Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/1/323830343a343763633a3a2f33322d3332203d3e20323637303737.roa
File:                     323830343a343763633a3a2f33322d3332203d3e20323637303737.roa (raw, json)
Hash identifier:          on6qhCn+WXspjWMA9bqpkq8AzxntQvYGCBqIRDjUU5Y=
Subject key identifier:   EA:14:29:17:A8:FB:1C:A5:A0:CA:E0:FD:54:B6:16:22:8E:CF:CE:8D
Certificate issuer:       /CN=7981327F2B537F29F96DA0422122BBB9E7ACCE50
Certificate serial:       6F5CFB3584084F1F8E33616A9616AEBF8E23EC3A
Authority key identifier: 79:81:32:7F:2B:53:7F:29:F9:6D:A0:42:21:22:BB:B9:E7:AC:CE:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7981327F2B537F29F96DA0422122BBB9E7ACCE50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/1/323830343a343763633a3a2f33322d3332203d3e20323637303737.roa
Signing time:             Wed 03 Apr 2024 23:52:47 +0000
ROA not before:           Wed 03 Apr 2024 23:47:47 +0000
ROA not after:            Wed 02 Apr 2025 23:52:47 +0000
asID:                     267077
IP address blocks:        2804:47cc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:5c:fb:35:84:08:4f:1f:8e:33:61:6a:96:16:ae:bf:8e:23:ec:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7981327F2B537F29F96DA0422122BBB9E7ACCE50
        Validity
            Not Before: Apr  3 23:47:47 2024 GMT
            Not After : Apr  2 23:52:47 2025 GMT
        Subject: CN=EA142917A8FB1CA5A0CAE0FD54B616228ECFCE8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:62:cb:80:7f:37:5a:6c:29:7c:d3:bd:0f:6e:
                    02:83:83:fd:d0:7f:69:8d:10:d5:23:3a:4b:d3:bc:
                    d5:68:34:f0:12:35:b6:1a:d8:2f:25:6f:28:87:3c:
                    3a:cc:14:2d:f1:75:e3:af:1d:ea:3c:1c:78:2b:e2:
                    7b:ca:cc:76:c6:0a:a1:08:95:93:1f:3e:4e:13:95:
                    bc:d3:09:b4:8c:1c:fc:66:f9:ba:53:26:25:e5:e5:
                    3f:bd:0f:0c:8e:5b:25:aa:ff:c3:08:14:d9:e3:15:
                    e4:6c:39:b3:ce:53:35:5b:87:dd:bf:1a:c5:d6:e5:
                    b8:c9:08:70:76:db:dd:1a:a6:39:a8:c6:da:dc:22:
                    19:2c:08:e9:b5:7f:26:d6:34:00:e0:94:fb:1d:f3:
                    02:8d:95:f1:6b:da:6a:b8:c9:c4:55:8d:c2:18:dd:
                    8f:72:ee:54:5f:76:93:f5:7f:9d:9f:fe:08:0c:ed:
                    a4:97:27:b5:87:52:17:5b:49:6f:e6:52:57:af:52:
                    4c:77:9c:06:73:a9:74:04:8d:ed:41:67:03:40:7f:
                    a0:25:a8:bd:82:f2:65:2c:9b:fa:26:97:80:a6:a9:
                    6b:2f:b1:65:19:f0:25:d6:21:9a:52:c9:11:06:ae:
                    c4:12:fb:ec:27:ad:63:c1:ee:fc:48:e3:84:ee:94:
                    c3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:14:29:17:A8:FB:1C:A5:A0:CA:E0:FD:54:B6:16:22:8E:CF:CE:8D
            X509v3 Authority Key Identifier:
                keyid:79:81:32:7F:2B:53:7F:29:F9:6D:A0:42:21:22:BB:B9:E7:AC:CE:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/1/7981327F2B537F29F96DA0422122BBB9E7ACCE50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7981327F2B537F29F96DA0422122BBB9E7ACCE50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/1/323830343a343763633a3a2f33322d3332203d3e20323637303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:ef:67:a0:86:07:96:c6:9a:df:1f:c1:47:43:ef:ff:bd:89:
         60:f5:1d:c4:8d:8b:82:a3:9c:7c:12:73:e6:94:30:d4:0d:d5:
         10:f5:44:e2:d1:35:f9:dd:a5:53:92:d2:b5:dd:07:28:68:61:
         11:69:5f:80:b7:45:59:f1:6c:64:c2:14:92:68:62:03:f4:8d:
         92:a6:8d:b1:59:05:e1:0e:43:ee:bf:2d:bd:9a:ea:3f:86:b0:
         68:97:43:4e:a3:ac:c3:42:a3:da:97:dd:8b:35:aa:8a:7d:dc:
         91:38:73:3b:b6:1a:e5:8e:87:9e:ca:6c:0c:2a:31:1e:39:bd:
         ea:dd:18:bb:01:fb:90:cd:5d:3c:79:ec:c6:c0:79:f7:1c:17:
         8c:c2:3b:09:4f:04:83:45:9c:83:5d:21:bd:3c:a2:09:44:b3:
         c3:08:43:e5:c1:cd:53:89:27:76:7d:78:22:84:9a:41:c8:1e:
         4a:bc:4f:34:d0:27:d5:62:5d:38:b9:ef:31:73:b8:7c:b0:92:
         fc:ee:86:37:d4:af:c5:84:82:3d:8f:30:72:1d:6f:8b:4a:dc:
         e7:54:69:4f:2a:dc:dd:c0:2d:93:d7:15:f2:a7:24:40:8e:05:
         85:89:96:a4:7e:4d:41:11:e6:93:ae:13:5d:17:d2:20:a1:54:
         39:fb:d4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----