Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/323830343a3634303a37653a3a2f34382d3438203d3e20323632373133.roa
File:                     323830343a3634303a37653a3a2f34382d3438203d3e20323632373133.roa (raw, json)
Hash identifier:          mDrYjDQzhn20xz0SWVd1D263+4nelPKHP9VBXLgmil4=
Subject key identifier:   A7:2A:A6:66:89:81:72:2C:34:02:D5:35:44:35:6F:30:25:A5:86:8A
Certificate issuer:       /CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
Certificate serial:       1221EAFFA7B1F18B9C91F0C7E00E71382245E025
Authority key identifier: 3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/323830343a3634303a37653a3a2f34382d3438203d3e20323632373133.roa
Signing time:             Wed 03 Apr 2024 18:30:51 +0000
ROA not before:           Wed 03 Apr 2024 18:25:51 +0000
ROA not after:            Wed 02 Apr 2025 18:30:51 +0000
asID:                     262713
IP address blocks:        2804:640:7e::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:21:ea:ff:a7:b1:f1:8b:9c:91:f0:c7:e0:0e:71:38:22:45:e0:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
        Validity
            Not Before: Apr  3 18:25:51 2024 GMT
            Not After : Apr  2 18:30:51 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c4:be:c1:bb:b8:de:a5:f5:82:41:9f:df:81:
                    7b:d5:3a:38:ff:92:8d:30:de:22:f6:31:a6:bf:f9:
                    ba:83:81:27:39:8a:d9:45:81:49:f2:f6:b0:43:03:
                    f9:89:2e:89:f4:0a:45:31:9a:87:15:e2:86:67:b4:
                    2a:92:14:21:2f:f3:87:9b:4c:e0:9f:10:a3:12:c0:
                    1e:04:d6:42:d3:d1:55:2c:9b:c4:c2:98:26:d6:0b:
                    8d:2b:44:d9:f0:80:bf:1a:ec:6f:bb:cb:fb:7d:b2:
                    12:1d:fc:a5:84:f9:78:cd:1c:f1:37:cc:82:39:b5:
                    04:d3:85:af:e8:39:1f:49:07:d3:b4:19:a6:08:46:
                    ff:fc:1c:45:55:7b:03:df:b4:92:0e:36:62:ae:83:
                    a4:3a:da:eb:3c:af:3b:5d:7a:a8:76:7b:76:5c:66:
                    2e:a8:f9:09:b9:99:24:6c:1e:be:f3:f0:bd:9a:db:
                    6c:c5:cd:05:a3:91:ce:ca:2d:33:68:6d:2b:e8:c1:
                    03:8a:00:f3:f1:40:f3:72:ea:5d:24:61:a4:d3:37:
                    e4:ee:a9:1d:2d:74:3a:9f:c6:d6:62:43:f1:1f:bb:
                    9c:ca:75:74:73:e7:6e:8d:ab:9e:5e:b5:50:52:ea:
                    aa:e3:e6:09:6b:f7:c4:6a:86:50:0a:14:bb:5d:cc:
                    e1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:2A:A6:66:89:81:72:2C:34:02:D5:35:44:35:6F:30:25:A5:86:8A
            X509v3 Authority Key Identifier:
                keyid:3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/323830343a3634303a37653a3a2f34382d3438203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:640:7e::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:05:d9:ae:ad:49:f0:15:e5:de:73:0d:f4:5f:9e:81:8f:81:
         23:a8:56:6f:6d:04:65:93:35:da:65:50:c7:8f:58:34:b1:a1:
         76:29:87:66:7b:3d:a1:08:cc:3a:40:59:38:ad:fc:22:37:51:
         5c:55:47:d4:b0:ad:a5:8b:f4:cf:c5:69:6a:3a:81:28:95:c4:
         40:13:c0:af:9c:10:fd:57:69:3f:1f:77:8f:b8:6e:23:08:a2:
         89:f4:9d:4d:7d:2d:77:34:1f:14:df:c4:ab:62:f3:15:19:1e:
         54:33:83:3d:23:65:58:7e:44:29:65:fc:43:8c:05:c0:35:6e:
         2d:4e:6f:73:61:ee:ea:9a:c8:16:c9:60:49:29:eb:34:38:ba:
         b2:40:06:c3:a5:f6:4e:08:ef:1d:d1:85:1a:51:95:78:45:c8:
         f9:0b:fa:02:54:69:3e:00:bd:3f:13:f5:1e:2d:fb:1b:40:8c:
         10:8a:76:c6:f1:65:d5:32:cf:08:21:b8:68:c3:01:c2:25:0f:
         08:ad:f2:7c:fe:5c:b1:ec:84:ad:78:c2:63:26:53:88:a6:70:
         58:9c:d2:0c:61:25:d2:97:f6:92:f4:f8:c2:58:5d:3a:b6:5f:
         8f:ef:06:0a:3e:ce:b4:ed:c2:be:c1:8d:6d:48:c3:ce:f8:cc:
         3f:6e:17:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----