Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/1/323830343a383030303a363030323a3a2f34382d3438203d3e20323731373233.roa
File:                     323830343a383030303a363030323a3a2f34382d3438203d3e20323731373233.roa (raw, json)
Hash identifier:          GVBMz/SdQDBfmtjAYq0jmBx3v+kjQfxKTMAzZoEk5jM=
Subject key identifier:   8A:68:6B:29:8D:30:D6:E3:D1:EF:FE:AC:3C:31:CC:2E:64:E8:41:7B
Certificate issuer:       /CN=2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99
Certificate serial:       75762E77EEEBF17DB97682794B63AE3472E2FF2F
Authority key identifier: 2A:EE:20:7C:0C:6F:AB:5D:F4:C8:FF:1A:41:BD:93:27:92:79:2C:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/1/323830343a383030303a363030323a3a2f34382d3438203d3e20323731373233.roa
Signing time:             Thu 04 Apr 2024 14:49:34 +0000
ROA not before:           Thu 04 Apr 2024 14:44:34 +0000
ROA not after:            Thu 03 Apr 2025 14:49:34 +0000
asID:                     271723
IP address blocks:        2804:8000:6002::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:76:2e:77:ee:eb:f1:7d:b9:76:82:79:4b:63:ae:34:72:e2:ff:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99
        Validity
            Not Before: Apr  4 14:44:34 2024 GMT
            Not After : Apr  3 14:49:34 2025 GMT
        Subject: CN=8A686B298D30D6E3D1EFFEAC3C31CC2E64E8417B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e4:eb:15:84:ef:e4:b0:c2:2a:fc:3a:39:30:
                    06:32:77:1d:2f:2e:82:94:6b:51:98:3f:b8:12:dd:
                    81:e2:7a:16:ea:38:73:dd:0a:8f:44:7d:c8:d4:df:
                    78:e0:88:4f:f1:51:09:87:45:1a:4c:c0:58:66:a1:
                    3d:c3:46:28:30:1f:2d:68:44:c8:67:8b:68:63:0e:
                    8b:18:3d:3b:18:0a:6b:39:91:c8:a8:ae:fd:1c:fa:
                    8f:76:98:d3:2c:31:cd:c4:d8:1f:e5:d7:ca:c5:84:
                    22:61:2f:53:f4:35:57:62:af:5f:8f:e6:3b:2f:2a:
                    17:47:89:2f:10:2f:67:83:03:8b:80:80:12:7c:c4:
                    a4:53:d6:b1:80:df:d5:74:8b:01:66:80:29:35:f8:
                    55:0e:40:bb:6c:6c:04:31:dd:e4:4f:79:f0:10:45:
                    88:78:cb:83:09:d9:3d:ff:95:b4:5f:f8:c6:02:54:
                    48:66:34:30:b8:f4:08:db:a6:d5:59:a5:51:d4:df:
                    16:2e:7e:02:b8:16:d3:a2:f9:66:b4:58:19:93:d1:
                    61:2d:15:56:7a:7c:ce:e4:d3:07:b5:71:c3:f9:5f:
                    33:a5:9e:99:07:76:35:d0:88:97:32:5e:78:e9:cd:
                    43:20:84:46:16:cf:d5:3b:f1:9a:81:df:a0:4d:58:
                    4f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:68:6B:29:8D:30:D6:E3:D1:EF:FE:AC:3C:31:CC:2E:64:E8:41:7B
            X509v3 Authority Key Identifier:
                keyid:2A:EE:20:7C:0C:6F:AB:5D:F4:C8:FF:1A:41:BD:93:27:92:79:2C:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/1/2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/1/323830343a383030303a363030323a3a2f34382d3438203d3e20323731373233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8000:6002::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:a9:52:1d:e6:c8:82:d3:12:9d:69:7b:a6:b1:e9:ea:3e:ec:
         5c:04:08:02:5b:f4:83:db:4a:c8:53:0d:18:45:69:4a:06:e4:
         ad:38:e9:a7:ed:d5:e2:8e:89:8e:99:92:f4:93:8b:71:99:1c:
         38:1d:e9:2f:3b:92:b8:7c:05:d0:64:10:74:02:4f:b7:58:e9:
         e3:70:d3:aa:6b:56:99:d6:60:17:31:a2:72:97:2a:d8:95:ba:
         5a:87:50:85:00:bd:94:e5:1f:cf:5a:c1:d4:0d:f8:72:c2:12:
         e7:66:23:47:ac:53:0e:85:fa:5b:3e:49:53:f2:87:1f:18:6c:
         f1:0f:f0:27:4a:88:57:b4:83:02:80:7f:09:43:ac:1a:90:0b:
         99:64:4f:20:7a:14:76:76:c2:ff:ab:8e:5c:c3:07:35:ec:5a:
         b2:e9:3e:5d:77:34:72:e3:63:90:48:06:2e:21:72:86:af:4d:
         80:10:c9:0b:91:04:39:3b:9b:38:5f:9f:2b:ae:ec:35:2b:fc:
         49:f2:cd:fe:6d:c4:21:67:1c:fb:04:fe:19:88:35:fa:83:eb:
         3a:77:d0:b3:a5:c8:e0:58:2f:7e:f1:15:01:73:75:e2:1e:4f:
         8f:77:f3:3b:e5:1e:15:31:c1:30:dc:f6:fd:9c:07:2e:8a:b0:
         0a:8e:97:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----