Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/0/323830343a333166633a3a2f33322d3438203d3e203533303232.roa
File:                     323830343a333166633a3a2f33322d3438203d3e203533303232.roa (raw, json)
Hash identifier:          lt6K1KbLE6+wxxWwDtWtUevHS6rop8XMuZP7W+a4k9I=
Subject key identifier:   61:9E:76:EC:4B:0B:22:5D:6C:61:4F:17:3B:8D:A6:40:D3:2A:4E:DC
Certificate issuer:       /CN=AA5F634140D8367E44489AD2BAB915D8FD28B8E0
Certificate serial:       1016823668EF5E562C959C4871F4A3C21878D8B0
Authority key identifier: AA:5F:63:41:40:D8:36:7E:44:48:9A:D2:BA:B9:15:D8:FD:28:B8:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA5F634140D8367E44489AD2BAB915D8FD28B8E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/0/323830343a333166633a3a2f33322d3438203d3e203533303232.roa
Signing time:             Tue 19 Mar 2024 14:11:13 +0000
ROA not before:           Tue 19 Mar 2024 14:06:13 +0000
ROA not after:            Tue 18 Mar 2025 14:11:13 +0000
asID:                     53022
IP address blocks:        2804:31fc::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:16:82:36:68:ef:5e:56:2c:95:9c:48:71:f4:a3:c2:18:78:d8:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA5F634140D8367E44489AD2BAB915D8FD28B8E0
        Validity
            Not Before: Mar 19 14:06:13 2024 GMT
            Not After : Mar 18 14:11:13 2025 GMT
        Subject: CN=619E76EC4B0B225D6C614F173B8DA640D32A4EDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4e:cc:87:b5:d6:f2:ce:82:92:60:ad:79:11:
                    bd:0c:a0:49:bc:c5:c7:70:ef:8a:4b:2e:9d:aa:d2:
                    a1:74:94:58:ff:51:07:b8:60:ca:dd:8c:d3:f8:91:
                    39:13:8b:f4:50:27:95:1b:0e:c1:bf:23:a9:3e:41:
                    97:69:67:62:f7:c7:20:8c:69:0e:a0:ee:c5:e4:5e:
                    4b:20:fd:4f:62:36:77:55:71:ae:40:f0:13:bf:71:
                    15:4a:cb:26:e0:41:60:73:38:7b:11:70:6b:79:31:
                    ab:d1:ec:da:4c:92:93:78:28:5a:bc:22:fc:48:8b:
                    4d:06:39:49:8f:4a:02:19:d2:04:bd:01:40:f6:65:
                    67:e7:9d:1a:a6:ad:c1:d4:95:68:95:c0:84:37:75:
                    a1:42:40:f5:4e:a3:39:68:e8:71:b9:31:43:22:5a:
                    12:db:2a:fc:d1:a8:2d:68:50:c8:c0:58:cc:7c:83:
                    51:ee:68:37:e5:9a:96:40:35:d8:3b:bb:28:43:69:
                    78:ea:f5:14:32:db:37:32:bc:28:35:fc:c8:60:79:
                    8c:d8:fd:03:fd:82:10:07:58:35:22:8b:38:89:56:
                    b8:7c:6c:53:17:5c:1a:85:43:2c:4d:64:9b:dc:75:
                    02:ee:da:7f:c5:21:f6:21:94:dd:b0:03:ec:9b:fa:
                    5d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:9E:76:EC:4B:0B:22:5D:6C:61:4F:17:3B:8D:A6:40:D3:2A:4E:DC
            X509v3 Authority Key Identifier:
                keyid:AA:5F:63:41:40:D8:36:7E:44:48:9A:D2:BA:B9:15:D8:FD:28:B8:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/0/AA5F634140D8367E44489AD2BAB915D8FD28B8E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA5F634140D8367E44489AD2BAB915D8FD28B8E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/0/323830343a333166633a3a2f33322d3438203d3e203533303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:31fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         c0:32:b9:06:d2:06:44:18:4e:f1:a5:55:df:e6:d3:17:54:72:
         8b:18:99:db:61:eb:e6:5f:8a:23:9d:cd:c0:a1:ea:63:24:4f:
         a1:a7:cd:75:d9:e9:46:87:c5:35:41:f2:0f:bb:5c:c5:dc:86:
         83:f2:26:33:de:a0:b1:08:0a:3e:42:9e:ea:28:f3:63:b4:64:
         82:66:74:05:c6:62:2a:51:9a:65:22:9d:4f:77:f3:39:48:7b:
         6f:36:3d:0d:52:ce:26:a4:eb:40:c2:1b:34:55:a4:30:49:1e:
         55:70:c3:6e:1a:0a:35:25:25:76:dd:d7:ea:68:ca:81:4d:86:
         1c:98:c9:b9:73:75:8a:a8:fc:9f:be:ab:2f:9b:fd:06:19:0d:
         0d:20:d0:04:48:00:22:80:06:b8:3e:b5:d2:6e:5e:08:d4:f2:
         03:b6:03:5b:e3:ed:04:07:fd:5c:5b:1a:e6:13:db:2c:0c:40:
         50:ed:4e:b5:f7:9a:f0:61:b3:2f:1e:24:a8:f0:4d:fc:59:0d:
         6f:fd:dd:9a:c3:b3:67:a7:c1:a9:f7:ba:15:bf:be:4e:84:a4:
         e0:06:92:16:b6:c3:f2:3d:79:78:a7:24:6e:9c:54:6c:e2:0a:
         cb:75:75:81:9b:63:ae:95:a6:dc:b3:ad:b5:66:b9:2e:83:e8:
         23:d0:2d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----