Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/1/323830343a35383a3a2f33322d3438203d3e20323632363539.roa
File:                     323830343a35383a3a2f33322d3438203d3e20323632363539.roa (raw, json)
Hash identifier:          tWkTwL/lfI96dHcebv7/yvzO/6G/uXyyGbRDz2+p7gY=
Subject key identifier:   A2:EC:F4:E5:9C:5E:81:7E:08:D0:68:8B:A9:CB:37:D3:3F:AB:0C:CD
Certificate issuer:       /CN=4FE19DB1C7F1544B5ECA1B50ECC44DC69923E42C
Certificate serial:       61AEEBC932CED1EB0F32F554A4A87349CC27D8E8
Authority key identifier: 4F:E1:9D:B1:C7:F1:54:4B:5E:CA:1B:50:EC:C4:4D:C6:99:23:E4:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE19DB1C7F1544B5ECA1B50ECC44DC69923E42C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/1/323830343a35383a3a2f33322d3438203d3e20323632363539.roa
Signing time:             Thu 04 Apr 2024 11:21:46 +0000
ROA not before:           Thu 04 Apr 2024 11:16:46 +0000
ROA not after:            Thu 03 Apr 2025 11:21:46 +0000
asID:                     262659
IP address blocks:        2804:58::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ae:eb:c9:32:ce:d1:eb:0f:32:f5:54:a4:a8:73:49:cc:27:d8:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FE19DB1C7F1544B5ECA1B50ECC44DC69923E42C
        Validity
            Not Before: Apr  4 11:16:46 2024 GMT
            Not After : Apr  3 11:21:46 2025 GMT
        Subject: CN=A2ECF4E59C5E817E08D0688BA9CB37D33FAB0CCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:16:f9:83:35:05:8a:d0:b9:16:17:50:00:b6:
                    8c:ae:0f:3b:b6:2b:1a:1f:c2:17:f8:36:49:37:a1:
                    3b:d6:76:12:1c:af:33:a8:8c:90:83:d9:75:75:5f:
                    01:e0:da:96:23:dc:1f:1a:f6:4a:fe:75:e6:df:69:
                    d1:be:75:4d:18:57:e6:35:90:b0:c5:c5:86:34:50:
                    c6:d0:6b:7a:a2:0d:60:5a:a1:9a:9f:86:ef:96:25:
                    9d:d2:67:7e:70:f7:6f:ed:cc:19:bf:61:00:40:63:
                    ee:f7:83:0f:fa:39:53:fa:85:bb:94:b0:c9:9f:77:
                    f4:6e:12:af:23:1a:43:e9:62:02:85:7c:ca:b9:83:
                    00:75:a6:be:9a:e0:78:49:5d:29:b5:78:1c:87:73:
                    c8:cc:9a:5a:7c:44:9c:d3:5b:fe:f3:2b:8a:73:97:
                    86:d5:5a:ae:e0:fa:6d:ca:51:ce:ba:13:56:75:e9:
                    0d:04:95:25:4c:ca:65:e1:04:d4:48:f3:7b:62:11:
                    f1:c5:82:0b:50:6f:1f:6f:79:20:fb:4a:eb:22:54:
                    ed:dc:04:b5:ed:40:a1:52:dc:53:ea:96:50:ce:18:
                    84:a1:5f:de:db:e8:83:3a:47:d1:ec:75:0c:e4:67:
                    79:60:09:f3:43:03:3f:57:8e:57:8b:71:fc:36:c0:
                    50:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:EC:F4:E5:9C:5E:81:7E:08:D0:68:8B:A9:CB:37:D3:3F:AB:0C:CD
            X509v3 Authority Key Identifier:
                keyid:4F:E1:9D:B1:C7:F1:54:4B:5E:CA:1B:50:EC:C4:4D:C6:99:23:E4:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/1/4FE19DB1C7F1544B5ECA1B50ECC44DC69923E42C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE19DB1C7F1544B5ECA1B50ECC44DC69923E42C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/1/323830343a35383a3a2f33322d3438203d3e20323632363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:a8:bc:c8:71:4b:69:7a:a7:9e:e1:59:d6:25:29:35:ef:3f:
         c5:f7:c6:e5:20:f4:c4:b3:ed:ee:ed:b0:d5:9c:a9:a3:d9:46:
         37:19:01:60:03:18:6f:ea:8b:af:57:dd:dd:10:bb:0a:34:26:
         4b:53:21:8f:5c:50:f4:0f:96:b9:72:be:b9:4b:09:65:e6:be:
         50:e9:d6:c1:cd:cd:5f:94:a3:0a:06:b4:fa:5c:4e:5a:11:81:
         ed:cb:fb:b6:5c:06:40:46:34:82:12:bb:d0:77:ea:8f:9d:c9:
         2b:91:46:48:d1:2f:ea:86:1e:00:0e:8f:f2:77:a7:db:4a:96:
         97:9d:8d:00:99:cb:c9:20:6c:c0:e4:e9:7c:de:fa:23:e3:e4:
         f2:de:b8:53:4c:42:3a:68:d0:a7:d1:df:39:8b:e9:be:b6:31:
         b4:13:36:cf:5e:44:e3:77:56:c5:ab:e2:43:67:7a:94:b6:11:
         33:31:00:cd:48:e7:97:0c:6d:3e:16:2e:9f:ff:5d:af:82:d8:
         1f:6f:a7:5e:d1:2e:93:f4:5b:c9:47:3f:bd:9c:fd:ee:67:b0:
         f4:04:db:3b:df:37:ef:01:93:9e:73:3f:7a:56:10:71:8c:2e:
         aa:f2:d1:7e:f0:ac:dd:61:6d:66:a4:88:9a:e7:67:c0:3f:ed:
         33:9a:01:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----