Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/0/323830343a343135383a3a2f33322d3332203d3e20323637343237.roa
File:                     323830343a343135383a3a2f33322d3332203d3e20323637343237.roa (raw, json)
Hash identifier:          keyTs8bm8clolfKBXFliJU1uN2bpBvo/bDlkZxTlt3w=
Subject key identifier:   28:0F:98:FA:39:2F:76:51:8E:9C:05:FE:A8:62:06:E3:AE:A8:2E:C8
Certificate issuer:       /CN=26313AAE2203603E2EF8A7ECFFDAE1AD88879846
Certificate serial:       63F6898F3F938E2FDE58D2102D97DB19036070EA
Authority key identifier: 26:31:3A:AE:22:03:60:3E:2E:F8:A7:EC:FF:DA:E1:AD:88:87:98:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/26313AAE2203603E2EF8A7ECFFDAE1AD88879846.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/0/323830343a343135383a3a2f33322d3332203d3e20323637343237.roa
Signing time:             Tue 27 Feb 2024 19:55:15 +0000
ROA not before:           Tue 27 Feb 2024 19:50:15 +0000
ROA not after:            Tue 25 Feb 2025 19:55:15 +0000
asID:                     267427
IP address blocks:        2804:4158::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:f6:89:8f:3f:93:8e:2f:de:58:d2:10:2d:97:db:19:03:60:70:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26313AAE2203603E2EF8A7ECFFDAE1AD88879846
        Validity
            Not Before: Feb 27 19:50:15 2024 GMT
            Not After : Feb 25 19:55:15 2025 GMT
        Subject: CN=280F98FA392F76518E9C05FEA86206E3AEA82EC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cd:51:59:9e:4e:b7:5d:a6:9a:59:13:88:ff:
                    42:37:93:1f:fb:ed:b2:92:00:1f:ee:90:40:a9:a7:
                    6a:93:d3:a6:d4:3d:67:f1:91:a0:de:ed:6c:76:0a:
                    67:7c:15:08:4a:94:fb:ac:87:eb:fc:c6:d4:ab:37:
                    b1:98:fe:4f:9a:30:ef:a2:7b:10:42:b1:48:1e:90:
                    41:df:f8:5e:2f:62:a1:28:b2:63:b0:5d:be:6d:b5:
                    b0:52:91:0e:66:7b:70:cb:51:c0:48:b8:94:3c:35:
                    c4:8e:aa:d0:c9:b4:7d:94:76:15:78:40:5a:28:56:
                    08:a9:8b:96:c9:c1:88:93:95:1f:ee:01:23:ac:26:
                    25:47:e8:3f:bc:64:01:33:d9:8d:3c:b9:b3:ea:5b:
                    3c:00:04:12:57:7f:35:d4:43:44:39:b3:f4:94:f5:
                    2b:d0:06:76:bc:8a:88:87:21:4b:bd:6d:71:0a:71:
                    fd:a5:07:77:fa:6e:97:f7:b5:51:ca:7f:26:14:15:
                    15:86:7e:dc:00:3f:65:e6:5e:32:13:2a:30:b3:f2:
                    14:67:40:99:95:f1:e5:c2:81:30:56:d5:ec:07:cc:
                    5d:b0:77:cc:0d:d7:7b:e4:55:97:de:ae:93:9d:8f:
                    e1:62:a3:84:f4:7e:de:0c:3c:53:45:87:5f:2e:46:
                    e7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:0F:98:FA:39:2F:76:51:8E:9C:05:FE:A8:62:06:E3:AE:A8:2E:C8
            X509v3 Authority Key Identifier:
                keyid:26:31:3A:AE:22:03:60:3E:2E:F8:A7:EC:FF:DA:E1:AD:88:87:98:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/0/26313AAE2203603E2EF8A7ECFFDAE1AD88879846.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/26313AAE2203603E2EF8A7ECFFDAE1AD88879846.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/0/323830343a343135383a3a2f33322d3332203d3e20323637343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4158::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:aa:57:72:9c:57:bf:c8:bd:56:b1:42:01:f9:38:f7:71:5f:
         bd:1d:a9:95:02:8b:86:32:31:04:d4:08:a1:80:53:34:ac:8b:
         be:c3:e2:fb:d4:de:2b:4f:61:a5:62:73:c8:fb:6c:f5:63:fb:
         35:25:82:c5:2d:14:54:a3:0a:2d:97:e2:06:2f:db:d4:62:15:
         e3:e0:fa:f2:bd:f7:ff:67:a9:1f:81:64:d6:91:2c:c8:a4:df:
         69:55:3b:39:a1:99:94:b1:7d:ed:fe:d2:b0:e4:c9:70:a3:cd:
         8e:1b:cc:b1:dd:ff:b7:07:50:8a:33:a9:98:4c:b2:88:d3:c1:
         57:33:8b:f2:71:41:db:ee:d2:b7:c7:38:f4:7f:0a:4b:16:16:
         f4:eb:ba:01:a6:b2:c3:25:67:57:3d:e8:52:81:e3:45:2e:1d:
         d0:3e:d0:ee:71:a5:75:2c:fc:85:69:84:04:3f:72:a8:a3:e4:
         10:63:59:04:6d:a8:2b:6b:48:ae:a4:61:92:a7:61:83:33:8c:
         c0:03:8d:19:8a:e8:6a:11:14:e0:6c:18:8c:83:15:98:4d:34:
         2c:89:a3:a1:88:a1:5f:09:87:39:7a:1f:7c:61:d9:0f:33:3f:
         d3:5e:8c:30:6d:78:f7:d0:4a:59:3b:cf:c9:33:dc:48:9b:28:
         18:fc:e0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----