Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/1/323830343a383030303a363030313a3a2f34382d3438203d3e20323731373233.roa
File:                     323830343a383030303a363030313a3a2f34382d3438203d3e20323731373233.roa (raw, json)
Hash identifier:          f9llY1EISNkFREcS3abn1RyJW3HJVMmAIWzjGEiJwos=
Subject key identifier:   DB:B8:17:0A:03:1A:FA:97:DD:75:C4:8A:B2:D3:17:B4:97:B1:88:8E
Certificate issuer:       /CN=2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99
Certificate serial:       71070979B5E83D31988D78177A35DB65887A3CFF
Authority key identifier: 2A:EE:20:7C:0C:6F:AB:5D:F4:C8:FF:1A:41:BD:93:27:92:79:2C:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/1/323830343a383030303a363030313a3a2f34382d3438203d3e20323731373233.roa
Signing time:             Thu 04 Apr 2024 14:49:34 +0000
ROA not before:           Thu 04 Apr 2024 14:44:34 +0000
ROA not after:            Thu 03 Apr 2025 14:49:34 +0000
asID:                     271723
IP address blocks:        2804:8000:6001::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:07:09:79:b5:e8:3d:31:98:8d:78:17:7a:35:db:65:88:7a:3c:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99
        Validity
            Not Before: Apr  4 14:44:34 2024 GMT
            Not After : Apr  3 14:49:34 2025 GMT
        Subject: CN=DBB8170A031AFA97DD75C48AB2D317B497B1888E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f6:41:68:60:fe:37:92:de:89:fe:4f:12:e7:
                    29:b4:56:07:94:5f:e9:a6:d3:25:9b:5d:b6:c3:ab:
                    50:34:a0:d1:5d:2e:1e:ef:61:88:68:c6:00:71:ce:
                    46:f2:07:7e:d2:48:c0:a2:94:b0:8f:1d:6d:5a:3e:
                    5e:80:dc:ff:95:fb:92:4d:86:d1:7e:40:a8:87:c2:
                    ec:23:44:ab:29:e4:da:fc:cd:55:b4:2b:9b:d3:3f:
                    ac:da:23:cb:1a:71:3b:b6:32:1d:62:19:64:19:00:
                    80:29:3c:20:90:49:79:ab:5f:0c:cb:ca:08:c8:cc:
                    8c:fa:67:9e:f0:dd:04:80:e5:b0:7b:8d:f7:7e:c1:
                    18:1c:c9:3d:c7:5d:27:53:2c:d2:13:67:cf:34:44:
                    93:e5:da:2a:54:bb:c8:67:04:a3:c9:c2:c7:60:a2:
                    1b:50:85:f8:a5:92:03:02:0b:74:77:d9:3f:cb:38:
                    70:fd:7b:12:ef:95:85:ce:ee:f3:ed:33:18:19:09:
                    aa:27:fa:2a:12:7f:0a:f4:07:b9:bd:b6:cf:c9:0f:
                    e3:66:4d:da:54:0b:32:d0:25:b4:7d:1a:b9:b3:ff:
                    63:4e:71:db:bf:58:b1:0c:f7:47:53:f6:d3:5e:68:
                    24:26:94:e8:ec:7b:d3:7b:09:72:cc:89:f1:70:64:
                    13:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:B8:17:0A:03:1A:FA:97:DD:75:C4:8A:B2:D3:17:B4:97:B1:88:8E
            X509v3 Authority Key Identifier:
                keyid:2A:EE:20:7C:0C:6F:AB:5D:F4:C8:FF:1A:41:BD:93:27:92:79:2C:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/1/2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/1/323830343a383030303a363030313a3a2f34382d3438203d3e20323731373233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8000:6001::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:65:af:09:6d:e7:1f:21:d5:bc:cb:6a:b4:79:0b:10:0c:16:
         0a:3f:af:1f:bb:92:23:fc:74:78:99:3e:5b:a2:dd:58:47:57:
         58:b6:7a:d6:ed:00:22:24:17:2a:92:76:62:bb:70:3c:38:c5:
         67:42:5e:a6:05:7c:01:ee:3b:cb:73:1f:d5:71:2f:3a:3d:98:
         01:91:0a:3e:d7:d4:ec:d9:ae:ef:31:da:28:80:89:f8:4b:52:
         82:4d:e0:55:52:87:29:94:b4:8b:ce:8c:55:e1:44:22:68:1b:
         c0:36:58:71:53:a4:eb:ae:d2:1e:a4:7d:a4:20:64:84:c6:d7:
         61:41:5d:ee:66:05:48:38:38:7f:6e:13:73:f1:2a:1c:b4:cd:
         e5:30:b9:c0:6f:7f:da:6f:ee:13:ce:aa:25:94:df:fb:ed:58:
         d9:c7:ab:d5:97:bc:5b:f4:37:47:75:8e:14:a3:29:9f:18:e3:
         ad:80:8d:b1:77:02:4e:3e:e9:e0:b5:b8:ea:d0:6a:d5:f9:1c:
         02:c3:c5:05:72:8f:d3:1b:80:f4:45:58:b7:a0:1a:93:a4:66:
         8f:1e:76:c8:04:e9:79:3c:c7:1b:a1:6b:87:9b:aa:4f:6f:9f:
         ee:ca:e1:1e:e5:85:9f:33:87:54:48:3a:35:ae:d6:ee:7a:1f:
         0b:2d:78:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----