Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/323830343a363234383a3a2f33322d3334203d3e20323639323838.roa
File:                     323830343a363234383a3a2f33322d3334203d3e20323639323838.roa (raw, json)
Hash identifier:          y+1MyjczqyZ7zzQW+E+Y7hbkYtUeQDp3kD/1ppppXpw=
Subject key identifier:   86:7E:3F:5E:70:CF:1A:F0:77:C2:FB:5D:9A:ED:98:F4:A0:AA:A9:C1
Certificate issuer:       /CN=DE7B7A8E2C385C99F41541B73ADEF209C9460857
Certificate serial:       2C997C4B5086DB766046522F6343F5B96740DCA9
Authority key identifier: DE:7B:7A:8E:2C:38:5C:99:F4:15:41:B7:3A:DE:F2:09:C9:46:08:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE7B7A8E2C385C99F41541B73ADEF209C9460857.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/323830343a363234383a3a2f33322d3334203d3e20323639323838.roa
Signing time:             Tue 19 Mar 2024 14:53:05 +0000
ROA not before:           Tue 19 Mar 2024 14:48:05 +0000
ROA not after:            Tue 18 Mar 2025 14:53:05 +0000
asID:                     269288
IP address blocks:        2804:6248::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:99:7c:4b:50:86:db:76:60:46:52:2f:63:43:f5:b9:67:40:dc:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE7B7A8E2C385C99F41541B73ADEF209C9460857
        Validity
            Not Before: Mar 19 14:48:05 2024 GMT
            Not After : Mar 18 14:53:05 2025 GMT
        Subject: CN=867E3F5E70CF1AF077C2FB5D9AED98F4A0AAA9C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d3:1f:68:7d:a6:cb:21:07:39:1a:3f:eb:f9:
                    8f:f5:8a:b2:a7:70:ae:6f:63:7e:1e:7c:c3:e6:de:
                    bc:c1:36:cf:03:61:d5:dd:69:86:a4:4e:e7:24:3e:
                    d9:96:9c:0e:b9:12:04:b2:19:39:1b:4a:70:b0:70:
                    d7:71:25:a4:42:b5:6a:c9:46:d8:4d:1c:a5:d9:4f:
                    94:cd:b7:6e:2e:57:a2:69:dc:eb:9e:2d:d4:b1:ae:
                    97:3f:89:4b:7a:97:6a:68:dd:39:57:38:05:fa:e4:
                    c3:de:50:d2:c1:0d:24:54:6d:ef:78:bf:a3:d3:c8:
                    4d:cb:39:e5:81:ce:05:02:b7:7d:62:e5:90:6c:83:
                    cb:de:28:7b:c4:b0:71:c3:23:12:4d:c2:45:f0:e3:
                    a2:d9:89:46:ad:66:31:cc:d4:fb:a0:41:81:86:b0:
                    e9:f5:ab:bc:78:18:dd:4d:23:9b:99:8e:9f:13:c9:
                    1c:f2:0e:8a:15:e7:f7:fa:6b:3a:28:f6:4d:17:7b:
                    bf:64:25:76:f6:e0:86:55:68:b7:9c:36:2c:f8:56:
                    de:ab:ef:7c:f1:18:55:e9:82:a6:d3:93:da:80:04:
                    e4:d4:5f:6a:c7:3e:59:78:03:d5:4f:71:62:25:67:
                    d3:6e:e9:24:d5:38:3a:ab:62:b7:a6:07:de:b6:ec:
                    4d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:7E:3F:5E:70:CF:1A:F0:77:C2:FB:5D:9A:ED:98:F4:A0:AA:A9:C1
            X509v3 Authority Key Identifier:
                keyid:DE:7B:7A:8E:2C:38:5C:99:F4:15:41:B7:3A:DE:F2:09:C9:46:08:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/DE7B7A8E2C385C99F41541B73ADEF209C9460857.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE7B7A8E2C385C99F41541B73ADEF209C9460857.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/323830343a363234383a3a2f33322d3334203d3e20323639323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6248::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:23:e1:6e:2c:68:a0:67:07:23:3c:06:55:23:9c:27:50:e8:
         4f:49:24:43:ce:f2:ca:20:72:56:9d:4c:60:c3:e1:b8:4b:d9:
         b0:fd:53:da:7a:6d:3b:9d:d2:30:3e:a3:e2:6a:c3:5f:99:48:
         d3:d7:b7:71:8c:da:a9:a4:da:7a:59:88:e7:dc:23:97:e3:a4:
         6e:d0:94:a8:6c:e6:4d:90:e5:4b:99:7a:59:d6:42:d6:a3:10:
         e7:95:d8:d0:0e:66:59:98:c0:de:6a:a1:74:87:8c:7a:a9:f8:
         22:6c:bc:e8:a8:fd:3b:8e:1e:8c:82:16:f3:0f:dc:da:52:9a:
         fb:7e:83:60:6a:2e:a0:6f:26:b0:e8:e9:8b:9e:a2:b5:65:65:
         a7:8a:63:43:44:db:51:42:eb:b5:ea:97:98:6e:94:b4:7f:2b:
         5a:e8:a4:a0:5e:e6:5c:16:a4:f3:d3:eb:41:66:22:4e:4d:9c:
         62:f7:b1:6c:70:b2:99:2f:89:7c:dc:51:08:86:fc:d8:c8:e4:
         c1:db:2b:2b:f4:b0:6e:11:b8:c9:ad:cc:e9:53:de:5a:66:fc:
         eb:03:38:4f:56:13:28:79:47:f6:70:35:e8:05:56:99:79:a1:
         77:44:6d:6e:ee:a5:f4:37:56:51:90:aa:49:e9:82:3b:e5:55:
         7d:30:61:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----