Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/4/323830343a35383a3a2f33322d3438203d3e20323632363539.roa
File:                     323830343a35383a3a2f33322d3438203d3e20323632363539.roa (raw, json)
Hash identifier:          fbx6c7M33O1FoNgHgzHEmXFK6DDkE140oeYeXYoJalI=
Subject key identifier:   27:12:02:08:C4:80:F6:F6:15:8C:D0:69:54:B8:41:1C:78:01:0E:A0
Certificate issuer:       /CN=A4AC7525A2D94581DF22D6B154FB0E8F05452901
Certificate serial:       05734422074D8D849D016E86186F1547908474FE
Authority key identifier: A4:AC:75:25:A2:D9:45:81:DF:22:D6:B1:54:FB:0E:8F:05:45:29:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4AC7525A2D94581DF22D6B154FB0E8F05452901.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/4/323830343a35383a3a2f33322d3438203d3e20323632363539.roa
Signing time:             Wed 24 Jul 2024 14:31:43 +0000
ROA not before:           Wed 24 Jul 2024 14:26:43 +0000
ROA not after:            Wed 23 Jul 2025 14:31:43 +0000
asID:                     262659
IP address blocks:        2804:58::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:73:44:22:07:4d:8d:84:9d:01:6e:86:18:6f:15:47:90:84:74:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4AC7525A2D94581DF22D6B154FB0E8F05452901
        Validity
            Not Before: Jul 24 14:26:43 2024 GMT
            Not After : Jul 23 14:31:43 2025 GMT
        Subject: CN=27120208C480F6F6158CD06954B8411C78010EA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ee:d8:e7:d5:a4:34:38:86:49:30:9d:12:e6:
                    3b:66:3a:07:cf:bf:4b:a2:91:ab:73:4f:dd:e2:ee:
                    05:c2:a5:e8:87:5e:58:87:fa:22:76:da:18:9e:f7:
                    ad:73:32:1b:cf:4b:74:ff:e6:8d:97:f0:07:7f:36:
                    04:df:16:9a:02:86:1a:71:f6:cb:94:80:59:9c:20:
                    b0:13:3b:05:d2:38:38:3e:bd:f9:58:66:9b:09:63:
                    7d:a3:8e:31:a4:6d:bd:74:a8:7c:06:6f:3b:91:c3:
                    d9:cf:31:6b:c2:c5:ff:37:2f:9f:0d:b2:bd:b8:a0:
                    82:39:e8:25:04:67:21:96:20:54:a5:9a:e5:0b:4e:
                    c2:40:e4:11:77:3f:b6:1b:ae:f9:14:47:f5:fc:c9:
                    22:7c:36:ef:d6:40:4b:8c:52:cb:06:69:5f:ab:ea:
                    5b:e4:f1:d2:e6:9a:b6:dc:9c:fd:3e:91:a7:d7:e6:
                    e7:2d:2f:2a:f0:33:5d:71:f3:d2:c6:98:e2:91:bd:
                    37:ff:5c:4a:53:68:0f:f8:a2:42:ef:7d:78:a5:ac:
                    b4:63:77:a0:7d:44:4b:68:38:e8:8d:a8:95:d7:6a:
                    94:d0:2b:2f:21:2d:4a:36:a0:71:9e:51:de:3f:c1:
                    59:28:94:13:74:cb:a8:bc:72:28:ab:e7:c4:93:61:
                    40:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:12:02:08:C4:80:F6:F6:15:8C:D0:69:54:B8:41:1C:78:01:0E:A0
            X509v3 Authority Key Identifier:
                keyid:A4:AC:75:25:A2:D9:45:81:DF:22:D6:B1:54:FB:0E:8F:05:45:29:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/4/A4AC7525A2D94581DF22D6B154FB0E8F05452901.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4AC7525A2D94581DF22D6B154FB0E8F05452901.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/4/323830343a35383a3a2f33322d3438203d3e20323632363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:9b:c9:97:6a:30:02:a2:18:d1:6a:bd:02:05:97:e8:aa:37:
         0b:d4:9f:f9:bd:a4:ec:01:d4:3e:12:47:24:81:00:a6:24:30:
         de:21:d4:30:13:eb:68:17:f7:0c:62:16:83:c8:13:f0:4d:7e:
         09:55:92:64:ad:5f:dc:99:4f:bb:02:98:4c:55:cd:89:39:81:
         53:a6:90:c7:58:3d:bf:ba:48:96:ea:64:82:2d:4f:ea:1d:d3:
         87:1b:98:08:5c:87:3d:6d:6d:41:f8:bc:9e:59:f9:fe:00:48:
         f9:f5:26:f4:b2:04:fd:ae:35:1e:20:ff:fa:f3:a5:2e:60:35:
         f9:e0:aa:62:f7:1d:e0:5f:57:0e:c9:c2:4d:e3:8c:8d:cf:11:
         1f:46:ea:bf:6a:89:a2:d0:c8:8b:7f:b3:d3:c5:46:1a:01:54:
         9d:ff:71:c2:5f:16:37:a0:c9:f3:6a:fd:6a:0d:72:de:42:71:
         ed:7c:71:b9:aa:21:8b:69:c8:d7:bb:1b:c7:3f:e0:6d:80:0f:
         da:e3:af:10:e6:78:e2:b0:e0:33:29:62:11:a8:10:73:2e:9d:
         64:58:03:d6:f9:62:03:a5:55:a4:2b:2a:b2:13:84:c6:08:33:
         08:c5:77:34:82:24:c7:de:c7:07:f5:df:1f:2a:bb:5a:59:ad:
         9a:53:2e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----