Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/4/323830343a65383a3a2f33322d3438203d3e20323632363539.roa
File:                     323830343a65383a3a2f33322d3438203d3e20323632363539.roa (raw, json)
Hash identifier:          rY5DKNqpf0TadW3TybUrwGPQU6xDoTEuIk3kgIesceQ=
Subject key identifier:   66:F0:3C:3D:76:77:7A:D0:54:FA:05:C8:87:1E:61:FE:95:1B:81:5C
Certificate issuer:       /CN=A4AC7525A2D94581DF22D6B154FB0E8F05452901
Certificate serial:       6DA27641B727483FD29955626C57C6169B3B782A
Authority key identifier: A4:AC:75:25:A2:D9:45:81:DF:22:D6:B1:54:FB:0E:8F:05:45:29:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4AC7525A2D94581DF22D6B154FB0E8F05452901.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/4/323830343a65383a3a2f33322d3438203d3e20323632363539.roa
Signing time:             Wed 24 Jul 2024 14:31:42 +0000
ROA not before:           Wed 24 Jul 2024 14:26:42 +0000
ROA not after:            Wed 23 Jul 2025 14:31:42 +0000
asID:                     262659
IP address blocks:        2804:e8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:a2:76:41:b7:27:48:3f:d2:99:55:62:6c:57:c6:16:9b:3b:78:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4AC7525A2D94581DF22D6B154FB0E8F05452901
        Validity
            Not Before: Jul 24 14:26:42 2024 GMT
            Not After : Jul 23 14:31:42 2025 GMT
        Subject: CN=66F03C3D76777AD054FA05C8871E61FE951B815C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:99:c0:14:b5:08:44:e8:24:f2:a3:2b:45:58:
                    dd:e2:2f:bd:70:69:23:5d:ad:92:a6:9b:b5:97:ac:
                    62:9f:39:9f:92:04:3d:60:05:84:e6:42:b2:24:e3:
                    78:0c:f8:48:26:a1:8c:3c:b2:e5:19:30:e5:fd:ac:
                    01:52:d1:a4:ad:a9:90:16:e1:35:f0:dd:cd:0f:00:
                    95:26:1b:4d:b5:0f:73:bd:bb:bd:74:2a:44:c4:2b:
                    69:0a:6a:97:3e:82:2f:42:05:71:0c:b1:88:4f:08:
                    63:df:48:22:10:b7:1b:4d:98:8d:22:97:43:60:a4:
                    44:1c:42:56:78:65:0a:89:f5:df:97:4e:9b:79:5f:
                    c3:07:1b:cb:c0:85:b3:1c:61:04:26:4a:8f:0f:38:
                    dc:a2:c8:89:b4:64:37:74:29:1e:66:27:85:e0:32:
                    4a:a2:f7:29:63:7b:fc:a8:f3:45:1a:68:e6:73:84:
                    6c:4d:7f:a1:63:3c:4a:35:4d:be:bd:ac:0a:5c:3b:
                    1b:e2:b2:c0:ac:5c:d3:6f:bd:ed:1f:d0:1c:2a:24:
                    16:de:0a:99:6f:ce:ed:19:3f:b7:dd:b4:e1:23:12:
                    4e:ca:d4:d9:9c:10:b4:20:c2:19:4a:5d:28:9e:db:
                    c3:56:cd:dd:df:d2:f1:83:5e:e1:94:90:c1:1d:48:
                    a2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:F0:3C:3D:76:77:7A:D0:54:FA:05:C8:87:1E:61:FE:95:1B:81:5C
            X509v3 Authority Key Identifier:
                keyid:A4:AC:75:25:A2:D9:45:81:DF:22:D6:B1:54:FB:0E:8F:05:45:29:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/4/A4AC7525A2D94581DF22D6B154FB0E8F05452901.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4AC7525A2D94581DF22D6B154FB0E8F05452901.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/4/323830343a65383a3a2f33322d3438203d3e20323632363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:89:e5:1a:db:21:f5:84:25:25:da:25:a8:32:6c:da:e7:a4:
         df:e5:7b:77:a6:f5:06:4b:1d:9c:1e:8b:83:f0:88:7a:d4:2e:
         46:a2:3e:cc:a0:91:8d:92:84:24:2d:46:38:1d:65:64:08:11:
         2d:a0:60:0d:2d:39:fa:17:5f:db:39:1b:bb:70:43:41:bf:72:
         3e:0f:b8:d2:f5:8e:96:23:c5:41:f5:37:8c:26:8e:32:6d:09:
         ff:ce:7a:24:81:0d:b2:79:e2:88:41:be:35:a8:1c:1c:1e:70:
         28:d2:f8:aa:f2:d9:38:3f:e6:14:75:4b:e0:ff:c6:7f:65:15:
         69:e7:05:4d:ea:92:14:e3:2a:1a:a9:73:18:f6:30:27:6f:f5:
         68:72:43:0a:a4:fa:87:fa:6b:90:2d:04:1d:f2:b0:63:50:d3:
         b4:81:0c:bf:c1:52:cd:17:ad:00:31:8a:f1:31:d7:2a:52:8c:
         16:6f:a1:d7:25:2d:4b:d1:56:9a:86:c1:c4:b5:02:52:ac:b3:
         44:d0:c1:ed:e8:7a:c7:65:71:01:e6:ba:a4:ae:33:de:63:3f:
         d9:79:51:54:c4:69:8a:b5:e9:8f:d9:70:cc:34:1c:8c:83:9e:
         21:bf:ea:25:d6:07:0e:02:95:75:28:93:a7:9f:0e:d5:0e:59:
         9c:45:29:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----