Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/0/323830313a38303a6138303a3a2f34342d3438203d3e203131323432.roa
File:                     323830313a38303a6138303a3a2f34342d3438203d3e203131323432.roa (raw, json)
Hash identifier:          3Fc9SHwx3foqsInlvNdjwXfb/AAztfSIShoQaBL/mIc=
Subject key identifier:   02:37:02:C2:2D:13:0E:63:C8:DB:12:28:FC:6E:D5:29:4B:EB:30:E1
Certificate issuer:       /CN=2CE1F8738603CEBF287DD62540FEF561C1AF87C5
Certificate serial:       780FB46006C9E421B4D98FD6011ADB226D5ACAAD
Authority key identifier: 2C:E1:F8:73:86:03:CE:BF:28:7D:D6:25:40:FE:F5:61:C1:AF:87:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CE1F8738603CEBF287DD62540FEF561C1AF87C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/0/323830313a38303a6138303a3a2f34342d3438203d3e203131323432.roa
Signing time:             Mon 25 Mar 2024 12:02:30 +0000
ROA not before:           Mon 25 Mar 2024 11:57:30 +0000
ROA not after:            Mon 24 Mar 2025 12:02:30 +0000
asID:                     11242
IP address blocks:        2801:80:a80::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:0f:b4:60:06:c9:e4:21:b4:d9:8f:d6:01:1a:db:22:6d:5a:ca:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CE1F8738603CEBF287DD62540FEF561C1AF87C5
        Validity
            Not Before: Mar 25 11:57:30 2024 GMT
            Not After : Mar 24 12:02:30 2025 GMT
        Subject: CN=023702C22D130E63C8DB1228FC6ED5294BEB30E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:32:0b:cc:a8:21:e7:87:f0:ed:83:ef:db:39:
                    69:26:90:04:57:8b:31:e1:ce:a9:51:c2:78:57:cc:
                    ec:b8:08:65:4f:d6:b1:87:66:35:60:b1:ae:3b:96:
                    cd:25:b4:9d:54:ac:22:c3:d0:fc:68:91:21:94:04:
                    10:24:d5:52:13:2e:4d:e9:82:42:a7:ae:b5:60:30:
                    d1:94:45:6b:4c:2f:ad:ba:b7:e9:42:c0:31:40:e5:
                    bd:ff:b7:e1:01:f2:1e:a1:c0:ca:37:5a:95:f3:ec:
                    92:66:2a:09:c8:13:d9:36:ec:ea:e3:62:77:42:ea:
                    21:a5:94:fe:05:45:19:f9:6c:64:7f:46:f1:2a:56:
                    77:1d:6c:33:0c:b6:f7:7d:e6:cf:c9:5e:ff:c4:84:
                    67:ba:16:3f:63:a2:0e:d3:ae:07:bb:b6:69:48:48:
                    b9:87:2f:81:04:0c:91:06:54:bc:90:ea:ad:e0:84:
                    df:bf:c3:49:36:b5:1c:bc:bb:8b:84:e5:4e:30:e0:
                    f3:94:e7:c2:51:9a:0b:dd:f9:70:59:0a:12:1a:90:
                    e7:45:af:b5:d0:ab:75:c2:af:fd:3f:1d:21:87:a0:
                    ad:85:e7:34:f9:a6:94:8b:20:9b:3e:4b:41:69:60:
                    0f:9f:3a:be:d9:36:b1:a6:44:e3:39:64:97:5f:a4:
                    cb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:37:02:C2:2D:13:0E:63:C8:DB:12:28:FC:6E:D5:29:4B:EB:30:E1
            X509v3 Authority Key Identifier:
                keyid:2C:E1:F8:73:86:03:CE:BF:28:7D:D6:25:40:FE:F5:61:C1:AF:87:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/0/2CE1F8738603CEBF287DD62540FEF561C1AF87C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CE1F8738603CEBF287DD62540FEF561C1AF87C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/0/323830313a38303a6138303a3a2f34342d3438203d3e203131323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:a80::/44

    Signature Algorithm: sha256WithRSAEncryption
         8d:c4:53:c7:4b:d7:be:96:cd:cb:e5:0f:cc:40:bb:3b:2c:bf:
         97:af:23:fb:2b:bf:d0:1d:d3:4e:57:3c:4e:57:90:e6:95:8f:
         9d:48:07:da:6b:18:6f:b3:9a:eb:bd:f4:3c:7e:10:fc:1a:9e:
         a7:a5:a8:19:8a:9d:4e:36:80:fa:da:83:fe:83:d6:ff:bd:7f:
         06:1b:ac:17:0f:5f:94:9e:67:06:d2:14:4a:54:ef:7a:64:01:
         da:59:b7:4f:f5:5d:7c:da:1f:42:54:16:9e:72:b8:26:ca:01:
         02:85:53:d2:ea:cb:74:25:37:a3:e1:98:41:37:2e:77:25:57:
         9d:7b:31:14:9d:39:94:a5:06:7b:7e:17:d1:56:d4:25:8a:a6:
         a6:74:4f:1a:49:b4:42:75:3f:56:52:14:c2:6d:69:2e:c4:d1:
         59:71:ec:f3:6a:da:2e:17:eb:07:5c:ea:e5:c8:7c:a8:fc:d5:
         51:93:11:b0:30:23:72:37:6b:f4:f8:ae:bd:2e:86:ed:81:71:
         25:a5:30:e9:be:5d:f3:ec:21:c3:00:10:d3:76:20:5d:07:bd:
         90:b0:fc:84:2d:6c:a4:ef:46:f9:57:0a:96:fa:5f:a0:d4:d0:
         ca:36:77:4a:1f:df:98:50:f6:0b:b8:96:56:41:6a:b3:74:1a:
         ee:d6:65:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----