Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/1/323830343a65383a3a2f33322d3438203d3e20323632363539.roa
File:                     323830343a65383a3a2f33322d3438203d3e20323632363539.roa (raw, json)
Hash identifier:          oYRrwLyYOmCmnCaXauCvMePMOaSgDPfhLfjM0+8RSb0=
Subject key identifier:   4E:1B:6A:46:8F:D4:4C:97:0B:74:74:4E:54:68:CD:8C:A6:3D:51:E0
Certificate issuer:       /CN=4FE19DB1C7F1544B5ECA1B50ECC44DC69923E42C
Certificate serial:       1A5A89A1C92AAF4B95F5701990F94163B043E9DB
Authority key identifier: 4F:E1:9D:B1:C7:F1:54:4B:5E:CA:1B:50:EC:C4:4D:C6:99:23:E4:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE19DB1C7F1544B5ECA1B50ECC44DC69923E42C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/1/323830343a65383a3a2f33322d3438203d3e20323632363539.roa
Signing time:             Thu 04 Apr 2024 11:21:46 +0000
ROA not before:           Thu 04 Apr 2024 11:16:46 +0000
ROA not after:            Thu 03 Apr 2025 11:21:46 +0000
asID:                     262659
IP address blocks:        2804:e8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:5a:89:a1:c9:2a:af:4b:95:f5:70:19:90:f9:41:63:b0:43:e9:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FE19DB1C7F1544B5ECA1B50ECC44DC69923E42C
        Validity
            Not Before: Apr  4 11:16:46 2024 GMT
            Not After : Apr  3 11:21:46 2025 GMT
        Subject: CN=4E1B6A468FD44C970B74744E5468CD8CA63D51E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e0:da:77:0a:6f:8e:f3:63:fb:03:99:ce:09:
                    fa:5e:8d:7d:37:e1:fa:82:99:8a:8c:e4:37:70:01:
                    1c:88:a8:53:64:e4:d2:c3:40:79:4e:39:5b:0a:f2:
                    1d:f2:f6:e5:58:db:94:dd:cb:f3:e6:9c:97:ad:a1:
                    2e:ed:c1:5e:22:f5:e5:4b:fa:bf:3d:81:95:09:70:
                    0a:0c:19:e7:85:c8:5d:b4:d6:87:6d:78:6a:cd:22:
                    cb:6c:82:ed:cd:1d:bf:88:c7:93:a2:49:97:3d:d5:
                    e1:60:eb:b7:20:79:33:36:74:d5:33:00:7a:52:09:
                    19:4d:2c:e0:0e:c9:de:89:19:e0:01:ba:75:f5:76:
                    78:b3:52:11:c9:ed:0a:94:77:f7:5d:41:9d:8d:5c:
                    32:0a:2f:7c:93:24:6c:fb:eb:08:da:16:ab:63:6e:
                    34:63:bb:3d:90:be:1f:59:2d:a3:6b:c7:0b:e7:b6:
                    43:3c:e5:48:63:51:21:d7:0e:53:d0:14:1c:18:dc:
                    ff:bd:4f:32:49:f0:c6:2d:72:0b:af:f2:c0:af:86:
                    79:25:02:85:36:ce:49:67:cf:09:3f:c1:73:75:17:
                    f7:66:f3:e6:52:67:e6:2c:5e:6e:73:82:8f:8b:1d:
                    ab:b7:bd:1f:fc:bf:30:22:6d:fa:d9:20:69:ee:d4:
                    a6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:1B:6A:46:8F:D4:4C:97:0B:74:74:4E:54:68:CD:8C:A6:3D:51:E0
            X509v3 Authority Key Identifier:
                keyid:4F:E1:9D:B1:C7:F1:54:4B:5E:CA:1B:50:EC:C4:4D:C6:99:23:E4:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/1/4FE19DB1C7F1544B5ECA1B50ECC44DC69923E42C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE19DB1C7F1544B5ECA1B50ECC44DC69923E42C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/1/323830343a65383a3a2f33322d3438203d3e20323632363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:04:65:2d:14:cf:41:4b:b0:9f:7f:f5:c4:84:e4:9e:73:68:
         d2:88:54:07:89:4e:10:e8:98:5a:3d:02:23:24:18:b7:e7:04:
         5a:6c:8d:54:7d:e6:e9:3a:dd:7f:38:ae:bb:f3:0b:21:fc:d3:
         11:d7:6b:7d:52:06:71:70:4e:b2:61:b6:e7:a6:11:6a:15:7f:
         55:31:16:5c:08:a4:43:ab:bb:4b:b0:2f:b7:1b:67:c0:64:29:
         8c:d9:3f:8f:c9:ed:31:6a:d2:45:fd:af:fc:b1:6f:de:d2:0a:
         22:17:c3:78:64:c5:dd:43:9b:f2:fc:ca:dd:f3:69:b0:0d:51:
         a5:37:13:b0:07:2d:0f:be:29:1c:cf:4a:fc:d4:8e:34:97:67:
         ee:0a:ff:ff:47:f5:c9:a3:6b:33:2e:26:e9:72:33:1b:e0:56:
         41:c8:36:d3:f8:d4:f2:a8:90:1b:58:0c:87:7d:40:6c:fb:78:
         14:e1:d5:10:06:b9:8f:fd:7c:0b:9d:be:ba:92:f5:ce:05:85:
         42:8b:c2:5f:cd:83:f1:fc:fb:05:54:3c:d8:9b:78:e0:e2:bb:
         62:c7:af:c2:87:f8:70:57:ad:f4:8d:e0:3d:b9:2e:32:b4:a2:
         1a:ba:9b:5b:3d:a4:b4:63:b2:7c:ea:29:da:bb:55:3c:1b:93:
         ed:5e:63:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----