Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/323830343a3634303a37643a3a2f34382d3438203d3e20323632373133.roa
File:                     323830343a3634303a37643a3a2f34382d3438203d3e20323632373133.roa (raw, json)
Hash identifier:          jFi55Z0WmVZxLS71bhs3oZuHQLm7FF/yceiK832y6eU=
Subject key identifier:   E2:13:A3:33:EA:54:DD:B6:F4:47:E0:15:C3:9A:17:62:FE:6F:35:0E
Certificate issuer:       /CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
Certificate serial:       35FC189B4A5E7ECF141C314C3F51D65DE6B324A4
Authority key identifier: 3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/323830343a3634303a37643a3a2f34382d3438203d3e20323632373133.roa
Signing time:             Wed 03 Apr 2024 18:30:44 +0000
ROA not before:           Wed 03 Apr 2024 18:25:44 +0000
ROA not after:            Wed 02 Apr 2025 18:30:44 +0000
asID:                     262713
IP address blocks:        2804:640:7d::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:fc:18:9b:4a:5e:7e:cf:14:1c:31:4c:3f:51:d6:5d:e6:b3:24:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
        Validity
            Not Before: Apr  3 18:25:44 2024 GMT
            Not After : Apr  2 18:30:44 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a8:56:5a:f3:43:a5:f2:bc:8f:c8:7e:76:ee:
                    ef:9f:c3:7b:99:66:d8:f1:59:10:ec:ba:99:29:ae:
                    c6:27:eb:91:4a:36:f2:ba:36:81:d8:c4:e4:59:73:
                    99:4d:2b:3e:d8:82:7f:fb:44:77:c2:e4:c9:a4:8e:
                    f3:59:d7:f2:d5:79:b1:2b:18:d9:ef:d7:4f:d2:ad:
                    5e:7f:d5:a4:45:1b:a0:20:3c:04:b8:cd:8a:19:af:
                    82:02:8e:64:b4:e7:f0:91:3c:5a:b1:c9:c5:8e:a4:
                    12:f1:f4:3f:3c:4b:a4:d7:51:fd:b5:be:8b:9b:99:
                    98:f9:46:62:06:bb:33:29:a9:b7:10:da:a6:9e:c6:
                    54:1d:96:aa:3a:3a:a9:d8:0d:87:b2:1f:75:ee:ed:
                    3d:87:ba:30:58:6a:2c:92:55:a1:c7:b7:fc:6e:a3:
                    38:38:4d:23:d7:2e:12:46:0f:0c:5c:bf:3a:0d:2e:
                    e0:da:d3:ca:b8:59:8f:a8:c2:9d:ae:82:85:cc:42:
                    5f:87:12:8b:6a:94:e4:b5:b2:8a:9f:74:be:62:92:
                    53:93:7e:72:b8:ac:50:61:c4:e0:41:0d:1c:94:7b:
                    40:c1:99:06:b1:09:71:94:ec:dd:b5:be:2c:92:6f:
                    95:08:db:65:0a:16:cb:c3:70:39:2f:8c:9e:b8:29:
                    ec:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:13:A3:33:EA:54:DD:B6:F4:47:E0:15:C3:9A:17:62:FE:6F:35:0E
            X509v3 Authority Key Identifier:
                keyid:3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/323830343a3634303a37643a3a2f34382d3438203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:640:7d::/48

    Signature Algorithm: sha256WithRSAEncryption
         c5:48:1e:41:78:d9:91:cb:da:7f:86:95:98:e1:38:89:90:f6:
         54:3d:07:8d:06:c0:3d:ca:0d:bd:3b:71:e3:d4:07:aa:5d:ae:
         3f:cd:34:43:78:0c:f6:22:db:c2:70:b0:7a:6b:dd:78:ba:e3:
         bd:37:01:21:c8:3d:76:5c:8e:2a:75:df:d2:6b:3f:03:26:9e:
         29:ce:cc:1d:32:60:00:47:d9:8b:2b:3c:54:7e:9c:0a:9e:5a:
         2d:e0:31:35:49:be:a0:a5:a7:b6:90:ff:d7:59:b3:0e:10:62:
         55:f1:4c:2c:a7:69:7d:2d:b8:81:83:19:63:68:2a:07:16:22:
         d1:ff:30:5e:8a:57:e4:09:b2:36:f1:be:71:18:1b:69:dc:2b:
         c7:27:cd:cf:5d:b8:fc:c4:76:8f:85:db:72:da:b4:08:cb:e6:
         8d:d0:ee:d0:45:b1:5f:9f:e8:2c:e1:b7:a7:8d:b3:cf:76:b7:
         52:4d:b0:23:35:c6:a8:f6:ac:ce:d8:42:d9:a6:fb:6f:3e:30:
         83:e1:33:0d:09:58:39:06:9c:d7:80:2d:81:5b:59:8d:7e:84:
         be:d5:4e:5c:04:77:10:34:4b:39:29:d3:75:1a:c0:bd:3a:80:
         64:53:9e:83:89:cc:3c:d8:3c:ae:72:23:19:33:05:13:fb:e5:
         4e:4d:d6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----