Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/1/323830343a383030303a363030373a3a2f34382d3438203d3e20323731373233.roa
File:                     323830343a383030303a363030373a3a2f34382d3438203d3e20323731373233.roa (raw, json)
Hash identifier:          uxDTUXGHsn1+uclpw0ECa9pSB+/AjnG8tj649iORIx4=
Subject key identifier:   AE:EE:B8:88:A5:23:FC:4A:AC:04:34:FE:83:3E:C4:84:12:0A:09:E5
Certificate issuer:       /CN=2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99
Certificate serial:       0E45D277457179CDCA407380BAE001CD8D2BA8E6
Authority key identifier: 2A:EE:20:7C:0C:6F:AB:5D:F4:C8:FF:1A:41:BD:93:27:92:79:2C:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/1/323830343a383030303a363030373a3a2f34382d3438203d3e20323731373233.roa
Signing time:             Thu 04 Apr 2024 14:49:35 +0000
ROA not before:           Thu 04 Apr 2024 14:44:35 +0000
ROA not after:            Thu 03 Apr 2025 14:49:35 +0000
asID:                     271723
IP address blocks:        2804:8000:6007::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:45:d2:77:45:71:79:cd:ca:40:73:80:ba:e0:01:cd:8d:2b:a8:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99
        Validity
            Not Before: Apr  4 14:44:35 2024 GMT
            Not After : Apr  3 14:49:35 2025 GMT
        Subject: CN=AEEEB888A523FC4AAC0434FE833EC484120A09E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:57:fc:09:4f:4d:3c:7f:02:b3:8b:02:12:3e:
                    1f:b5:7f:6a:2f:dc:bf:6b:4d:38:8c:c7:19:5a:12:
                    cd:40:95:84:e9:03:01:8c:25:86:ee:cc:2f:cd:64:
                    8f:83:bb:20:53:bf:d8:e2:25:c1:2b:72:9f:82:3d:
                    78:a8:dd:5f:f3:57:63:a9:51:e1:1a:34:ab:e3:5d:
                    56:22:9f:a6:92:cb:d9:25:38:84:7c:85:60:dd:0c:
                    71:ae:7d:cd:7f:aa:e4:4b:70:fc:b7:5a:45:fd:ce:
                    35:29:42:19:50:31:7c:f8:c8:90:5d:d8:7d:d2:f4:
                    cc:e2:df:63:23:d9:cd:c6:7d:00:bf:8b:ec:cd:82:
                    c0:86:52:4a:64:4c:63:14:c2:d2:66:a8:38:ba:f8:
                    e2:30:7a:d9:4e:c4:ba:c6:09:f2:8d:bb:12:43:c9:
                    be:94:68:99:13:7d:fd:fb:04:76:b5:60:e7:62:7d:
                    78:af:97:a1:2f:75:8f:42:c5:74:c3:fb:00:36:28:
                    2e:d0:69:ac:7d:01:4d:1b:f5:41:30:95:8e:b6:0d:
                    4b:62:b7:66:dd:73:4f:24:70:b2:94:06:7a:2f:78:
                    df:c7:20:95:bb:9f:38:2d:70:ef:c1:90:30:d0:e9:
                    c9:f9:64:09:1f:04:79:84:25:db:81:28:72:b4:df:
                    68:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:EE:B8:88:A5:23:FC:4A:AC:04:34:FE:83:3E:C4:84:12:0A:09:E5
            X509v3 Authority Key Identifier:
                keyid:2A:EE:20:7C:0C:6F:AB:5D:F4:C8:FF:1A:41:BD:93:27:92:79:2C:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/1/2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/1/323830343a383030303a363030373a3a2f34382d3438203d3e20323731373233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8000:6007::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:ca:ea:8b:b8:38:cc:8a:1b:7a:8b:57:57:a4:23:91:a2:8a:
         23:ca:96:1c:dc:bf:8a:eb:ef:09:15:24:db:cb:4d:69:ff:a3:
         25:5c:6d:59:4a:8f:05:c5:1f:a6:87:f1:f1:35:10:36:98:30:
         f3:a2:e8:27:2b:a8:54:8f:9e:a3:6b:7d:7e:78:b9:94:fe:79:
         23:2b:84:ed:78:bf:82:af:28:e2:31:e6:dd:a5:c8:6e:32:0c:
         eb:fc:15:ff:e5:da:54:b9:38:5a:2d:b3:2a:73:c8:72:85:8d:
         2a:bc:84:0d:57:48:67:0f:d6:80:c2:63:a9:23:27:9d:c2:c6:
         95:ef:41:ce:cd:37:bb:32:56:aa:a5:ce:a7:0a:0d:29:78:1a:
         c8:20:e8:bb:2d:bc:99:c0:92:52:5a:33:fa:96:a5:a4:43:29:
         66:5e:cb:91:30:cd:9a:c4:db:3e:51:68:de:ae:a6:72:78:7e:
         b6:e0:18:26:a0:5b:13:2d:ab:03:64:4e:2c:50:e0:f1:7f:67:
         af:c8:d1:62:2d:6b:73:a4:c5:27:21:45:8a:40:10:d7:51:d1:
         fa:0d:0c:e9:08:f3:96:59:13:6a:a3:be:f9:cf:8e:24:65:1e:
         29:5c:82:8c:42:c0:f6:18:f3:b7:36:e3:5a:08:9e:60:5e:c6:
         cd:7c:06:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----