Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/323830343a343030343a3a2f33322d3332203d3e20323635393238.roa
File:                     323830343a343030343a3a2f33322d3332203d3e20323635393238.roa (raw, json)
Hash identifier:          GUKZCPRu21vFxcWftHhVC3Ln0/JELBGoOGUKQ5oi1cA=
Subject key identifier:   12:08:7B:D9:3A:68:A0:DB:B9:5F:B0:09:3F:13:83:0D:90:E0:50:D6
Certificate issuer:       /CN=36F665342472E37B1A265E089E5C8754A433B1A2
Certificate serial:       256B29AA73B84F1B7EF7578469BA05201680A256
Authority key identifier: 36:F6:65:34:24:72:E3:7B:1A:26:5E:08:9E:5C:87:54:A4:33:B1:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36F665342472E37B1A265E089E5C8754A433B1A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/323830343a343030343a3a2f33322d3332203d3e20323635393238.roa
Signing time:             Tue 23 Jan 2024 12:23:23 +0000
ROA not before:           Tue 23 Jan 2024 12:18:23 +0000
ROA not after:            Tue 21 Jan 2025 12:23:23 +0000
asID:                     265928
IP address blocks:        2804:4004::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:6b:29:aa:73:b8:4f:1b:7e:f7:57:84:69:ba:05:20:16:80:a2:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36F665342472E37B1A265E089E5C8754A433B1A2
        Validity
            Not Before: Jan 23 12:18:23 2024 GMT
            Not After : Jan 21 12:23:23 2025 GMT
        Subject: CN=12087BD93A68A0DBB95FB0093F13830D90E050D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5c:36:a6:c7:34:ea:e1:6b:96:46:b3:67:f2:
                    47:51:b8:56:c4:29:88:67:47:a3:3b:a9:27:2a:d5:
                    93:d2:c2:7e:32:e3:e4:fd:67:62:dc:18:48:51:a4:
                    bb:34:2e:3e:90:84:c1:26:fb:42:dd:eb:8f:b7:a0:
                    d4:6f:20:d5:39:b1:6d:df:fd:77:b5:ab:2a:7c:2c:
                    56:ad:8e:e9:3f:2f:5c:de:0c:14:63:3f:9a:50:a8:
                    cb:00:42:2f:b5:29:49:48:49:e2:b5:08:62:21:42:
                    87:52:8a:c3:68:98:fc:6e:60:2e:ad:85:34:b7:8c:
                    09:4a:96:38:c2:89:21:4b:94:42:b4:3b:b8:fa:0e:
                    f2:7a:21:6a:1b:0b:12:2c:d8:11:8a:b5:ae:09:f8:
                    59:d0:28:2e:6e:0a:48:68:79:17:c1:ab:4c:ee:b6:
                    9e:bd:77:86:16:f5:c9:b4:6d:2a:01:e0:fb:18:40:
                    e9:5d:3c:a7:83:c8:65:cb:f2:59:d4:5d:21:f5:80:
                    ad:c7:22:b7:55:b4:65:d5:e6:1a:e5:93:98:66:7b:
                    e1:a4:a5:5d:a8:fc:c1:26:ae:0b:e9:97:0b:11:74:
                    c5:12:52:65:0a:cf:db:49:47:46:16:69:3e:33:9f:
                    b5:2b:cc:2e:c9:57:aa:55:90:99:ee:07:63:e6:8f:
                    39:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:08:7B:D9:3A:68:A0:DB:B9:5F:B0:09:3F:13:83:0D:90:E0:50:D6
            X509v3 Authority Key Identifier:
                keyid:36:F6:65:34:24:72:E3:7B:1A:26:5E:08:9E:5C:87:54:A4:33:B1:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/36F665342472E37B1A265E089E5C8754A433B1A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36F665342472E37B1A265E089E5C8754A433B1A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/323830343a343030343a3a2f33322d3332203d3e20323635393238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4004::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:97:31:92:df:12:2e:3c:69:28:21:79:7c:50:ab:f9:39:f9:
         f8:71:ef:1d:e9:7a:b7:e1:b5:37:8c:4a:c6:e5:7b:c8:75:2f:
         2a:5e:04:9a:d0:a9:04:55:3c:49:cb:09:e6:d3:23:a9:fb:b7:
         07:ff:18:b5:1f:33:ce:bf:4a:e2:7c:a7:c0:83:46:2c:9b:94:
         3d:9a:a9:8a:af:56:d2:70:49:89:76:96:0c:7b:44:97:74:bf:
         f7:0e:78:2d:16:2f:1c:4b:8b:43:63:8b:d7:67:6b:b1:b2:48:
         ae:78:36:eb:48:af:d4:13:ab:23:56:13:27:b5:b3:d7:2b:64:
         ad:50:fe:47:1b:48:28:b9:d3:87:e1:4a:b8:35:47:b7:34:a6:
         05:bb:bc:e8:87:8b:d8:90:21:26:9e:9a:10:24:23:7f:d4:00:
         66:31:c9:d3:a4:78:14:c9:e0:78:31:bf:d7:09:19:e7:ff:9e:
         98:62:f8:41:ec:2c:c1:fe:86:f1:ab:fc:3b:dc:1a:14:6b:bb:
         35:ab:c0:c3:90:06:0e:7d:1f:5e:0b:67:84:d7:38:9b:d9:17:
         a7:bb:db:a4:0d:e1:5f:69:17:77:3a:5a:46:ae:1c:ff:62:c2:
         c2:f5:35:5b:af:4e:e7:b6:d3:67:c6:a9:1a:79:fa:f2:d2:a8:
         d4:c8:7d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----