Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/0/323830343a343631383a313030313a3a2f34382d3438203d3e20323636393638.roa
File:                     323830343a343631383a313030313a3a2f34382d3438203d3e20323636393638.roa (raw, json)
Hash identifier:          8zp/Cel8yZ2jtL610M8savs5DdAmrusbnWrKOl20Yhs=
Subject key identifier:   04:B2:9E:E5:4C:7C:80:7F:D5:7C:58:50:CA:34:F0:0A:96:89:FA:AA
Certificate issuer:       /CN=74FA7BEC0A12DC39CA289CE410D30FE47A56EAD1
Certificate serial:       3118C9827D54350A98C545D60E003BA84DABDE24
Authority key identifier: 74:FA:7B:EC:0A:12:DC:39:CA:28:9C:E4:10:D3:0F:E4:7A:56:EA:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74FA7BEC0A12DC39CA289CE410D30FE47A56EAD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/0/323830343a343631383a313030313a3a2f34382d3438203d3e20323636393638.roa
Signing time:             Mon 11 Mar 2024 19:02:25 +0000
ROA not before:           Mon 11 Mar 2024 18:57:25 +0000
ROA not after:            Mon 10 Mar 2025 19:02:25 +0000
asID:                     266968
IP address blocks:        2804:4618:1001::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:18:c9:82:7d:54:35:0a:98:c5:45:d6:0e:00:3b:a8:4d:ab:de:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74FA7BEC0A12DC39CA289CE410D30FE47A56EAD1
        Validity
            Not Before: Mar 11 18:57:25 2024 GMT
            Not After : Mar 10 19:02:25 2025 GMT
        Subject: CN=04B29EE54C7C807FD57C5850CA34F00A9689FAAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:9a:3e:33:88:6d:38:02:94:e7:7a:75:9b:1d:
                    de:6c:62:04:26:26:d6:8f:1a:63:e9:d8:2f:21:ae:
                    c2:91:db:9a:b6:4e:8c:73:41:ee:48:43:88:e2:40:
                    83:f7:95:9b:48:93:47:7f:e4:f5:17:66:48:09:7b:
                    9c:2a:b1:ee:89:37:67:7e:74:72:08:85:90:63:09:
                    16:17:76:9f:ac:d1:7b:ff:b7:a6:63:36:ca:56:eb:
                    ef:d5:aa:59:90:73:15:a2:ec:f6:25:8b:ec:6c:53:
                    3a:1b:e6:08:3c:4d:a6:c5:28:df:4a:bd:ef:7e:6a:
                    5f:ed:f9:49:34:22:c3:33:2a:48:cc:84:6c:59:2c:
                    6d:33:e4:ee:32:f4:77:00:27:86:58:85:bd:c2:de:
                    cd:41:50:6c:a2:04:7a:fc:5e:80:e4:34:55:e9:77:
                    20:34:40:3a:c0:fe:c2:2b:94:5a:8e:b0:eb:75:cd:
                    50:fe:f5:8a:ae:e6:da:e2:94:fa:9e:09:45:21:f5:
                    a6:ae:da:bd:b1:b6:0d:a4:15:8d:d8:0a:c9:b3:5f:
                    30:6e:6f:70:6e:6a:39:4f:e7:0c:4a:9f:9f:ec:4e:
                    f5:29:42:fe:24:75:e6:74:6d:2a:1d:dd:8f:2d:0d:
                    84:6a:f2:1b:4c:6a:0d:e9:e1:2d:cf:91:bd:13:51:
                    66:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B2:9E:E5:4C:7C:80:7F:D5:7C:58:50:CA:34:F0:0A:96:89:FA:AA
            X509v3 Authority Key Identifier:
                keyid:74:FA:7B:EC:0A:12:DC:39:CA:28:9C:E4:10:D3:0F:E4:7A:56:EA:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/0/74FA7BEC0A12DC39CA289CE410D30FE47A56EAD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74FA7BEC0A12DC39CA289CE410D30FE47A56EAD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/0/323830343a343631383a313030313a3a2f34382d3438203d3e20323636393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4618:1001::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:75:71:46:93:ce:15:2e:6d:b7:8d:4f:d4:4f:84:8a:ec:0d:
         db:d6:20:b9:4e:d9:39:95:01:e9:6f:ea:f2:95:e8:b7:6d:0a:
         1a:97:82:d8:3e:72:94:14:92:3f:5b:c2:91:df:47:1f:dd:cf:
         ea:20:a0:ac:0c:60:90:51:21:e2:03:13:9f:2d:07:da:55:e1:
         e2:00:58:7a:01:19:38:ae:fc:b0:b4:7d:35:cb:e5:4a:01:06:
         86:42:2a:5a:b9:7a:98:60:18:aa:d1:dd:17:59:99:3c:8c:3a:
         8a:70:32:fb:a4:6a:db:c2:e6:01:5c:2b:7e:64:52:a6:13:4e:
         dd:77:dd:97:3c:de:0a:77:6b:5f:2b:0d:fa:a5:50:1b:fd:a9:
         de:68:e3:25:2f:da:6a:c5:0d:55:5b:8f:e8:95:c9:a9:70:6a:
         e1:48:06:04:00:90:6d:e3:8d:ac:15:db:8a:7a:42:59:3c:83:
         1c:0b:94:fc:6d:88:ae:4a:52:c6:15:1f:b4:a3:0b:1f:5b:fa:
         27:42:b9:ef:85:f9:25:04:ab:84:5c:2a:30:8e:d8:46:14:0e:
         a5:81:42:25:19:b4:5b:8a:59:eb:fe:25:3c:75:36:cc:d0:df:
         9f:84:4a:84:23:df:0a:0e:cf:d4:f6:35:0e:9a:f7:1f:9a:00:
         75:dc:59:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----