Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/2/323830343a65383a3a2f33322d3438203d3e20323632363539.roa
File:                     323830343a65383a3a2f33322d3438203d3e20323632363539.roa (raw, json)
Hash identifier:          +G11PA54VW7l7NDdX3C2BylLFsDHCgk26QlQpOUbMpM=
Subject key identifier:   E4:D2:9E:3C:B3:CE:93:82:B0:CB:1B:DA:FB:D2:53:90:BE:44:D9:79
Certificate issuer:       /CN=8342F023EFF781F7DDCA9D2FB59E4FAB5B510D93
Certificate serial:       5ED828499FAB4DBF0DB673994184F194348DAD19
Authority key identifier: 83:42:F0:23:EF:F7:81:F7:DD:CA:9D:2F:B5:9E:4F:AB:5B:51:0D:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8342F023EFF781F7DDCA9D2FB59E4FAB5B510D93.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/2/323830343a65383a3a2f33322d3438203d3e20323632363539.roa
Signing time:             Mon 22 Jul 2024 17:09:31 +0000
ROA not before:           Mon 22 Jul 2024 17:04:31 +0000
ROA not after:            Mon 21 Jul 2025 17:09:31 +0000
asID:                     262659
IP address blocks:        2804:e8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:d8:28:49:9f:ab:4d:bf:0d:b6:73:99:41:84:f1:94:34:8d:ad:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8342F023EFF781F7DDCA9D2FB59E4FAB5B510D93
        Validity
            Not Before: Jul 22 17:04:31 2024 GMT
            Not After : Jul 21 17:09:31 2025 GMT
        Subject: CN=E4D29E3CB3CE9382B0CB1BDAFBD25390BE44D979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7e:ac:72:d7:e2:00:45:3c:42:74:bb:b4:92:
                    84:40:18:38:4f:84:e7:48:36:2a:6b:38:a7:a4:b0:
                    0d:a6:01:5e:b8:34:b7:b2:a7:da:0c:5a:97:59:f4:
                    87:f8:c6:28:26:b1:a3:93:63:98:bd:75:cd:7e:00:
                    a9:d8:e3:39:a3:71:f7:ec:92:14:32:c6:38:50:d4:
                    cf:6e:30:73:f3:00:e7:55:a7:3a:ee:c4:f8:55:1f:
                    a1:b5:75:4d:a2:69:91:0e:a1:65:c0:f8:22:db:cc:
                    ec:2d:73:13:26:bf:e8:88:e3:24:22:1b:00:e1:bd:
                    53:87:8e:7d:6b:09:d3:4d:02:21:17:95:93:4b:2f:
                    20:f3:44:bf:98:e9:fe:54:23:96:26:16:51:54:9c:
                    39:9e:d3:49:2c:cf:d8:30:e4:e4:8d:15:3e:4f:2b:
                    51:e2:68:35:97:df:3c:11:74:ba:d3:3f:3d:d8:42:
                    2a:27:7c:fe:33:55:a0:06:92:89:46:b5:bf:8f:10:
                    1c:da:a0:15:7d:7c:9c:ff:1a:13:ea:e9:43:78:76:
                    f4:2d:1c:4c:ac:11:b6:3b:c1:e4:3a:c7:ad:6c:f7:
                    09:d4:62:0d:92:ff:2a:fe:47:cb:02:b0:1d:a9:00:
                    67:d7:a7:16:53:d0:ef:73:cb:57:6e:56:3e:1e:a7:
                    2f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D2:9E:3C:B3:CE:93:82:B0:CB:1B:DA:FB:D2:53:90:BE:44:D9:79
            X509v3 Authority Key Identifier:
                keyid:83:42:F0:23:EF:F7:81:F7:DD:CA:9D:2F:B5:9E:4F:AB:5B:51:0D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/2/8342F023EFF781F7DDCA9D2FB59E4FAB5B510D93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8342F023EFF781F7DDCA9D2FB59E4FAB5B510D93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/2/323830343a65383a3a2f33322d3438203d3e20323632363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:c6:2b:47:fe:17:8f:51:71:d1:9b:b0:3f:c3:fb:f6:d8:1a:
         9d:b5:8f:9c:75:08:3d:69:f8:04:64:70:b2:c6:d8:92:89:99:
         15:83:ab:ae:0f:54:68:64:c1:d7:dc:20:5a:85:14:c1:c3:31:
         bd:81:29:82:5f:66:f4:c0:37:e6:b8:33:a0:c7:96:55:76:47:
         3f:e1:73:2a:53:6b:d0:d2:53:b4:07:b2:70:2c:ca:3d:93:91:
         c0:ee:08:39:95:f3:79:33:9d:cc:82:d3:45:ee:13:97:ec:82:
         ed:05:5a:65:ec:4a:3b:01:e5:e9:13:7c:c7:5d:f0:69:3c:3b:
         40:bc:8e:04:ed:b3:e6:04:7d:4a:67:81:77:a7:5f:81:4d:21:
         1f:8d:b6:97:2f:62:42:94:f7:88:55:45:51:88:da:9b:52:c7:
         31:79:7b:f0:f3:e1:60:a6:1b:13:c4:2a:a6:96:2e:30:f9:a2:
         34:e3:7f:ca:fe:6f:68:2a:68:94:a5:86:b2:a3:3f:0a:fd:25:
         5a:81:d3:c5:3c:8c:8e:36:09:cc:5f:2d:74:17:9a:d3:64:b0:
         8a:85:03:a6:ea:ec:d9:ae:54:13:87:5e:eb:9e:21:cf:1b:56:
         53:1a:53:6e:91:58:7f:e5:2a:8a:25:6f:20:a6:66:f8:0c:0a:
         5f:47:f9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----