Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/0/323830343a356236633a3a2f33322d3332203d3e20323638383432.roa
File:                     323830343a356236633a3a2f33322d3332203d3e20323638383432.roa (raw, json)
Hash identifier:          7sU7BhQ5LTpeu2GKZ2MyZx/13ROM9YBjkNXCkYazMEM=
Subject key identifier:   C2:22:DF:AD:60:C9:0A:B6:A3:EB:8A:B9:2F:18:56:EB:C5:97:34:A0
Certificate issuer:       /CN=C7A1F2F4044BC397332AA8FDBE7B5E47FCC6B277
Certificate serial:       2E563436D97AA1735A490FC92D1E5E7A59F58D9E
Authority key identifier: C7:A1:F2:F4:04:4B:C3:97:33:2A:A8:FD:BE:7B:5E:47:FC:C6:B2:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C7A1F2F4044BC397332AA8FDBE7B5E47FCC6B277.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/0/323830343a356236633a3a2f33322d3332203d3e20323638383432.roa
Signing time:             Thu 07 Mar 2024 15:54:56 +0000
ROA not before:           Thu 07 Mar 2024 15:49:56 +0000
ROA not after:            Thu 06 Mar 2025 15:54:56 +0000
asID:                     268842
IP address blocks:        2804:5b6c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:56:34:36:d9:7a:a1:73:5a:49:0f:c9:2d:1e:5e:7a:59:f5:8d:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7A1F2F4044BC397332AA8FDBE7B5E47FCC6B277
        Validity
            Not Before: Mar  7 15:49:56 2024 GMT
            Not After : Mar  6 15:54:56 2025 GMT
        Subject: CN=C222DFAD60C90AB6A3EB8AB92F1856EBC59734A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c6:4d:33:71:16:93:61:45:6b:42:68:b0:d1:
                    cb:bc:32:69:25:cf:e3:d0:64:e2:4e:32:30:ea:2b:
                    40:25:16:50:cf:de:3c:a4:c7:48:e3:89:1a:f9:4c:
                    bf:6d:b5:04:57:8c:2b:ae:0b:1c:3b:3f:5d:ec:b6:
                    6d:fb:12:1e:3d:66:5b:ef:44:f4:3c:8d:74:13:4e:
                    cb:8b:3a:fe:c0:db:60:01:58:c5:37:fa:3a:de:33:
                    ea:dc:4f:9a:5a:06:e0:75:dc:bd:d1:f2:51:33:ca:
                    c4:19:f9:39:d8:ec:14:f8:2d:e0:30:f8:46:9f:d0:
                    f6:3b:7b:03:25:f1:ea:04:77:1c:e3:5b:09:b9:b4:
                    01:b7:1d:fc:62:2e:1b:94:1b:d6:5f:52:dc:4b:b5:
                    09:2d:f7:c9:7c:07:2a:26:0f:1e:f8:a8:4c:60:84:
                    2b:42:c3:d5:f5:e6:23:c9:1f:64:f6:3a:2a:87:70:
                    af:f2:fb:ea:87:16:23:05:8a:d0:9a:cb:f8:ef:8d:
                    d0:a0:45:fd:59:9a:a5:f4:28:68:20:aa:d3:df:97:
                    f2:62:51:bc:72:a3:87:52:e4:d3:c5:2e:29:68:e3:
                    a5:9b:3d:ce:e5:fd:a9:75:6a:71:e6:db:97:ba:91:
                    61:f6:58:2e:c9:d5:bf:26:b5:8b:b5:f5:36:f3:0c:
                    88:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:22:DF:AD:60:C9:0A:B6:A3:EB:8A:B9:2F:18:56:EB:C5:97:34:A0
            X509v3 Authority Key Identifier:
                keyid:C7:A1:F2:F4:04:4B:C3:97:33:2A:A8:FD:BE:7B:5E:47:FC:C6:B2:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/0/C7A1F2F4044BC397332AA8FDBE7B5E47FCC6B277.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C7A1F2F4044BC397332AA8FDBE7B5E47FCC6B277.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/0/323830343a356236633a3a2f33322d3332203d3e20323638383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:ca:b9:18:62:7b:9e:4b:3b:c4:b9:a8:96:6e:cd:34:12:3a:
         60:9e:16:81:ae:1b:ab:26:a7:bd:eb:fd:f6:81:08:6a:42:08:
         5f:de:76:9d:36:73:d5:29:70:ff:b3:ca:aa:71:37:0e:d9:31:
         38:b9:e9:71:f4:8a:34:70:d8:34:bd:73:97:2c:0e:98:81:a6:
         5f:d5:75:0b:d5:47:a0:b0:a3:68:57:0f:7f:c0:10:db:7c:f1:
         60:67:16:02:e6:32:ac:d9:b9:c4:cc:42:d2:dc:37:8e:86:03:
         6c:c7:29:2a:3a:4f:4b:49:2f:f1:4b:be:3a:27:71:c4:bf:37:
         06:c9:8e:61:a5:45:5f:69:97:1d:30:8a:20:46:5e:3c:8f:21:
         14:78:40:4a:fe:b7:08:f4:81:bc:b1:56:0e:fc:d5:0a:d1:a9:
         44:17:a7:09:0f:ce:16:7d:f4:76:a4:db:44:09:73:d4:00:bb:
         0b:33:d5:7d:56:09:87:73:17:c8:ce:22:50:9c:c9:1f:37:45:
         84:63:a0:44:f7:6a:dd:b2:28:f3:bf:d2:62:3d:cb:ec:58:66:
         8e:a8:53:ac:54:e7:b5:43:56:ec:2c:46:30:29:c0:97:c9:61:
         0d:3c:85:1e:1b:3a:b5:aa:34:37:b4:d8:07:39:e5:12:47:80:
         d7:c7:a1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----