Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/1/323830343a383030303a363030353a3a2f34382d3438203d3e20323731373233.roa
File:                     323830343a383030303a363030353a3a2f34382d3438203d3e20323731373233.roa (raw, json)
Hash identifier:          E9mKm+vmL91IXYF8ppgYk2xdltCoIru+Odzzg3cqwII=
Subject key identifier:   44:A8:AA:8B:0F:97:E8:6B:3E:6F:BE:9C:D4:F6:DE:57:C8:CC:C3:A0
Certificate issuer:       /CN=2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99
Certificate serial:       55E28E4B1729ABA41CC0168D177EEC7DA6119278
Authority key identifier: 2A:EE:20:7C:0C:6F:AB:5D:F4:C8:FF:1A:41:BD:93:27:92:79:2C:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/1/323830343a383030303a363030353a3a2f34382d3438203d3e20323731373233.roa
Signing time:             Thu 04 Apr 2024 14:49:35 +0000
ROA not before:           Thu 04 Apr 2024 14:44:35 +0000
ROA not after:            Thu 03 Apr 2025 14:49:35 +0000
asID:                     271723
IP address blocks:        2804:8000:6005::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:e2:8e:4b:17:29:ab:a4:1c:c0:16:8d:17:7e:ec:7d:a6:11:92:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99
        Validity
            Not Before: Apr  4 14:44:35 2024 GMT
            Not After : Apr  3 14:49:35 2025 GMT
        Subject: CN=44A8AA8B0F97E86B3E6FBE9CD4F6DE57C8CCC3A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:33:c4:97:55:2d:85:f4:38:92:d5:a6:d4:ea:
                    8d:10:e4:b3:e9:23:4c:bc:cb:c6:01:a4:bb:28:73:
                    bc:f8:1d:c3:4d:0a:2b:e5:04:71:db:35:c1:84:bb:
                    cf:76:71:a7:77:c5:59:02:0c:c8:66:d0:a7:2e:52:
                    67:5e:91:1a:21:54:eb:57:6c:25:6e:c2:ad:9c:0e:
                    69:71:51:8d:4f:7d:12:88:30:b7:59:bd:9a:e6:5a:
                    45:5a:6c:d3:c7:f5:6d:16:97:6a:ce:6b:74:fc:89:
                    46:66:28:81:5f:2c:a1:32:93:3e:85:b2:64:80:f3:
                    26:db:5e:42:eb:99:cd:c3:8d:15:c4:55:6a:84:be:
                    ac:e3:15:b0:72:d4:b8:bc:84:8b:93:3d:c1:a8:bf:
                    2d:70:c4:cb:3b:c1:4b:18:7d:d7:e3:4e:ea:ed:1d:
                    e2:88:d9:59:c2:85:8c:32:db:04:54:1b:23:77:34:
                    4e:1c:74:21:43:e8:c0:3c:b1:c4:b7:91:8b:8c:a8:
                    b0:59:06:81:0d:06:30:26:b2:ad:fd:cf:30:23:7a:
                    0c:53:0c:da:27:1c:31:63:41:ce:fc:84:e9:90:1b:
                    c1:b4:f0:65:58:bb:81:4d:4e:2f:3e:2f:a9:16:d2:
                    10:67:fa:87:63:e6:75:ef:14:98:37:fc:1b:4c:98:
                    82:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A8:AA:8B:0F:97:E8:6B:3E:6F:BE:9C:D4:F6:DE:57:C8:CC:C3:A0
            X509v3 Authority Key Identifier:
                keyid:2A:EE:20:7C:0C:6F:AB:5D:F4:C8:FF:1A:41:BD:93:27:92:79:2C:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/1/2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/1/323830343a383030303a363030353a3a2f34382d3438203d3e20323731373233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8000:6005::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:7a:4d:12:2f:68:e3:5e:ce:3a:ed:60:c7:4d:c8:20:70:cd:
         3e:6a:3b:36:97:f7:b7:28:2e:db:8d:b1:f7:01:2c:81:25:14:
         d3:e3:08:c0:15:16:31:ad:1c:0f:13:c4:35:69:23:2e:27:bb:
         29:89:31:07:9e:53:94:4a:28:82:e2:19:76:30:c8:f3:7e:37:
         84:a2:44:1a:9a:3f:37:88:f4:bc:1d:b7:24:b0:bf:c8:55:53:
         79:4c:74:71:94:a4:9b:b2:75:f2:36:5e:12:cf:16:c1:c5:76:
         17:d7:d3:0d:21:21:47:ab:46:31:50:65:b5:5a:2a:ce:76:58:
         4f:43:67:de:9d:63:80:85:cf:c3:56:a8:12:48:0b:83:e8:a2:
         a0:63:3d:ff:8b:ec:5c:fe:69:11:f0:fb:5b:ad:56:23:1f:08:
         cd:a6:a6:7e:88:11:61:da:65:e0:d2:3d:26:be:11:b5:13:81:
         2b:ea:98:1b:6c:10:a3:8a:cd:d0:cf:43:1f:cf:f1:9f:88:5d:
         8b:fd:ca:21:8d:e0:be:69:de:84:da:d4:f4:25:02:77:fa:f3:
         e4:78:d2:48:f6:10:8e:39:63:07:58:ce:c2:07:9a:32:a3:f9:
         d5:73:44:18:4f:d8:47:20:6f:34:ee:b7:d2:e1:d7:d3:33:05:
         9e:0a:78:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----