Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ib9Vq4KPJ9e9FHdPVSjczzxrhMG25CftMNuF46XdA5m/1/323830343a363533303a3a2f33322d313238203d3e20323639343734.roa
File:                     323830343a363533303a3a2f33322d313238203d3e20323639343734.roa (raw, json)
Hash identifier:          Zv4eXaJ+zYwtZC7X0FpaLmpKXw+0Zx/EArIm0wZgt6A=
Subject key identifier:   41:86:79:83:1E:43:94:4F:68:16:FF:4D:95:45:20:71:44:FC:8A:A5
Certificate issuer:       /CN=E072164F96709DE0BAF95CDD98A5A379CC96B3DA
Certificate serial:       6598B397B27BF22C5B485CAA58267C0684A6ADE4
Authority key identifier: E0:72:16:4F:96:70:9D:E0:BA:F9:5C:DD:98:A5:A3:79:CC:96:B3:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E072164F96709DE0BAF95CDD98A5A379CC96B3DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ib9Vq4KPJ9e9FHdPVSjczzxrhMG25CftMNuF46XdA5m/1/323830343a363533303a3a2f33322d313238203d3e20323639343734.roa
Signing time:             Fri 05 Apr 2024 21:48:48 +0000
ROA not before:           Fri 05 Apr 2024 21:43:48 +0000
ROA not after:            Fri 04 Apr 2025 21:48:48 +0000
asID:                     269474
IP address blocks:        2804:6530::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:98:b3:97:b2:7b:f2:2c:5b:48:5c:aa:58:26:7c:06:84:a6:ad:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E072164F96709DE0BAF95CDD98A5A379CC96B3DA
        Validity
            Not Before: Apr  5 21:43:48 2024 GMT
            Not After : Apr  4 21:48:48 2025 GMT
        Subject: CN=418679831E43944F6816FF4D9545207144FC8AA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8b:f0:cb:c3:74:04:92:2a:32:32:a0:3c:88:
                    ae:fd:cb:c1:43:43:55:b4:2c:4b:bd:be:8a:ae:7d:
                    ba:da:87:41:5f:90:44:8d:6c:9b:a0:9d:e0:6c:ae:
                    4b:de:e8:99:13:e9:c2:43:14:39:35:c7:4a:3c:b8:
                    b5:b0:05:bc:29:31:a6:1a:d2:ab:53:39:e3:f6:bf:
                    fc:bf:7e:07:55:b1:a3:ba:e2:ad:0b:20:f9:72:70:
                    93:65:8d:18:b1:b3:4e:e4:d0:09:e7:7f:3d:c9:aa:
                    83:5e:ba:65:bb:80:3a:08:3b:63:a7:df:03:4e:7a:
                    ff:8c:d3:d5:bc:46:6c:17:2c:c1:d7:77:7c:2e:6e:
                    e7:bb:ef:b1:ca:6b:fd:58:65:ac:68:c9:f5:7b:f8:
                    f9:5e:72:8f:44:4a:e0:d6:43:d2:ff:46:0d:eb:9f:
                    93:83:c5:dc:0c:0f:65:e0:bd:1e:c3:1e:be:b8:fa:
                    cd:6c:2c:c7:51:4d:e3:8e:e7:29:4f:5d:d6:41:b4:
                    ac:a8:7e:dd:f6:af:6f:51:33:87:ff:6a:eb:88:19:
                    af:77:f1:cf:00:f4:03:49:b2:69:a3:54:c2:13:bc:
                    8c:5f:6f:9a:b3:5f:35:a8:83:fb:88:43:58:42:68:
                    1d:41:40:e6:d1:4e:9a:3d:c7:a4:5e:12:aa:58:04:
                    b0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:86:79:83:1E:43:94:4F:68:16:FF:4D:95:45:20:71:44:FC:8A:A5
            X509v3 Authority Key Identifier:
                keyid:E0:72:16:4F:96:70:9D:E0:BA:F9:5C:DD:98:A5:A3:79:CC:96:B3:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ib9Vq4KPJ9e9FHdPVSjczzxrhMG25CftMNuF46XdA5m/1/E072164F96709DE0BAF95CDD98A5A379CC96B3DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E072164F96709DE0BAF95CDD98A5A379CC96B3DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ib9Vq4KPJ9e9FHdPVSjczzxrhMG25CftMNuF46XdA5m/1/323830343a363533303a3a2f33322d313238203d3e20323639343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6530::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:74:00:f4:ba:2c:4d:79:a8:53:e5:e6:6b:44:32:af:2f:1f:
         a8:6b:ed:10:25:86:ff:4d:6f:cf:30:5b:9a:b5:0b:3d:d8:3a:
         63:86:c0:26:59:c5:b2:b0:46:f9:31:49:77:9e:24:96:6a:6a:
         7e:d7:e6:13:61:d3:aa:18:51:0b:17:7c:4d:7e:b8:82:fb:51:
         25:74:17:5e:0f:f2:00:1a:00:bd:e4:50:67:a5:70:db:57:86:
         26:a6:13:79:2c:d5:0d:04:25:c4:ad:66:a3:d5:bd:9e:b5:87:
         f6:80:ee:2e:b7:f3:df:fa:fb:5b:05:5e:d9:b4:01:44:22:71:
         44:77:0b:5f:04:51:5d:d2:6b:cc:e4:a6:41:a4:44:9c:4d:c6:
         69:76:a6:a3:d0:08:88:3c:78:76:0d:4e:5e:ee:7c:67:a3:64:
         96:8d:9a:38:6f:85:58:03:2b:a2:2f:58:eb:57:13:76:28:00:
         07:32:3f:72:2d:83:62:62:bf:ec:e9:77:ea:f8:b0:eb:d2:8f:
         0f:bc:0f:3e:58:ff:43:4d:b9:87:41:fd:6d:92:48:8e:cd:0d:
         74:ab:d8:38:e1:c7:42:00:08:3c:77:db:8b:77:09:9e:02:c7:
         5b:03:e2:d5:8b:58:ec:b5:3f:d8:12:a3:bf:07:ef:85:4a:1a:
         c8:bc:19:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----