Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/1/323830343a333465383a3a2f33322d3438203d3e20323635343837.roa
File:                     323830343a333465383a3a2f33322d3438203d3e20323635343837.roa (raw, json)
Hash identifier:          x1MVqcninbCtzqUhGnthRk4NhC4/6M0NeTdoi3B/gJU=
Subject key identifier:   B4:E5:42:AE:65:D2:E7:FA:BB:22:ED:9D:79:96:37:27:7E:7D:19:85
Certificate issuer:       /CN=089532F8915FBA77F2B07B59B91FADAD8FE95EB0
Certificate serial:       063732B7F9FB2F126B9886E20FC53AE31D7D9379
Authority key identifier: 08:95:32:F8:91:5F:BA:77:F2:B0:7B:59:B9:1F:AD:AD:8F:E9:5E:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/089532F8915FBA77F2B07B59B91FADAD8FE95EB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/1/323830343a333465383a3a2f33322d3438203d3e20323635343837.roa
Signing time:             Wed 03 Apr 2024 22:00:36 +0000
ROA not before:           Wed 03 Apr 2024 21:55:36 +0000
ROA not after:            Wed 02 Apr 2025 22:00:36 +0000
asID:                     265487
IP address blocks:        2804:34e8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:37:32:b7:f9:fb:2f:12:6b:98:86:e2:0f:c5:3a:e3:1d:7d:93:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=089532F8915FBA77F2B07B59B91FADAD8FE95EB0
        Validity
            Not Before: Apr  3 21:55:36 2024 GMT
            Not After : Apr  2 22:00:36 2025 GMT
        Subject: CN=B4E542AE65D2E7FABB22ED9D799637277E7D1985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7a:ed:ff:d1:e6:b1:aa:d0:9d:77:15:ab:e2:
                    80:72:5d:61:b1:94:1c:01:47:8f:86:ad:e2:c5:5f:
                    54:4e:18:0b:77:68:80:8e:87:f6:1c:b7:3c:09:c0:
                    b3:83:1c:3a:ca:3f:1d:82:a4:f2:0d:58:cb:4b:23:
                    28:60:49:35:8b:90:02:9b:8d:5d:da:71:dd:3b:f8:
                    b8:30:cf:98:77:7a:5a:e9:28:4a:0b:f4:9b:96:5a:
                    47:e0:c7:47:a2:cd:81:ca:1b:66:f7:b2:23:bf:bd:
                    29:f2:33:b9:2d:63:4d:14:7c:a1:a7:5c:f6:61:05:
                    5d:4f:b4:ca:e5:26:1f:66:ca:b8:67:2b:fb:51:b4:
                    02:de:64:43:15:7e:8d:a8:e5:d5:25:3f:27:93:c5:
                    11:5b:f0:2e:9c:83:00:b3:58:b7:d9:cc:b0:94:52:
                    26:27:cc:bc:91:42:ec:cc:ef:94:48:22:47:47:73:
                    e7:25:39:55:11:60:74:df:58:a5:bd:51:0d:ca:3c:
                    81:26:73:2b:c2:d9:34:d9:2c:08:15:a5:b9:b9:8d:
                    16:4f:31:57:ba:46:af:d9:9f:f3:22:2a:c5:9b:e1:
                    d7:69:c6:aa:62:64:73:74:77:50:16:ae:a7:78:f1:
                    a4:f8:0c:08:58:75:70:4f:0b:f5:32:c2:a3:15:dd:
                    d3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E5:42:AE:65:D2:E7:FA:BB:22:ED:9D:79:96:37:27:7E:7D:19:85
            X509v3 Authority Key Identifier:
                keyid:08:95:32:F8:91:5F:BA:77:F2:B0:7B:59:B9:1F:AD:AD:8F:E9:5E:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/1/089532F8915FBA77F2B07B59B91FADAD8FE95EB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/089532F8915FBA77F2B07B59B91FADAD8FE95EB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/1/323830343a333465383a3a2f33322d3438203d3e20323635343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:9a:6d:a1:31:8a:b3:93:26:f5:46:ba:87:85:72:e2:e0:6e:
         98:f2:6f:51:93:a3:74:14:b7:bb:c5:b9:42:92:ed:6a:a5:4d:
         a1:48:2f:76:75:3e:21:82:d0:18:38:88:56:c2:41:1a:08:87:
         f3:7f:78:0b:a7:07:c7:b0:29:b2:4e:39:54:20:b3:d5:d7:eb:
         3a:35:1f:18:e2:fc:32:ab:8a:7f:16:82:47:ca:a0:25:82:0e:
         f6:49:5a:a8:68:3e:75:e4:cd:62:af:9c:b7:c7:93:dc:d3:37:
         66:27:ef:d4:24:1a:6d:45:af:8a:10:b3:05:e6:63:56:90:7e:
         8c:56:90:36:41:56:99:9c:27:b7:93:fd:02:8f:79:b6:66:6a:
         8e:04:40:0a:05:92:72:03:da:9e:c4:8b:de:05:c6:da:28:da:
         ea:82:b0:7e:e1:c9:ee:55:bc:8e:e7:2d:d2:c6:f1:83:18:7c:
         2b:95:01:a9:d0:39:51:66:62:b5:b3:0c:d6:70:93:a2:b2:be:
         f9:1c:ed:10:81:33:ca:c3:87:2e:39:bf:c1:bc:fd:7f:22:32:
         20:88:75:e0:e5:0e:62:87:21:d7:29:1d:16:e7:bf:83:63:63:
         53:3f:e8:6d:8f:50:f8:46:9f:ce:90:f6:cc:a0:72:c9:b2:87:
         65:73:8c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----