Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/1/323830343a383030303a363030333a3a2f34382d3438203d3e20323731373233.roa
File:                     323830343a383030303a363030333a3a2f34382d3438203d3e20323731373233.roa (raw, json)
Hash identifier:          NDhnCvn+MG8INYmQRHpSCB01p8N0EPvNAqU9CGiUrjY=
Subject key identifier:   A8:D2:36:8A:3C:AA:73:EF:70:D8:E5:67:87:46:33:E2:D3:9D:10:B5
Certificate issuer:       /CN=2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99
Certificate serial:       36E60131EE5C3B7C10CBB91693E79F447715F67B
Authority key identifier: 2A:EE:20:7C:0C:6F:AB:5D:F4:C8:FF:1A:41:BD:93:27:92:79:2C:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/1/323830343a383030303a363030333a3a2f34382d3438203d3e20323731373233.roa
Signing time:             Thu 04 Apr 2024 14:49:36 +0000
ROA not before:           Thu 04 Apr 2024 14:44:36 +0000
ROA not after:            Thu 03 Apr 2025 14:49:36 +0000
asID:                     271723
IP address blocks:        2804:8000:6003::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:e6:01:31:ee:5c:3b:7c:10:cb:b9:16:93:e7:9f:44:77:15:f6:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99
        Validity
            Not Before: Apr  4 14:44:36 2024 GMT
            Not After : Apr  3 14:49:36 2025 GMT
        Subject: CN=A8D2368A3CAA73EF70D8E567874633E2D39D10B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:db:9e:4e:01:22:c9:80:ab:0e:a5:4d:ec:5d:
                    c1:fa:ec:c8:01:55:14:6f:86:63:12:0a:c0:2f:3c:
                    a1:77:de:ca:eb:b4:35:83:a1:97:73:47:34:af:97:
                    cc:47:00:55:e6:76:c6:77:f9:ec:fa:e9:d0:5d:d0:
                    9b:86:77:0d:27:0c:6e:26:b8:be:a9:cb:c0:4b:cb:
                    ef:b9:96:21:fe:eb:7c:de:15:82:e4:21:32:5b:cb:
                    5d:98:65:3c:df:bd:80:3f:d4:79:1e:52:a6:79:a2:
                    ff:e3:7c:aa:d0:ad:cb:09:1c:be:bf:81:d7:38:1b:
                    58:f9:7c:94:21:21:02:9a:4e:90:30:f1:5a:46:8d:
                    68:b2:0b:6a:0b:45:6c:4b:6c:d8:ed:8c:99:49:f2:
                    5d:1a:08:e9:2b:ae:68:46:d4:47:7f:c2:17:db:b9:
                    b1:08:66:a5:03:67:0a:18:e6:50:86:7d:b3:d4:35:
                    81:7c:2d:c1:ba:8d:98:7f:b6:41:ca:86:12:0e:c0:
                    bd:86:0b:67:d8:a3:94:6f:f3:75:5f:aa:9f:b3:0c:
                    2e:98:cc:1e:2e:3b:60:a8:27:17:54:09:29:2b:e7:
                    79:5f:2e:65:e5:c1:fd:b1:33:5b:9a:b6:63:77:5c:
                    63:92:85:b5:a9:70:c3:b5:b3:1c:0f:76:b7:5e:ac:
                    0e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D2:36:8A:3C:AA:73:EF:70:D8:E5:67:87:46:33:E2:D3:9D:10:B5
            X509v3 Authority Key Identifier:
                keyid:2A:EE:20:7C:0C:6F:AB:5D:F4:C8:FF:1A:41:BD:93:27:92:79:2C:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/1/2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/1/323830343a383030303a363030333a3a2f34382d3438203d3e20323731373233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8000:6003::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:6c:a8:06:d4:87:4c:fb:e3:56:f2:8c:4d:6f:cf:bd:70:d5:
         da:c5:dd:b7:73:e6:39:14:8a:f0:3b:eb:a9:63:b9:3d:43:f3:
         e9:27:3a:9d:09:2b:84:b1:35:d4:af:3b:e2:aa:f9:83:71:9d:
         e4:c9:14:ec:a2:e3:6d:2e:98:88:51:11:c8:97:6f:c1:9c:f5:
         3b:8c:40:0a:4a:39:c6:14:eb:35:74:07:16:5c:bb:51:1f:c5:
         55:49:b9:d3:4f:5b:a4:0a:14:ee:bb:2e:11:81:03:82:eb:1c:
         f1:4a:9e:04:a1:8d:7a:14:8c:dd:6a:9a:08:33:a1:04:2f:83:
         63:42:82:b5:61:ec:fe:91:2e:bf:39:63:a3:07:d9:45:cc:76:
         ef:16:41:21:1b:3f:12:32:c4:a9:20:28:4c:d2:6f:7a:26:7d:
         40:52:5e:82:b9:c5:72:cb:26:eb:27:7e:a4:4e:6f:c6:42:c9:
         2c:ae:31:9a:56:5e:44:49:96:10:f0:2f:aa:f8:05:c3:80:4e:
         8d:95:ed:ce:c4:58:be:73:53:79:8b:2c:7c:4f:42:e9:dc:0f:
         e0:00:e0:9b:b2:bb:6c:41:82:ac:12:ab:3c:d6:a9:0c:0a:24:
         60:a0:f8:0f:1c:10:b3:3d:7b:2b:c6:2b:e9:63:81:89:2e:0a:
         41:b3:d4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----