Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7nMNMKnarBCmgMjMt68AibxNdt1bdpnt46aegyt2ozFF/0/323830343a373730303a3a2f33322d313238203d3e20323731313438.roa
File:                     323830343a373730303a3a2f33322d313238203d3e20323731313438.roa (raw, json)
Hash identifier:          VuG2qaAKDoYFOECfOwMquL5b/V08CwnrBEtEdBHC8S4=
Subject key identifier:   95:FE:F2:37:50:5D:B2:95:FD:87:5B:E1:C6:CE:E3:B6:A9:71:78:07
Certificate issuer:       /CN=DF563158661BF15D74E352702AFF21D97D2FBCCD
Certificate serial:       132109772A820B50A2074AF614D862918D1875FE
Authority key identifier: DF:56:31:58:66:1B:F1:5D:74:E3:52:70:2A:FF:21:D9:7D:2F:BC:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DF563158661BF15D74E352702AFF21D97D2FBCCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7nMNMKnarBCmgMjMt68AibxNdt1bdpnt46aegyt2ozFF/0/323830343a373730303a3a2f33322d313238203d3e20323731313438.roa
Signing time:             Thu 18 Jan 2024 12:45:52 +0000
ROA not before:           Thu 18 Jan 2024 12:40:52 +0000
ROA not after:            Thu 16 Jan 2025 12:45:52 +0000
asID:                     271148
IP address blocks:        2804:7700::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:21:09:77:2a:82:0b:50:a2:07:4a:f6:14:d8:62:91:8d:18:75:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF563158661BF15D74E352702AFF21D97D2FBCCD
        Validity
            Not Before: Jan 18 12:40:52 2024 GMT
            Not After : Jan 16 12:45:52 2025 GMT
        Subject: CN=95FEF237505DB295FD875BE1C6CEE3B6A9717807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:1c:00:43:6b:83:0f:c3:be:a6:0c:a7:0e:20:
                    e1:f0:38:aa:c5:1b:69:81:ce:d8:80:54:b7:74:c4:
                    81:77:dc:9a:d7:15:d4:c7:76:e2:26:3e:74:df:26:
                    9e:25:4e:33:c9:ef:54:e1:16:13:bb:68:46:00:c1:
                    13:88:72:92:6e:61:32:63:c5:d2:bf:67:9d:74:59:
                    fd:33:2c:86:dd:69:7c:c0:e6:46:c5:44:be:b1:ae:
                    ad:e5:44:67:66:cc:58:58:84:7d:1b:13:43:62:5f:
                    0d:3b:49:50:98:f8:5a:2c:c8:30:33:2b:65:28:8f:
                    2d:9f:42:30:a3:2a:1b:6d:f9:ca:31:b9:e6:9a:c5:
                    64:ca:3f:9f:21:75:22:77:d4:24:72:2c:5e:4b:9f:
                    db:1e:db:98:0e:23:b1:e8:bb:48:ff:c5:06:4d:63:
                    64:ed:26:40:dc:d0:21:b8:db:9b:84:e9:21:74:71:
                    a8:93:64:26:c2:b1:61:aa:35:ee:98:2e:16:12:44:
                    5c:b2:ac:93:0b:36:3f:2b:a4:94:12:e2:bb:9c:a8:
                    b5:9c:37:c1:4d:ab:0f:fb:11:6c:0c:fe:a5:54:e2:
                    8a:23:51:e8:44:bb:2c:78:16:42:8a:d6:94:9b:2f:
                    55:67:df:b1:7b:76:27:e5:7a:56:29:15:78:d7:53:
                    e5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:FE:F2:37:50:5D:B2:95:FD:87:5B:E1:C6:CE:E3:B6:A9:71:78:07
            X509v3 Authority Key Identifier:
                keyid:DF:56:31:58:66:1B:F1:5D:74:E3:52:70:2A:FF:21:D9:7D:2F:BC:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7nMNMKnarBCmgMjMt68AibxNdt1bdpnt46aegyt2ozFF/0/DF563158661BF15D74E352702AFF21D97D2FBCCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DF563158661BF15D74E352702AFF21D97D2FBCCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7nMNMKnarBCmgMjMt68AibxNdt1bdpnt46aegyt2ozFF/0/323830343a373730303a3a2f33322d313238203d3e20323731313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7700::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:eb:df:ca:83:d2:10:19:7c:62:f8:f7:77:e3:3a:5a:ee:ae:
         d4:4d:32:67:fa:b7:23:bb:dc:11:8e:28:0c:26:c2:1f:4d:58:
         67:1d:63:25:60:43:3f:56:32:29:69:4a:14:18:e4:b6:ca:53:
         94:c1:be:4d:a2:85:66:26:e6:08:e5:21:cf:7d:f3:c4:e8:3a:
         01:be:76:c6:a6:b8:82:2a:3a:83:f1:ac:34:64:be:87:cd:d1:
         58:1e:8f:8e:40:5d:2d:00:11:47:ef:28:4b:ef:52:0d:32:87:
         1b:64:f2:e3:9e:7e:6c:09:8c:fd:ab:d7:e4:fd:cb:84:83:ea:
         20:58:57:2c:fd:76:6a:e2:df:ed:a8:29:b2:41:3a:7c:a7:f2:
         2a:76:32:17:7c:24:2a:c3:4b:80:64:c3:a8:09:18:55:73:8e:
         09:be:8b:59:73:15:06:9a:31:ba:93:b5:d1:50:e2:07:ca:1a:
         6e:83:f3:5a:9b:32:02:2c:ac:47:7e:ba:53:22:d1:9d:98:3b:
         73:cd:d7:c0:84:d2:c9:2d:52:16:f9:e4:d8:98:bd:cc:89:3d:
         b1:76:ba:9f:fd:9f:60:4a:6c:50:54:f3:66:2e:01:71:9b:14:
         6d:c1:27:78:33:60:1c:b5:d8:d7:e9:8b:ae:d6:11:1a:d7:ae:
         c0:aa:4d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----