Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/1/323830343a383030303a363030363a3a2f34382d3438203d3e20323731373233.roa
File:                     323830343a383030303a363030363a3a2f34382d3438203d3e20323731373233.roa (raw, json)
Hash identifier:          Y8p2L51xH8FZO8jOh0EqKmK03rC1W1QXetqwJNsTisw=
Subject key identifier:   29:7E:B5:3C:5C:BD:DD:77:0A:34:D9:41:54:39:07:30:14:EA:53:6F
Certificate issuer:       /CN=2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99
Certificate serial:       249397D7CBDE6B72E577B403CB045C30619A2F36
Authority key identifier: 2A:EE:20:7C:0C:6F:AB:5D:F4:C8:FF:1A:41:BD:93:27:92:79:2C:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/1/323830343a383030303a363030363a3a2f34382d3438203d3e20323731373233.roa
Signing time:             Thu 04 Apr 2024 14:49:35 +0000
ROA not before:           Thu 04 Apr 2024 14:44:35 +0000
ROA not after:            Thu 03 Apr 2025 14:49:35 +0000
asID:                     271723
IP address blocks:        2804:8000:6006::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:93:97:d7:cb:de:6b:72:e5:77:b4:03:cb:04:5c:30:61:9a:2f:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99
        Validity
            Not Before: Apr  4 14:44:35 2024 GMT
            Not After : Apr  3 14:49:35 2025 GMT
        Subject: CN=297EB53C5CBDDD770A34D9415439073014EA536F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4f:09:94:12:53:de:1e:87:c2:34:fb:5c:69:
                    a2:94:dc:bf:47:23:f6:d6:bd:35:6a:2c:ce:dd:f3:
                    74:2d:35:53:63:74:65:84:c7:0f:5c:d7:e5:7d:10:
                    56:77:7d:d5:cb:e5:1f:b4:03:a2:82:66:8b:d2:ec:
                    85:c7:bc:26:43:2d:ef:b0:26:f3:0d:b5:97:6c:55:
                    a8:cb:53:31:3a:55:77:82:fc:8a:af:3c:07:b9:1a:
                    d0:b6:d8:69:09:ab:cc:38:1a:ca:e7:43:3d:ff:78:
                    08:d0:ca:f9:05:b2:77:e8:b3:d7:1b:fd:fe:da:4c:
                    77:0c:12:99:46:f2:15:4a:59:92:07:ac:b0:fd:9c:
                    cb:dc:10:4d:68:cd:65:95:12:f8:8e:36:89:7e:8d:
                    67:d5:86:fd:0b:61:af:cd:70:70:4e:91:1f:07:e5:
                    1b:3a:61:32:f4:b2:0e:d6:1c:7b:11:86:83:47:25:
                    f1:d8:35:ab:e9:62:df:31:e6:7d:1e:2a:ff:64:e0:
                    c8:d1:aa:2b:e2:68:4a:86:a4:cd:cb:5f:ad:f2:e9:
                    fc:fd:4a:38:da:44:9b:0d:30:ab:95:da:4f:96:4c:
                    4c:2d:b4:3b:8b:4a:0b:26:b1:6b:b0:ee:ca:a0:2e:
                    f8:1e:55:de:42:0b:00:0d:a8:95:93:7e:f5:23:f0:
                    5b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:7E:B5:3C:5C:BD:DD:77:0A:34:D9:41:54:39:07:30:14:EA:53:6F
            X509v3 Authority Key Identifier:
                keyid:2A:EE:20:7C:0C:6F:AB:5D:F4:C8:FF:1A:41:BD:93:27:92:79:2C:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/1/2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/1/323830343a383030303a363030363a3a2f34382d3438203d3e20323731373233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8000:6006::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:56:35:cc:23:c8:69:26:15:b8:e9:1f:23:b7:04:ad:49:9f:
         26:0c:fe:2c:0e:1e:2f:f3:66:42:92:a3:d3:c6:29:96:4a:89:
         9d:4e:48:2e:c2:7f:4e:22:a9:d4:66:10:f1:06:14:13:63:e3:
         62:21:4e:15:5c:70:86:af:fa:2e:6d:a6:87:0b:47:65:4c:2d:
         6e:ab:d8:e4:71:ce:21:15:a8:da:a6:03:ff:3d:b2:96:66:d5:
         cb:ad:36:aa:5c:08:56:a5:d2:28:8d:1b:a1:9a:8a:e0:a6:5b:
         c9:60:99:e9:77:5d:33:94:3e:06:35:e1:44:c9:93:99:ce:cb:
         47:78:1b:fd:d1:41:87:f5:ee:95:cd:59:34:72:c3:13:2b:4e:
         78:7e:5b:f7:2e:6e:51:cc:bf:1e:18:a2:fa:51:64:15:cd:88:
         21:5b:6b:ad:d6:ae:97:d0:4b:9c:67:6c:56:5b:1c:da:11:cd:
         af:fe:36:cf:73:11:51:f1:d4:41:b5:18:c7:53:df:d4:69:84:
         32:a4:90:e4:0b:0d:dd:11:e0:d8:0d:ff:af:56:0f:f3:7f:2b:
         5b:79:9c:40:11:b0:c1:b5:e8:ab:a4:99:72:7c:b1:ad:1c:19:
         4a:89:24:45:81:5d:61:74:b8:2e:46:28:a4:ae:49:a3:b9:1f:
         9c:ff:8f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----