Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/0/323830343a326461343a3a2f33332d3333203d3e20323635323934.roa
File:                     323830343a326461343a3a2f33332d3333203d3e20323635323934.roa (raw, json)
Hash identifier:          VjxeeXJi8IMbBiNitqOu1RfxdRW2crJggIaBhM3dg2A=
Subject key identifier:   A1:1E:75:E7:4D:3A:5F:D1:5E:2B:6D:EC:B8:80:81:02:66:73:DF:BC
Certificate issuer:       /CN=1E94701DD600A862C548840197A22D5CEE4B2FDA
Certificate serial:       020E1FA8644B9A0743E2E144B6D74A519A8CE043
Authority key identifier: 1E:94:70:1D:D6:00:A8:62:C5:48:84:01:97:A2:2D:5C:EE:4B:2F:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E94701DD600A862C548840197A22D5CEE4B2FDA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/0/323830343a326461343a3a2f33332d3333203d3e20323635323934.roa
Signing time:             Thu 15 Feb 2024 18:00:00 +0000
ROA not before:           Thu 15 Feb 2024 17:55:00 +0000
ROA not after:            Thu 13 Feb 2025 18:00:00 +0000
asID:                     265294
IP address blocks:        2804:2da4::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:0e:1f:a8:64:4b:9a:07:43:e2:e1:44:b6:d7:4a:51:9a:8c:e0:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E94701DD600A862C548840197A22D5CEE4B2FDA
        Validity
            Not Before: Feb 15 17:55:00 2024 GMT
            Not After : Feb 13 18:00:00 2025 GMT
        Subject: CN=A11E75E74D3A5FD15E2B6DECB88081026673DFBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c1:51:82:84:84:a5:13:1e:46:06:32:31:21:
                    4f:c8:9c:35:2f:8d:0b:6f:01:9d:f1:66:6b:48:dc:
                    79:ed:34:e5:97:fc:f6:04:08:aa:7c:73:cd:ff:4b:
                    06:55:87:93:f2:95:3f:48:07:2a:9e:f3:c2:80:fb:
                    2c:99:8d:b8:76:1b:ab:61:31:f4:cd:50:27:67:f4:
                    51:d7:d2:bc:c5:86:d0:16:b9:63:93:bd:d5:38:68:
                    0a:2a:36:90:64:b0:6f:95:99:15:46:31:dc:31:90:
                    dc:f6:0c:7b:0c:ed:c2:21:e4:f8:ee:ef:18:e1:33:
                    15:7d:72:6c:fa:e2:c8:a5:74:af:ae:6e:4b:8a:5a:
                    4f:2d:89:77:bb:13:10:e7:e0:3f:88:fe:67:b1:1f:
                    80:e6:2d:33:28:4f:ef:53:2a:6e:3c:72:d6:c3:6e:
                    0a:0e:9e:2f:2e:69:5b:e2:37:75:aa:3d:cd:c7:44:
                    db:17:c1:b3:49:cb:81:e8:da:a5:26:9d:58:a2:fd:
                    e0:a1:de:58:7a:19:e8:9b:96:2b:d0:e4:3c:b0:b3:
                    e6:b7:a2:3c:66:dd:e4:af:7a:3c:54:28:cd:1a:97:
                    f7:ff:eb:7a:c2:65:25:f2:16:84:5e:46:24:2a:ff:
                    a3:b8:02:c8:12:3a:71:2c:e7:a5:40:1a:64:ef:e3:
                    08:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:1E:75:E7:4D:3A:5F:D1:5E:2B:6D:EC:B8:80:81:02:66:73:DF:BC
            X509v3 Authority Key Identifier:
                keyid:1E:94:70:1D:D6:00:A8:62:C5:48:84:01:97:A2:2D:5C:EE:4B:2F:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/0/1E94701DD600A862C548840197A22D5CEE4B2FDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E94701DD600A862C548840197A22D5CEE4B2FDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/0/323830343a326461343a3a2f33332d3333203d3e20323635323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2da4::/33

    Signature Algorithm: sha256WithRSAEncryption
         19:ef:17:6f:4a:38:4c:05:bf:89:3e:a0:52:90:aa:2c:8b:06:
         54:5e:ca:8d:1e:22:76:e2:78:cd:8e:39:75:35:6e:d4:70:fc:
         21:8a:f1:67:43:ea:fa:98:ce:fb:8b:69:24:93:c8:17:0b:5d:
         84:62:b8:a6:d0:1c:f0:bd:c5:0d:2e:4c:43:ed:94:7e:a0:1c:
         53:b1:7f:ed:6e:f9:0c:64:33:35:f0:c0:8c:59:4d:c7:ec:a6:
         8f:41:71:87:8b:49:b0:0f:d5:6d:b2:a8:e4:6b:dc:dc:18:97:
         10:12:a8:1f:dc:a5:b5:e1:32:01:02:48:09:8d:ea:dd:e4:34:
         35:18:76:52:94:61:e2:fd:7d:06:a4:57:d8:89:c6:50:75:33:
         7b:3f:61:45:95:50:2c:27:00:8b:34:9e:68:33:0c:8b:fd:40:
         92:2a:0f:b5:92:13:f6:28:47:17:4d:3b:0c:3e:bd:8f:1a:40:
         00:88:6d:86:45:c4:a6:5a:dd:5c:d9:d9:73:2c:45:79:92:b0:
         5a:9b:e8:d8:59:53:95:ad:e8:fa:a2:5c:06:1f:c3:de:ce:b7:
         86:59:91:d6:81:f9:7e:64:52:44:be:73:c8:5e:5e:75:85:ac:
         4f:a7:83:26:3d:0b:52:c3:69:48:d2:fa:e9:50:e2:c8:41:10:
         2d:af:13:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----