Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/0/323830343a6566343a3a2f33322d3438203d3e203238363432.roa
File:                     323830343a6566343a3a2f33322d3438203d3e203238363432.roa (raw, json)
Hash identifier:          4tGaMfqAg4NWHOSJx69LYPUc1d6jUzsJPEu9rS86ATM=
Subject key identifier:   4B:C7:9A:45:DC:8E:7A:E0:0E:81:C6:F3:A7:2B:36:6A:08:A4:00:4E
Certificate issuer:       /CN=133EC73F873552B7C1C2E7AA61D3014E33FB793E
Certificate serial:       10B56CDC731B4535CE56EBABD3B442FD46A53BB0
Authority key identifier: 13:3E:C7:3F:87:35:52:B7:C1:C2:E7:AA:61:D3:01:4E:33:FB:79:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/133EC73F873552B7C1C2E7AA61D3014E33FB793E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/0/323830343a6566343a3a2f33322d3438203d3e203238363432.roa
Signing time:             Tue 26 Mar 2024 14:25:43 +0000
ROA not before:           Tue 26 Mar 2024 14:20:43 +0000
ROA not after:            Tue 25 Mar 2025 14:25:43 +0000
asID:                     28642
IP address blocks:        2804:ef4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:b5:6c:dc:73:1b:45:35:ce:56:eb:ab:d3:b4:42:fd:46:a5:3b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133EC73F873552B7C1C2E7AA61D3014E33FB793E
        Validity
            Not Before: Mar 26 14:20:43 2024 GMT
            Not After : Mar 25 14:25:43 2025 GMT
        Subject: CN=4BC79A45DC8E7AE00E81C6F3A72B366A08A4004E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e9:ce:1d:87:39:df:e3:19:07:01:46:bf:dc:
                    91:ed:57:9e:5f:b5:04:c1:95:9d:67:8e:50:e1:6f:
                    ca:df:a0:b7:fb:12:9d:cf:8a:c1:46:a7:21:3b:6e:
                    a8:33:79:13:64:5d:17:f3:56:93:28:23:f2:11:fe:
                    fb:0d:8f:90:e1:ac:26:bc:db:35:93:fb:e5:22:ff:
                    3a:12:51:0d:94:a9:02:87:6c:9e:00:41:ab:ab:41:
                    50:ca:ab:20:45:3e:d0:15:89:90:d3:2d:f3:86:ca:
                    16:5a:e6:12:a0:c0:58:3b:91:8b:2c:75:b5:83:91:
                    30:4e:89:6d:60:ff:59:76:b3:af:0d:e6:4a:a4:05:
                    4a:2b:39:ae:f6:b2:88:5c:1d:0e:ae:23:5c:31:17:
                    dd:ca:2b:6e:31:07:59:34:77:76:c2:4d:91:43:ac:
                    d5:cb:ee:0d:83:cd:9b:70:0a:40:0b:aa:1f:c9:72:
                    a2:17:33:a0:e2:cd:f4:62:e0:7b:de:f1:20:84:70:
                    8e:9a:8c:5a:3e:78:f8:e0:78:82:e2:90:91:05:3d:
                    a6:91:a6:86:0c:8d:64:a6:4e:58:9d:82:67:13:25:
                    a7:56:4a:5f:9b:67:81:98:40:34:40:05:2e:e9:b9:
                    cf:b1:86:5b:8d:05:7d:12:f9:f7:18:51:cc:67:ad:
                    b4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:C7:9A:45:DC:8E:7A:E0:0E:81:C6:F3:A7:2B:36:6A:08:A4:00:4E
            X509v3 Authority Key Identifier:
                keyid:13:3E:C7:3F:87:35:52:B7:C1:C2:E7:AA:61:D3:01:4E:33:FB:79:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/0/133EC73F873552B7C1C2E7AA61D3014E33FB793E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/133EC73F873552B7C1C2E7AA61D3014E33FB793E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/0/323830343a6566343a3a2f33322d3438203d3e203238363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ef4::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:ba:66:7c:ea:f4:46:d9:10:e7:25:d3:7e:d4:b8:8e:db:34:
         d8:25:02:1f:42:b9:8e:94:97:88:d0:46:3b:52:5f:3d:47:f5:
         12:dd:36:56:6d:ec:2b:57:49:dc:57:0f:98:5e:ce:35:1d:ad:
         22:69:a4:38:92:17:17:75:07:8b:65:26:b9:45:11:8d:ad:89:
         fd:e1:3b:2e:bb:2e:eb:0d:b5:e8:e4:1a:3a:1c:e5:8c:3f:1f:
         5d:dd:89:8e:20:8a:40:ae:c7:d8:09:1e:fb:59:c6:9c:f4:94:
         93:5e:2e:45:73:3c:13:58:2a:29:40:1a:c3:c5:e4:61:72:83:
         92:ea:e8:ba:a3:4f:f7:17:25:68:aa:d0:1b:7d:0f:4a:56:56:
         3a:7a:d9:6c:7a:bf:49:19:54:9f:56:1a:31:b2:82:9d:14:95:
         11:77:93:b7:78:67:60:17:fd:18:57:66:e1:dd:6a:83:25:c8:
         89:4d:61:a6:d9:8f:25:14:90:26:97:89:86:bc:9c:52:5e:de:
         2f:40:aa:44:d9:eb:61:29:f5:6d:84:f3:66:1d:87:73:fb:4c:
         4f:2f:3a:b8:ef:93:07:b3:19:55:36:5b:9a:3a:dc:04:fd:36:
         ff:8f:e9:c5:e3:84:de:cf:5d:a0:b9:20:3d:e9:aa:59:a8:90:
         7f:eb:4d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----