Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8V8f5jPCdBFtRF66MFjWDK24nqTEzz9fvDXAGdMiNawo/0/323830343a343437383a3a2f33332d313238203d3e20323637363334.roa
File:                     323830343a343437383a3a2f33332d313238203d3e20323637363334.roa (raw, json)
Hash identifier:          NjZAidbPuGbOGNYtBs+ShL/WPjdT5lcbJCiN+q4t5w4=
Subject key identifier:   48:77:43:F4:7C:80:AF:E1:5A:AB:E4:BC:42:65:AD:09:9E:07:3A:E3
Certificate issuer:       /CN=124D23362311C03ECF040F24A0D2C6B7F1BBA165
Certificate serial:       3CA496DA8FA7B0256A9BF2D2745B65ADF112C624
Authority key identifier: 12:4D:23:36:23:11:C0:3E:CF:04:0F:24:A0:D2:C6:B7:F1:BB:A1:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/124D23362311C03ECF040F24A0D2C6B7F1BBA165.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8V8f5jPCdBFtRF66MFjWDK24nqTEzz9fvDXAGdMiNawo/0/323830343a343437383a3a2f33332d313238203d3e20323637363334.roa
Signing time:             Tue 04 Jun 2024 14:07:43 +0000
ROA not before:           Tue 04 Jun 2024 14:02:43 +0000
ROA not after:            Tue 03 Jun 2025 14:07:43 +0000
asID:                     267634
IP address blocks:        2804:4478::/33 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a4:96:da:8f:a7:b0:25:6a:9b:f2:d2:74:5b:65:ad:f1:12:c6:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=124D23362311C03ECF040F24A0D2C6B7F1BBA165
        Validity
            Not Before: Jun  4 14:02:43 2024 GMT
            Not After : Jun  3 14:07:43 2025 GMT
        Subject: CN=487743F47C80AFE15AABE4BC4265AD099E073AE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fe:d1:c9:9b:b3:74:6a:5d:52:9f:4c:5a:f9:
                    47:24:84:c6:43:bc:57:4c:54:a8:a8:37:1a:e0:3e:
                    0a:73:bf:cc:e8:4e:8f:16:4d:7e:22:b9:7c:a8:7c:
                    1b:1e:34:35:f1:5b:46:12:e3:4c:0d:54:4c:78:20:
                    7b:ea:a0:be:80:ce:e9:64:1a:34:ff:53:f1:94:a8:
                    a8:b6:7e:94:87:5e:43:08:4c:97:99:b5:f7:b2:55:
                    11:0d:4c:45:b1:87:86:04:61:30:82:96:61:09:d9:
                    d6:83:63:b7:cb:ee:c3:06:1a:9b:cf:29:1f:38:8c:
                    44:d9:b0:a6:79:dc:ad:0c:1d:dd:66:d6:04:0a:c6:
                    78:4a:64:74:13:18:16:b1:c1:72:31:8a:a6:14:53:
                    69:3f:b0:01:38:8a:14:1f:66:f2:d2:65:d1:1f:83:
                    b8:da:4d:bb:d8:82:d5:9f:2a:33:d2:39:70:5b:89:
                    fd:a4:fb:3b:e6:36:33:ec:0b:0e:42:b3:32:cb:5b:
                    b1:c6:31:1b:66:98:61:7e:78:0d:f4:84:20:74:27:
                    98:87:0b:58:a5:ce:f7:8e:e5:bd:1a:ca:32:ea:c3:
                    47:8d:00:ad:24:9e:74:d8:89:5a:c4:f2:c1:30:4c:
                    b9:37:c3:57:d7:5d:f1:09:53:63:bd:ce:f6:d5:43:
                    ab:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:77:43:F4:7C:80:AF:E1:5A:AB:E4:BC:42:65:AD:09:9E:07:3A:E3
            X509v3 Authority Key Identifier:
                keyid:12:4D:23:36:23:11:C0:3E:CF:04:0F:24:A0:D2:C6:B7:F1:BB:A1:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8V8f5jPCdBFtRF66MFjWDK24nqTEzz9fvDXAGdMiNawo/0/124D23362311C03ECF040F24A0D2C6B7F1BBA165.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/124D23362311C03ECF040F24A0D2C6B7F1BBA165.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8V8f5jPCdBFtRF66MFjWDK24nqTEzz9fvDXAGdMiNawo/0/323830343a343437383a3a2f33332d313238203d3e20323637363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4478::/33

    Signature Algorithm: sha256WithRSAEncryption
         6b:2b:dc:3f:3f:3b:76:fd:a1:8e:43:55:77:a4:90:f5:0a:92:
         42:94:e4:9c:45:ab:92:5a:41:4e:35:9a:8a:8f:bf:d4:e1:e0:
         8f:4e:96:6d:4f:2d:3e:09:ae:cd:0d:1e:a7:26:e2:e5:52:ff:
         9e:db:12:66:56:e4:d0:a7:52:61:91:4a:0d:2f:90:5f:1b:2d:
         1a:3d:9c:51:78:0e:1c:93:0d:a7:73:2e:9e:a5:fc:a1:bd:23:
         34:df:b7:5c:c5:c2:b2:7a:ca:37:06:40:06:8f:85:c6:bb:c1:
         ff:e0:b1:53:0f:51:8a:ea:10:f2:f4:4c:5c:e7:e4:04:10:c2:
         be:3f:21:db:6b:f5:37:37:b8:84:77:3e:e3:b3:35:77:66:61:
         51:32:35:4e:d3:53:36:f9:cd:b2:d2:2e:c3:53:50:95:d2:8d:
         ba:4e:99:4f:bf:ee:2e:32:d0:9e:18:d4:85:ca:46:e0:df:7f:
         0b:b0:2e:f8:ba:c4:aa:9e:99:f1:38:f5:7b:31:6c:36:d9:aa:
         a5:70:b9:3d:c6:ce:a9:fc:1d:fd:cd:54:3b:5a:eb:76:66:e8:
         30:8e:8e:75:65:d5:66:1d:ce:21:d5:ff:ac:fe:3c:59:3b:09:
         b7:33:8b:ce:dc:fb:99:c2:eb:bd:97:7f:b5:e3:ba:ad:a3:d7:
         fe:56:04:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----