Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/1/323830343a386163303a3a2f33322d313238203d3e203532383230.roa
File:                     323830343a386163303a3a2f33322d313238203d3e203532383230.roa (raw, json)
Hash identifier:          L8nJKZx4kzQZb44LCzygPExMb3kG9ain55KA+KBlQHw=
Subject key identifier:   01:79:1C:BF:C5:66:71:CF:BD:3A:8A:74:44:4C:9D:83:41:F4:0A:E1
Certificate issuer:       /CN=ABE9B11DB9D8E8D8E80E57F64BF87F41C90CF8BC
Certificate serial:       5CBA20EF5637D60A8336EB68D1EC27BA54EA5BE8
Authority key identifier: AB:E9:B1:1D:B9:D8:E8:D8:E8:0E:57:F6:4B:F8:7F:41:C9:0C:F8:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABE9B11DB9D8E8D8E80E57F64BF87F41C90CF8BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/1/323830343a386163303a3a2f33322d313238203d3e203532383230.roa
Signing time:             Thu 04 Apr 2024 09:44:33 +0000
ROA not before:           Thu 04 Apr 2024 09:39:33 +0000
ROA not after:            Thu 03 Apr 2025 09:44:33 +0000
asID:                     52820
IP address blocks:        2804:8ac0::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:ba:20:ef:56:37:d6:0a:83:36:eb:68:d1:ec:27:ba:54:ea:5b:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABE9B11DB9D8E8D8E80E57F64BF87F41C90CF8BC
        Validity
            Not Before: Apr  4 09:39:33 2024 GMT
            Not After : Apr  3 09:44:33 2025 GMT
        Subject: CN=01791CBFC56671CFBD3A8A74444C9D8341F40AE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5b:25:4b:7f:f1:2d:b9:a6:71:1a:d0:69:a8:
                    30:dd:15:12:99:c0:16:03:07:ec:5c:d2:7e:4c:da:
                    27:67:04:bb:58:65:7a:0f:5e:06:98:68:5a:2c:f8:
                    d0:06:6d:3c:a1:2a:9f:f1:a9:28:6f:8d:b0:e9:e1:
                    67:39:c3:04:2a:cc:2f:9a:1d:8c:25:82:aa:b1:86:
                    d8:60:57:b3:8d:3a:5b:16:61:c5:5a:b5:77:88:c8:
                    fa:49:aa:94:19:f5:78:25:d5:4f:c4:4b:b1:72:dc:
                    37:6f:3f:80:80:92:62:5d:05:c3:8e:07:97:39:00:
                    d5:54:c2:b2:c5:d6:d2:a6:c8:f1:7c:b5:75:c6:a7:
                    e7:98:e5:f0:85:05:02:21:ec:79:92:c5:84:c1:68:
                    0a:b0:6a:9d:c0:d0:a2:b8:16:94:de:70:47:fd:87:
                    5b:b3:6e:39:e4:fb:a4:8c:7e:33:6e:b4:8e:a5:58:
                    41:86:b3:03:ce:75:8b:e0:0e:0a:6f:38:2c:ab:a5:
                    a1:4a:5d:1d:82:ec:08:5d:95:cb:9b:fb:99:a1:69:
                    fc:8e:36:89:1e:22:86:0e:06:ab:8c:67:d7:24:6a:
                    9b:b6:33:75:ee:8e:2d:71:bd:5b:ac:1e:0b:08:62:
                    6d:df:80:ee:3b:7a:e5:40:83:1e:70:c8:b9:a3:2a:
                    93:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:79:1C:BF:C5:66:71:CF:BD:3A:8A:74:44:4C:9D:83:41:F4:0A:E1
            X509v3 Authority Key Identifier:
                keyid:AB:E9:B1:1D:B9:D8:E8:D8:E8:0E:57:F6:4B:F8:7F:41:C9:0C:F8:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/1/ABE9B11DB9D8E8D8E80E57F64BF87F41C90CF8BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABE9B11DB9D8E8D8E80E57F64BF87F41C90CF8BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/1/323830343a386163303a3a2f33322d313238203d3e203532383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:4a:a3:f6:21:aa:01:67:f7:af:3a:51:6d:f6:72:58:40:c1:
         3c:b2:f3:46:35:47:32:10:40:c1:ae:2d:29:e0:f6:8c:7c:e5:
         19:15:f3:b5:08:2b:84:f5:42:23:8b:29:85:a2:72:8c:d8:6f:
         ed:14:71:e5:cd:24:f2:e4:e7:93:37:7b:48:a0:f6:fe:16:70:
         f0:e8:56:98:39:7a:f8:b7:b9:cb:8e:01:4b:e9:ac:11:f7:0f:
         cc:85:18:d2:54:c9:bd:86:18:70:0e:e1:8b:6d:44:a6:f9:4c:
         8b:38:a1:4b:5a:e2:79:33:54:21:ba:ce:cf:ec:dd:d3:95:26:
         1d:b4:86:03:26:1e:ad:58:93:92:45:2b:4f:b4:0f:8f:7d:d8:
         1e:3c:95:d5:4d:c5:77:90:eb:8a:95:80:57:b4:4d:e7:d0:19:
         24:d1:67:3d:7b:c5:08:82:89:d4:e7:81:76:b3:43:db:96:3c:
         b7:51:cb:f1:4f:4f:f6:2a:c0:92:01:fd:e3:f0:68:33:42:2b:
         c8:e2:30:41:ff:90:9d:f9:f6:96:78:91:24:e0:f5:d8:18:95:
         e8:6e:5b:2b:fd:cf:6d:82:41:ec:ae:7e:36:ee:b3:f4:22:89:
         69:60:ac:d8:38:3e:1c:42:fd:49:db:8c:7a:d1:cc:31:d1:1c:
         ef:c4:30:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----