Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/0/323830343a6464303a3a2f33322d313238203d3e203238363339.roa
File:                     323830343a6464303a3a2f33322d313238203d3e203238363339.roa (raw, json)
Hash identifier:          VF+bz6Giotyvs3Ykcgncj2kcaG3tKQDwn816itISQJ4=
Subject key identifier:   B4:77:9B:8C:F9:CC:7A:D9:16:95:9B:43:4B:5E:7C:CB:B0:E3:B0:8D
Certificate issuer:       /CN=0D48627D50F9C4D0D9AA778F246C5227F7AAF5D1
Certificate serial:       770F9B53AAD545E736FA991D487495835B705840
Authority key identifier: 0D:48:62:7D:50:F9:C4:D0:D9:AA:77:8F:24:6C:52:27:F7:AA:F5:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D48627D50F9C4D0D9AA778F246C5227F7AAF5D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/0/323830343a6464303a3a2f33322d313238203d3e203238363339.roa
Signing time:             Sat 24 Feb 2024 13:00:28 +0000
ROA not before:           Sat 24 Feb 2024 12:55:28 +0000
ROA not after:            Sat 22 Feb 2025 13:00:28 +0000
asID:                     28639
IP address blocks:        2804:dd0::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:0f:9b:53:aa:d5:45:e7:36:fa:99:1d:48:74:95:83:5b:70:58:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D48627D50F9C4D0D9AA778F246C5227F7AAF5D1
        Validity
            Not Before: Feb 24 12:55:28 2024 GMT
            Not After : Feb 22 13:00:28 2025 GMT
        Subject: CN=B4779B8CF9CC7AD916959B434B5E7CCBB0E3B08D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6a:d9:e1:6f:e1:39:a7:d3:ba:27:23:66:8e:
                    99:60:f9:44:8e:b5:f7:27:26:89:37:44:82:26:07:
                    fb:43:4d:f5:f5:01:34:1b:7c:59:2a:6e:c9:04:37:
                    03:5f:f5:f8:9b:64:18:90:af:39:b3:c5:a1:ca:59:
                    e5:6e:3c:b4:92:9a:4f:92:15:69:37:00:59:ff:7f:
                    66:b2:49:1b:bd:9a:de:c3:41:74:32:cc:a5:26:55:
                    78:92:24:b3:70:5a:9f:a5:a3:86:75:4e:c2:b7:8b:
                    73:10:18:55:6c:3c:94:ab:90:ae:30:3d:f3:0f:b1:
                    42:b2:56:b6:a3:cb:17:c4:36:3c:23:1b:fd:e6:4d:
                    75:33:1d:6e:04:94:ac:fe:54:a7:a4:e6:25:50:e6:
                    96:ad:4a:d4:a3:c2:68:58:1c:d6:ad:94:8e:8a:6c:
                    13:1f:5b:b9:3e:9b:7b:6b:40:92:07:bb:2d:53:47:
                    79:5c:2f:2c:71:41:b4:21:0d:4c:8a:1b:93:7c:7c:
                    e0:52:b3:a1:08:9c:a4:f7:00:59:33:dc:ec:a7:b2:
                    d4:31:a0:f3:b3:af:87:50:6d:1a:8d:78:79:4f:f1:
                    98:db:73:8e:f1:b9:0b:0b:4a:95:c7:6b:42:94:0c:
                    f4:46:5e:09:58:75:ca:a6:ed:3f:83:40:03:8b:fb:
                    07:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:77:9B:8C:F9:CC:7A:D9:16:95:9B:43:4B:5E:7C:CB:B0:E3:B0:8D
            X509v3 Authority Key Identifier:
                keyid:0D:48:62:7D:50:F9:C4:D0:D9:AA:77:8F:24:6C:52:27:F7:AA:F5:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/0/0D48627D50F9C4D0D9AA778F246C5227F7AAF5D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D48627D50F9C4D0D9AA778F246C5227F7AAF5D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/0/323830343a6464303a3a2f33322d313238203d3e203238363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:dd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:19:48:d2:ba:18:49:25:d8:ca:c5:11:70:8c:44:a3:44:48:
         b8:bd:de:46:86:e4:76:17:f2:e0:df:53:06:01:83:92:cc:4b:
         c4:fd:73:b1:aa:4f:41:1b:55:bb:ba:0c:14:b3:4b:c4:b5:ae:
         ed:ed:e7:b8:0e:12:29:4a:e8:6e:5d:9d:7d:d7:e7:d0:13:e8:
         d4:34:d1:c0:2c:c5:e5:6e:8a:95:4f:cb:32:ce:e3:c0:62:30:
         ae:d0:f4:64:b5:46:78:2e:f2:b9:d9:e4:b6:b0:b4:8a:7d:68:
         b3:0c:82:26:9f:99:f3:fa:70:cf:cc:36:b2:f2:c8:b1:5b:a1:
         a8:dd:9c:43:7b:cc:40:6f:c3:b5:18:f6:e7:e7:3a:19:91:f0:
         cb:fd:1e:f7:95:32:5c:64:89:a7:4d:f2:23:43:59:1e:80:da:
         ac:0f:37:0a:4e:4e:8a:3b:7e:35:7d:a0:db:84:ca:ed:fe:5b:
         83:27:fc:30:ea:63:a0:17:99:81:bf:ba:98:02:68:c3:15:29:
         a2:3b:6f:f2:14:b8:9a:de:67:43:9a:32:7c:b2:81:13:58:26:
         7a:8e:3d:30:c5:6e:a6:f4:b0:c5:f7:76:dc:aa:94:e8:f6:a3:
         1d:68:03:4c:b7:4f:e0:02:e8:31:b9:6b:fc:6b:43:4d:45:55:
         2c:62:2a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----