Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/0/323830343a376263343a3a2f33322d3438203d3e20323731343533.roa
File:                     323830343a376263343a3a2f33322d3438203d3e20323731343533.roa (raw, json)
Hash identifier:          q5bBzxwhMb7XSrYsz4dNHoX3QLYIgco79b9eUAwoI1U=
Subject key identifier:   22:02:3C:2B:5F:2E:B5:C5:E9:A9:22:E6:D6:2A:E1:1B:19:E2:A8:04
Certificate issuer:       /CN=82F01FED074CD2FF90B488B5FCD5528CBC2D920C
Certificate serial:       491CF9359296D9423036312AF7B4C4171B445596
Authority key identifier: 82:F0:1F:ED:07:4C:D2:FF:90:B4:88:B5:FC:D5:52:8C:BC:2D:92:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82F01FED074CD2FF90B488B5FCD5528CBC2D920C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/0/323830343a376263343a3a2f33322d3438203d3e20323731343533.roa
Signing time:             Mon 29 Jan 2024 12:42:06 +0000
ROA not before:           Mon 29 Jan 2024 12:37:06 +0000
ROA not after:            Mon 27 Jan 2025 12:42:06 +0000
asID:                     271453
IP address blocks:        2804:7bc4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:1c:f9:35:92:96:d9:42:30:36:31:2a:f7:b4:c4:17:1b:44:55:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82F01FED074CD2FF90B488B5FCD5528CBC2D920C
        Validity
            Not Before: Jan 29 12:37:06 2024 GMT
            Not After : Jan 27 12:42:06 2025 GMT
        Subject: CN=22023C2B5F2EB5C5E9A922E6D62AE11B19E2A804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:9c:70:c0:3e:ee:45:90:5b:a7:51:d6:8c:95:
                    2e:34:e7:ec:b9:0b:53:32:4a:49:09:ef:db:6c:e4:
                    cd:4b:f1:dd:39:aa:8f:db:02:b1:d8:6b:7a:db:dc:
                    de:39:3e:96:c0:43:44:24:37:ee:e5:c6:69:88:bb:
                    fe:aa:c8:11:23:b5:d4:f0:b1:5b:d7:f0:51:89:04:
                    e5:ba:12:a7:e7:18:a9:58:bf:95:c7:28:56:2b:c8:
                    cb:f3:0c:3f:53:52:4f:a9:2c:15:5f:19:09:cc:90:
                    ca:b4:18:89:01:14:8d:7a:df:b3:8c:e5:be:cb:a3:
                    ba:2b:5a:ce:23:ce:75:8c:37:65:a8:6c:2d:1e:f0:
                    19:cf:52:fd:d5:9f:8f:cf:34:85:77:8c:16:02:bc:
                    a0:a6:7c:bf:b6:84:59:6e:41:9d:9e:fa:53:18:9b:
                    a0:9b:b9:9d:9d:54:ba:0c:5c:f8:c3:37:f7:fc:f9:
                    c0:ec:5e:6e:6e:75:e3:50:7e:c2:bc:de:ce:5f:72:
                    3e:bd:41:30:21:8f:59:f3:10:78:70:18:0e:2a:7b:
                    4e:a9:b3:6e:b6:0e:41:e0:23:37:0d:5c:26:79:0e:
                    0a:5c:d3:99:47:fd:b8:7d:e1:fd:e3:8a:1f:d2:b7:
                    03:7c:c1:d1:82:63:c7:52:a4:35:1c:d4:e6:c5:dc:
                    a6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:02:3C:2B:5F:2E:B5:C5:E9:A9:22:E6:D6:2A:E1:1B:19:E2:A8:04
            X509v3 Authority Key Identifier:
                keyid:82:F0:1F:ED:07:4C:D2:FF:90:B4:88:B5:FC:D5:52:8C:BC:2D:92:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/0/82F01FED074CD2FF90B488B5FCD5528CBC2D920C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82F01FED074CD2FF90B488B5FCD5528CBC2D920C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/0/323830343a376263343a3a2f33322d3438203d3e20323731343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7bc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:26:da:50:6d:a5:2d:89:68:a9:55:fa:2c:00:ae:d3:82:2f:
         73:88:ec:3c:bf:72:63:54:47:ae:f8:a8:55:5b:dc:d9:0f:47:
         98:f1:6d:f5:0b:a8:c9:c4:58:6d:74:22:d8:b1:7f:60:0a:8e:
         8c:ae:88:dd:a4:51:0e:d1:1c:b9:a4:48:72:89:e8:f4:57:51:
         5e:3b:4d:db:d3:bd:bc:45:a7:a2:62:96:95:28:9d:18:fd:ef:
         f7:8d:38:06:c9:de:69:9a:ff:90:0a:51:14:d4:8c:29:be:36:
         38:cb:ef:14:f7:7a:a2:5b:b6:ac:bb:4a:39:d6:f1:4a:ee:55:
         55:73:31:e0:07:c0:6c:80:34:ea:89:15:14:02:fb:aa:a2:24:
         f2:92:ea:03:49:d6:67:c1:30:e6:24:3a:30:e9:dd:24:55:87:
         e6:98:39:37:72:20:8c:d4:96:96:2b:da:db:65:fc:8c:02:3e:
         f7:10:77:d8:01:7a:bf:72:9b:cc:ae:bf:ad:f8:e6:8f:74:cb:
         8e:a7:2a:49:38:24:00:07:0d:16:fe:c8:4a:69:32:d4:ee:73:
         50:f3:78:c9:52:fe:a1:22:4a:8e:ed:1a:5b:b9:b9:66:8a:83:
         18:d9:a8:4d:3b:0e:61:b4:9a:ea:3a:e0:57:4e:57:09:65:9b:
         ca:bc:9b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----