Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/323830343a343463633a3a2f33322d3335203d3e20323637363534.roa
File:                     323830343a343463633a3a2f33322d3335203d3e20323637363534.roa (raw, json)
Hash identifier:          1kAFq6bmFJT677kh/ZJeQk+K6IqlPTfT77GcCcaKBTY=
Subject key identifier:   6A:8D:A8:DA:97:FB:53:F0:2B:79:4B:9F:F8:78:87:17:DC:FD:F7:77
Certificate issuer:       /CN=EA64F678B3E4692978A38CF10F5606C1ECD4CACC
Certificate serial:       0F9292312216A18A13EF944054B99BEBFED05591
Authority key identifier: EA:64:F6:78:B3:E4:69:29:78:A3:8C:F1:0F:56:06:C1:EC:D4:CA:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA64F678B3E4692978A38CF10F5606C1ECD4CACC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/323830343a343463633a3a2f33322d3335203d3e20323637363534.roa
Signing time:             Mon 04 Mar 2024 04:18:48 +0000
ROA not before:           Mon 04 Mar 2024 04:13:48 +0000
ROA not after:            Mon 03 Mar 2025 04:18:48 +0000
asID:                     267654
IP address blocks:        2804:44cc::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:92:92:31:22:16:a1:8a:13:ef:94:40:54:b9:9b:eb:fe:d0:55:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA64F678B3E4692978A38CF10F5606C1ECD4CACC
        Validity
            Not Before: Mar  4 04:13:48 2024 GMT
            Not After : Mar  3 04:18:48 2025 GMT
        Subject: CN=6A8DA8DA97FB53F02B794B9FF8788717DCFDF777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1a:8b:ce:2d:3b:73:f0:4c:ac:ff:43:53:cf:
                    20:cb:25:24:32:3d:a3:8a:3a:63:a3:65:28:68:db:
                    3e:c4:42:3e:26:f0:c5:97:e1:e1:4c:a6:e1:46:f2:
                    24:1c:c3:3a:b1:2d:d7:a4:43:49:8b:4f:44:b5:b3:
                    1e:90:35:11:ef:47:24:83:95:bc:f7:72:7c:5c:32:
                    c1:0c:f9:09:a5:c4:f6:a3:2b:79:db:bc:33:49:1e:
                    d8:de:39:4d:a6:4b:60:f9:98:94:c0:9c:6e:b7:89:
                    79:3f:b6:05:c1:49:07:44:5f:5d:d8:96:4a:c3:d5:
                    26:f7:62:71:16:ae:47:ed:fe:05:1b:69:d9:b4:0f:
                    95:d8:25:db:f4:64:b7:32:00:6d:06:5c:1b:19:75:
                    92:22:d7:c7:e8:9a:b7:f8:2a:bd:a9:81:a3:1f:07:
                    7d:2c:fe:df:a6:ff:6d:da:ff:04:63:7f:38:95:63:
                    6a:a6:9d:e0:f7:45:cb:b5:7d:82:2c:7d:38:78:8e:
                    ee:a7:af:14:a1:69:73:96:da:09:02:20:87:b5:6d:
                    6e:2e:14:c0:b9:14:da:2c:a2:20:1e:cd:79:aa:27:
                    08:3f:5b:b1:03:85:ac:e6:36:0c:96:d4:5b:70:26:
                    98:9f:ef:ad:5c:01:d1:a8:80:f0:7a:31:d4:8d:d0:
                    31:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:8D:A8:DA:97:FB:53:F0:2B:79:4B:9F:F8:78:87:17:DC:FD:F7:77
            X509v3 Authority Key Identifier:
                keyid:EA:64:F6:78:B3:E4:69:29:78:A3:8C:F1:0F:56:06:C1:EC:D4:CA:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/EA64F678B3E4692978A38CF10F5606C1ECD4CACC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA64F678B3E4692978A38CF10F5606C1ECD4CACC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/323830343a343463633a3a2f33322d3335203d3e20323637363534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:44cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:5c:8d:6b:0c:12:f8:a8:1e:26:25:f8:a1:4c:a6:94:c0:b4:
         da:bf:1a:0d:86:59:c2:e2:aa:56:e9:ea:9b:71:ce:14:57:99:
         1a:5f:a1:0d:f9:79:55:e8:1f:c5:44:de:e2:d2:9a:6d:54:a1:
         85:77:0c:7d:70:ec:17:af:2b:2e:06:11:3b:51:87:de:32:0e:
         8e:10:5a:68:1c:1b:76:cd:3c:0b:01:c6:c1:99:68:77:53:54:
         92:77:c0:7d:b2:13:65:fb:5d:67:42:ea:c5:2e:57:b7:40:ea:
         28:73:5c:7c:33:73:30:05:28:b8:d5:3c:78:9c:3d:46:94:cb:
         88:87:e6:bc:3d:83:cf:f4:ce:3e:49:d5:93:be:7e:dc:72:82:
         73:fb:6d:59:61:2c:e1:fb:6d:f2:ef:b3:dd:35:a4:db:fe:b1:
         8d:bd:1a:c3:d1:aa:ef:d5:6e:87:d3:f8:65:d8:0b:bb:64:52:
         93:bb:06:6a:c6:ad:bc:ea:39:87:90:3a:07:7d:3a:4b:32:3c:
         4c:db:dd:2f:f8:35:70:46:4f:41:08:72:73:22:30:11:a7:a5:
         e9:46:c1:c2:e3:ce:2e:5c:bf:39:9c:90:21:00:19:ef:f9:0c:
         d5:72:13:5c:a1:67:85:a6:2c:9f:13:22:e6:dc:4d:c6:75:e0:
         59:4d:a7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----