Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7aYV74yXq7ry7pDgtX1WycqpPSHEkoK2uWRYY6Gd21Tc/0/323830343a336232633a3a2f33322d3438203d3e20323636313333.roa
File:                     323830343a336232633a3a2f33322d3438203d3e20323636313333.roa (raw, json)
Hash identifier:          j9k9EwR+GKZ/qurfah/0PxePz+l/km3Hghxqi+xf/GM=
Subject key identifier:   4B:81:A8:AF:A1:62:93:DE:17:73:A9:73:01:CF:15:CC:5C:99:E9:80
Certificate issuer:       /CN=569C1F392EB41C3ED38E49FFC29FAD6330A8F403
Certificate serial:       3204AAC7C1CA35F633C8C85E48A666FE3A9BE29D
Authority key identifier: 56:9C:1F:39:2E:B4:1C:3E:D3:8E:49:FF:C2:9F:AD:63:30:A8:F4:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/569C1F392EB41C3ED38E49FFC29FAD6330A8F403.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7aYV74yXq7ry7pDgtX1WycqpPSHEkoK2uWRYY6Gd21Tc/0/323830343a336232633a3a2f33322d3438203d3e20323636313333.roa
Signing time:             Mon 05 Feb 2024 20:44:29 +0000
ROA not before:           Mon 05 Feb 2024 20:39:29 +0000
ROA not after:            Mon 03 Feb 2025 20:44:29 +0000
asID:                     266133
IP address blocks:        2804:3b2c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:04:aa:c7:c1:ca:35:f6:33:c8:c8:5e:48:a6:66:fe:3a:9b:e2:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=569C1F392EB41C3ED38E49FFC29FAD6330A8F403
        Validity
            Not Before: Feb  5 20:39:29 2024 GMT
            Not After : Feb  3 20:44:29 2025 GMT
        Subject: CN=4B81A8AFA16293DE1773A97301CF15CC5C99E980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b8:9c:8e:6b:89:30:24:b4:3a:dc:3a:dd:78:
                    9f:ff:f7:45:3c:08:52:fc:9d:12:99:d4:20:55:72:
                    9b:34:70:ed:69:fb:dc:1f:6f:29:1f:dd:96:72:90:
                    98:d4:35:24:87:c2:0e:f2:b0:74:3f:9c:b6:f4:04:
                    d9:0a:f1:fa:22:ae:dc:19:be:61:19:f1:b5:42:41:
                    0c:66:68:2b:e1:c6:4b:99:ce:f4:57:57:c7:16:34:
                    5c:82:78:9b:23:eb:c0:34:2c:d5:ad:0a:a2:2b:f1:
                    a1:93:9c:44:61:6d:64:ef:a4:99:ea:9e:ad:aa:61:
                    a9:c1:ca:a5:81:18:63:00:ce:49:8a:30:4b:44:52:
                    64:31:f8:db:3a:ff:df:f3:dd:ee:7c:e5:90:1b:78:
                    7d:20:c9:fb:38:66:cd:d7:48:e2:4e:88:a4:67:81:
                    c6:7d:9b:67:43:d0:59:6b:bb:13:45:5a:0d:eb:d6:
                    c1:48:c9:3e:77:90:b9:68:6d:4c:02:6e:f0:94:7b:
                    3f:6a:07:b5:98:65:dd:de:29:19:3c:3d:0a:fa:75:
                    87:83:d9:ec:94:48:d6:fc:80:7b:99:95:e3:3b:46:
                    27:87:e5:af:b9:b6:72:7f:52:6f:e2:13:f8:ec:fd:
                    36:ed:17:79:3e:ac:8f:c9:f5:91:e5:06:f6:13:f5:
                    fb:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:81:A8:AF:A1:62:93:DE:17:73:A9:73:01:CF:15:CC:5C:99:E9:80
            X509v3 Authority Key Identifier:
                keyid:56:9C:1F:39:2E:B4:1C:3E:D3:8E:49:FF:C2:9F:AD:63:30:A8:F4:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7aYV74yXq7ry7pDgtX1WycqpPSHEkoK2uWRYY6Gd21Tc/0/569C1F392EB41C3ED38E49FFC29FAD6330A8F403.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/569C1F392EB41C3ED38E49FFC29FAD6330A8F403.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7aYV74yXq7ry7pDgtX1WycqpPSHEkoK2uWRYY6Gd21Tc/0/323830343a336232633a3a2f33322d3438203d3e20323636313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:da:40:76:2e:7f:d3:c4:88:92:4d:1d:4d:c0:03:d4:78:40:
         29:3c:2c:5d:62:40:0b:b7:ab:ae:83:19:fa:07:6d:2b:49:2b:
         e7:64:a4:e8:29:a6:4c:55:78:37:38:3e:23:da:d6:df:f2:df:
         10:14:f7:90:26:5c:5e:83:91:f7:cd:e8:de:09:02:13:d3:48:
         6e:6b:8e:03:e6:4a:08:ce:b5:c4:6b:16:57:9e:48:cb:87:a3:
         03:13:b7:e1:a2:6f:34:86:92:4a:fe:5a:e5:90:8f:e8:0d:7c:
         e5:4b:af:87:69:32:06:3f:87:d8:c3:f6:e5:98:6f:5c:45:51:
         0f:af:4a:70:8f:2f:fd:e1:59:a6:bc:37:eb:12:e9:b1:15:8e:
         b6:04:b1:c5:60:92:71:74:51:db:bc:3b:98:5a:48:e1:07:61:
         b5:8a:72:db:33:0a:89:ee:8e:08:7f:f3:96:36:06:d0:f4:4e:
         64:6d:c7:25:e6:02:60:fe:bb:d8:2b:eb:48:1e:ce:c7:8b:ea:
         0c:94:fd:21:a3:fa:a5:d0:da:7d:22:91:ec:1d:02:69:1c:18:
         69:86:f9:54:c2:5a:a6:87:4f:f7:c8:0c:7a:65:0d:1d:e4:2a:
         01:7e:83:ea:9b:6f:53:3e:c1:5e:c0:38:e3:d4:5f:41:a7:bb:
         cf:7e:b7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----