Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/323830343a3634303a3131313a3a2f34382d3438203d3e20323632373133.roa
File:                     323830343a3634303a3131313a3a2f34382d3438203d3e20323632373133.roa (raw, json)
Hash identifier:          IA1KoSYZPk4/yQ6NhKCIS3AuprRkwqey7uBBqjoF81Y=
Subject key identifier:   CF:92:B8:F4:F8:5C:1B:81:D2:8C:3A:AD:74:24:73:E2:09:28:A7:7E
Certificate issuer:       /CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
Certificate serial:       4196682D56E75FFDD0046C40FA105D27323AC325
Authority key identifier: 3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/323830343a3634303a3131313a3a2f34382d3438203d3e20323632373133.roa
Signing time:             Wed 03 Apr 2024 18:30:46 +0000
ROA not before:           Wed 03 Apr 2024 18:25:46 +0000
ROA not after:            Wed 02 Apr 2025 18:30:46 +0000
asID:                     262713
IP address blocks:        2804:640:111::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:96:68:2d:56:e7:5f:fd:d0:04:6c:40:fa:10:5d:27:32:3a:c3:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
        Validity
            Not Before: Apr  3 18:25:46 2024 GMT
            Not After : Apr  2 18:30:46 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:02:77:28:8f:96:b2:f2:28:12:2b:5d:ea:ef:
                    bc:93:83:12:f8:7f:c5:13:7b:56:9d:b6:74:ab:93:
                    90:82:66:43:70:81:95:cc:f1:af:c0:fa:75:2b:58:
                    fc:4b:68:00:7e:88:c3:eb:11:bb:14:64:ac:c6:2f:
                    e3:6a:0c:29:ae:92:e0:ff:01:dc:b8:a0:f1:27:f3:
                    d4:2f:c8:5f:fd:a0:79:50:7b:84:08:b3:e4:6f:dc:
                    33:95:26:56:7e:6c:1c:bc:0b:7f:2a:b6:66:f5:4d:
                    a3:dd:45:5d:72:12:be:fb:4c:4b:73:fb:f3:3a:e5:
                    59:bb:77:ff:41:41:6b:37:82:25:c0:eb:9d:fe:57:
                    23:19:18:71:d9:22:fc:9c:62:00:eb:94:8a:98:8e:
                    a7:9f:52:8b:fd:41:e4:6d:1c:20:a0:69:bc:17:ee:
                    b3:5e:d7:a2:aa:0a:a8:97:58:35:2b:b0:9a:7a:56:
                    a7:55:04:26:74:4b:b8:cf:f3:39:5e:6b:9e:98:92:
                    8b:f5:72:0e:06:f6:cb:00:ce:58:b5:b7:98:0f:bf:
                    8f:9c:3f:44:08:a1:37:36:c6:90:02:25:82:a4:58:
                    23:b6:3d:29:fa:8a:92:aa:71:13:c0:3a:6e:5d:9a:
                    0a:07:7a:15:f0:b6:96:b0:cc:a1:25:15:96:29:f9:
                    9d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:92:B8:F4:F8:5C:1B:81:D2:8C:3A:AD:74:24:73:E2:09:28:A7:7E
            X509v3 Authority Key Identifier:
                keyid:3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/323830343a3634303a3131313a3a2f34382d3438203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:640:111::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:f5:78:eb:49:f5:1c:43:51:39:91:71:da:21:15:d0:16:4a:
         a7:3c:4c:89:e0:64:5f:9a:47:a3:d2:96:e6:c8:ae:d6:d0:05:
         55:99:38:c1:4d:7c:d1:3b:81:de:35:99:ed:f9:a0:a3:69:e5:
         49:1a:cf:4d:74:10:1b:fb:b5:7c:e8:33:df:60:88:20:6a:c5:
         f8:dc:ed:ad:1d:af:74:e2:93:da:4c:fa:dd:cd:ca:32:70:f3:
         d1:22:38:65:20:b3:be:3f:3e:bb:28:7f:04:32:ef:40:01:92:
         08:e7:69:9c:c6:5d:8f:99:8e:8f:76:92:cd:f5:b1:ad:ed:84:
         05:0e:62:1c:a1:b3:ea:2c:02:10:0e:c1:ac:a3:95:79:7d:4f:
         2d:b2:37:e5:99:eb:ae:85:97:7c:82:41:4a:d9:40:96:12:15:
         99:fb:12:10:46:2f:bd:c6:13:05:49:5d:76:68:df:c6:e0:fa:
         d5:40:d5:9f:5f:cb:e4:7b:ca:f3:1a:1e:1c:2e:83:01:9d:b7:
         98:7f:71:b3:a2:8b:14:c4:9a:2b:f1:4a:79:4f:2d:70:68:ed:
         94:6a:9f:d8:4d:56:ca:f5:d9:0e:e5:87:bf:6d:d9:84:5b:0a:
         78:ef:90:57:9a:90:d9:5e:26:bb:63:f8:fa:5a:90:a9:b1:31:
         72:82:6e:4c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----