:b1:82:84:f9:e4:1e:02:
                    34:c6:67:0f:07:cd:06:3a:9b:1d:72:db:2b:37:a4:
                    53:dc:0c:f3:9c:97:6e:8b:72:13:ba:7e:ff:4a:fe:
                    58:66:d5:24:ed:3e:dd:09:1c:f1:38:34:7a:4a:06:
                    ce:25:7f:f0:64:50:b9:07:a6:12:e4:d6:6a:f6:8c:
                    eb:c1:31:b0:8b:6b:47:ab:95:9d:39:c4:63:81:b5:
                    ad:3c:86:df:85:db:0b:57:e0:e3:12:ca:70:4f:17:
                    b2:41:38:00:b6:38:59:1c:7e:51:32:ce:e3:df:61:
                    af:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:25:FC:13:D0:78:AE:50:ED:DA:B8:04:0E:42:7B:1C:CD:DC:6D:0B
            X509v3 Authority Key Identifier:
                keyid:85:CE:43:30:E3:30:80:22:DB:E7:7E:BC:48:1C:4A:AF:39:69:2E:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0/85CE4330E3308022DBE77EBC481C4AAF39692E70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85CE4330E3308022DBE77EBC481C4AAF39692E70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0/323830343a373836383a3a2f33322d3332203d3e20323731323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7868::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:c0:f2:22:c2:b2:78:a6:e1:b0:d9:c8:c8:81:9a:2a:27:83:
         f9:ee:6c:f5:62:23:49:75:38:bc:c8:f7:41:4e:0b:99:0c:54:
         f4:0a:b2:bc:91:a3:ed:23:f7:5e:09:92:6a:09:03:b3:3e:61:
         fa:c6:47:da:3f:1c:76:53:dd:d1:ae:c3:70:10:f5:2a:c6:68:
         26:14:0a:f9:b8:9d:34:c7:91:81:ca:49:8f:d6:ee:df:8e:a5:
         84:23:8c:c7:ef:f7:82:29:14:2c:01:9c:cd:ae:b9:7d:98:c6:
         9a:a5:80:a4:0b:b4:64:8f:10:2a:31:c3:85:17:7f:9b:96:da:
         3b:64:cb:d3:0c:7f:81:07:84:9b:98:30:0f:71:79:17:f6:d1:
         2f:2f:ac:7d:1d:c7:ec:83:ca:96:34:a4:06:52:8b:7e:0c:c0:
         1a:79:38:07:39:df:ce:7f:a2:53:61:f0:ac:13:13:9a:40:75:
         66:af:53:07:05:ec:7d:80:af:a0:e7:21:c9:92:36:c7:0d:00:
         18:16:1b:c5:7b:63:4d:7d:03:c7:04:eb:fb:b7:78:68:32:fc:
         cc:e8:11:5e:ff:03:df:08:d7:c7:e3:39:75:5a:51:9e:d8:77:
         f6:c6:03:9f:d3:bc:d6:75:a7:e4:4d:c7:2a:3b:81:f2:4c:43:
         06:d3:6c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----