Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/323830343a323434343a3a2f33322d313238203d3e20323634323131.roa
File:                     323830343a323434343a3a2f33322d313238203d3e20323634323131.roa (raw, json)
Hash identifier:          UnVpr1CegOy0vs6eg6Bn1Llr26e+E1Kp7wC3qKaNNdY=
Subject key identifier:   48:CD:33:98:DF:D9:67:FE:37:7E:5F:EA:BD:02:D8:DD:1E:F3:2D:B5
Certificate issuer:       /CN=D33CE6A3003B1C66B7E4529FD0F8AB30188858BA
Certificate serial:       AE5852EF884EBE573439DE96D40C0833E46D32
Authority key identifier: D3:3C:E6:A3:00:3B:1C:66:B7:E4:52:9F:D0:F8:AB:30:18:88:58:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D33CE6A3003B1C66B7E4529FD0F8AB30188858BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/323830343a323434343a3a2f33322d313238203d3e20323634323131.roa
Signing time:             Tue 02 Apr 2024 02:15:27 +0000
ROA not before:           Tue 02 Apr 2024 02:10:27 +0000
ROA not after:            Tue 01 Apr 2025 02:15:27 +0000
asID:                     264211
IP address blocks:        2804:2444::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ae:58:52:ef:88:4e:be:57:34:39:de:96:d4:0c:08:33:e4:6d:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D33CE6A3003B1C66B7E4529FD0F8AB30188858BA
        Validity
            Not Before: Apr  2 02:10:27 2024 GMT
            Not After : Apr  1 02:15:27 2025 GMT
        Subject: CN=48CD3398DFD967FE377E5FEABD02D8DD1EF32DB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:23:cc:d5:17:fa:9d:a0:bb:6e:9d:03:9d:30:
                    f1:4b:20:83:46:f9:e9:58:b1:82:a6:b7:12:04:fb:
                    c0:28:89:18:71:bc:34:f9:b4:a1:aa:87:24:04:20:
                    dd:e6:e5:4e:6f:2d:82:7d:b3:12:74:61:e5:9b:3e:
                    38:e7:45:cb:43:73:37:a8:02:2f:38:69:85:cd:de:
                    da:95:a7:2a:22:d8:e0:c1:0c:db:9d:ee:15:2b:92:
                    64:35:a5:f0:ba:44:b0:0f:3e:72:a9:eb:c7:82:bb:
                    16:77:e4:9a:36:c1:19:40:8a:c0:b7:b4:da:1a:e2:
                    46:2e:ea:b9:82:d2:05:d1:87:36:b4:46:46:a7:39:
                    71:78:bc:a6:5b:54:66:65:60:5a:98:f9:95:78:11:
                    e7:43:47:ce:36:0d:d0:51:c7:5c:42:f4:21:fa:64:
                    41:94:b5:67:92:87:69:18:f5:31:47:55:16:54:92:
                    24:4f:08:e6:5f:e4:0d:b2:d8:f7:f1:59:3b:11:6b:
                    f5:04:83:f9:87:88:f1:f1:5b:78:de:c3:ee:e5:bc:
                    4d:35:08:ca:30:a5:05:40:91:ab:df:48:a0:14:43:
                    65:a1:2b:13:d5:8b:12:70:7c:81:5a:57:27:d4:b3:
                    70:4a:ce:3d:67:a5:75:76:1d:d8:f3:bf:8b:ed:a6:
                    5a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:CD:33:98:DF:D9:67:FE:37:7E:5F:EA:BD:02:D8:DD:1E:F3:2D:B5
            X509v3 Authority Key Identifier:
                keyid:D3:3C:E6:A3:00:3B:1C:66:B7:E4:52:9F:D0:F8:AB:30:18:88:58:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/D33CE6A3003B1C66B7E4529FD0F8AB30188858BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D33CE6A3003B1C66B7E4529FD0F8AB30188858BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/323830343a323434343a3a2f33322d313238203d3e20323634323131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2444::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:0c:07:b0:de:dc:87:e1:38:a1:06:b1:cd:e5:e4:e0:fe:a0:
         72:45:c6:2d:24:f1:00:b3:6b:a6:1e:a1:11:f2:7a:1e:79:9c:
         34:07:9b:51:e0:b1:9b:dc:89:7c:95:52:0a:58:e9:0b:23:6b:
         78:98:51:ce:31:be:46:b9:e6:6c:e6:2a:1c:4f:2e:19:3c:e4:
         15:09:56:35:65:59:c6:18:49:65:d9:13:ca:a3:ec:40:d3:eb:
         82:59:e9:7a:f5:76:73:66:1d:31:42:4c:64:fa:97:91:7b:73:
         61:27:41:4c:59:75:f6:e6:60:88:6e:71:1b:99:07:56:d8:73:
         0a:30:ef:3c:64:13:f0:ff:20:3b:76:9d:d2:62:b4:9c:2a:c2:
         ed:1c:10:88:b0:03:9d:dc:86:47:a2:ad:fd:15:60:16:ad:58:
         2f:6a:9d:fd:28:dd:aa:20:76:1b:67:8c:cb:d7:ea:69:6b:46:
         4f:f6:4a:5d:27:87:b2:11:ae:be:46:ed:39:30:4a:08:68:76:
         a6:e1:ef:30:79:b0:09:7b:aa:f7:11:a9:14:83:6c:1b:9b:59:
         93:67:b8:4e:86:d0:ff:68:fe:1f:32:97:8a:57:15:4d:1c:d3:
         f6:6f:f1:b2:dc:87:7e:b2:be:fd:2f:d2:be:73:ab:bc:f7:50:
         37:a7:07:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----