Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/0/323830343a326666303a3a2f33322d3438203d3e20323634393231.roa
File:                     323830343a326666303a3a2f33322d3438203d3e20323634393231.roa (raw, json)
Hash identifier:          MB6Btzbgz/YcuDPBkyT7+HKUfQyudV++P6dXVjKg/Kk=
Subject key identifier:   B8:A5:FF:E3:F8:80:C2:C2:2A:13:45:F7:84:90:2C:9E:98:FD:43:55
Certificate issuer:       /CN=A38A74D179221A66470DC4C00BDE42B3F59C23CC
Certificate serial:       1514B649710FB8490B04F6C520B57385818F6254
Authority key identifier: A3:8A:74:D1:79:22:1A:66:47:0D:C4:C0:0B:DE:42:B3:F5:9C:23:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A38A74D179221A66470DC4C00BDE42B3F59C23CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/0/323830343a326666303a3a2f33322d3438203d3e20323634393231.roa
Signing time:             Wed 03 Apr 2024 13:25:25 +0000
ROA not before:           Wed 03 Apr 2024 13:20:25 +0000
ROA not after:            Wed 02 Apr 2025 13:25:25 +0000
asID:                     264921
IP address blocks:        2804:2ff0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:14:b6:49:71:0f:b8:49:0b:04:f6:c5:20:b5:73:85:81:8f:62:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A38A74D179221A66470DC4C00BDE42B3F59C23CC
        Validity
            Not Before: Apr  3 13:20:25 2024 GMT
            Not After : Apr  2 13:25:25 2025 GMT
        Subject: CN=B8A5FFE3F880C2C22A1345F784902C9E98FD4355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b9:41:3d:9b:2f:e1:2e:72:51:e7:15:9b:9c:
                    57:34:4c:57:c9:63:fd:1a:ca:76:30:8c:53:6d:c7:
                    f5:38:16:fa:51:87:8b:63:71:e6:a5:8d:cf:be:ba:
                    1c:ff:ca:79:01:26:28:1d:d3:3d:1e:94:e6:09:c2:
                    60:e1:ea:04:2f:d2:c7:01:07:8c:86:6f:06:29:20:
                    f5:f4:24:fd:e8:a9:d9:a1:d2:23:13:68:bc:4c:1c:
                    fc:3e:70:76:51:90:4a:ef:39:27:52:6a:51:d0:e3:
                    2f:62:00:a2:b3:b4:e8:79:8e:cb:20:66:4c:db:4f:
                    d7:9a:6c:99:ee:6e:d6:fc:6a:dd:38:99:bd:8d:e9:
                    cb:ca:1e:43:5d:09:b9:d2:8b:67:de:1d:33:54:08:
                    3c:10:c0:9c:9a:2c:cf:aa:bf:0a:8d:93:f8:79:e2:
                    d9:39:17:4d:29:a7:f0:0c:1b:a0:09:0f:8c:51:ed:
                    9b:64:65:84:9e:86:59:a5:72:cb:56:43:36:ff:cc:
                    90:2a:2c:aa:04:9d:1e:79:8a:f5:bf:a9:2b:e9:b7:
                    6a:ed:11:9c:26:97:35:cf:f7:7b:18:50:2c:13:95:
                    84:91:a3:ef:78:ae:83:cf:c7:89:52:da:8f:a0:59:
                    f3:1c:da:31:bc:5b:41:b8:d7:01:ce:23:4a:dc:c5:
                    5a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A5:FF:E3:F8:80:C2:C2:2A:13:45:F7:84:90:2C:9E:98:FD:43:55
            X509v3 Authority Key Identifier:
                keyid:A3:8A:74:D1:79:22:1A:66:47:0D:C4:C0:0B:DE:42:B3:F5:9C:23:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/0/A38A74D179221A66470DC4C00BDE42B3F59C23CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A38A74D179221A66470DC4C00BDE42B3F59C23CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/0/323830343a326666303a3a2f33322d3438203d3e20323634393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ff0::/32

    Signature Algorithm: sha256WithRSAEncryption
         de:6f:e3:08:29:cd:d2:84:8b:0f:fc:c8:b9:fa:e7:ad:42:d6:
         45:fa:98:5e:d9:da:ba:c6:d8:8e:dc:8b:34:fb:5f:bc:8d:2c:
         2d:be:c3:45:f6:36:a6:c7:f2:5b:d5:d0:43:79:b2:5d:1f:f7:
         a8:0f:b0:e4:bf:d3:b6:cd:39:97:ab:6c:4b:50:2f:be:d0:b8:
         20:b9:2a:f6:c2:3f:4f:be:cf:99:92:23:12:3c:0b:cf:35:75:
         da:8c:1a:4e:ac:a5:1d:6a:75:e6:5b:5c:2a:aa:a7:6d:f4:33:
         df:80:16:3a:e1:e2:f0:a5:99:b4:07:b9:e8:08:8e:16:fd:00:
         51:eb:94:95:d0:6e:79:6d:70:6d:c2:a3:4f:62:a8:a0:b9:c7:
         2a:65:77:d5:79:84:7c:5c:37:f2:7b:a6:dc:07:44:41:fc:64:
         32:16:d2:18:e1:19:0c:03:7e:ef:76:11:3f:88:1e:32:ac:5b:
         9a:60:8f:b2:4c:91:e9:de:55:c6:b7:b9:bf:df:08:b0:ed:0e:
         76:16:05:5b:dc:c6:83:49:2e:44:8b:27:84:39:81:c3:cc:9d:
         27:02:36:cc:0d:cf:25:ee:05:ee:a6:ba:d4:64:fc:5a:3f:00:
         a3:e3:c2:27:5d:6b:2f:9b:d3:0d:4a:68:0c:36:8e:0a:ea:d8:
         77:05:ec:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----