Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/323830343a343830303a3a2f33322d3332203d3e20323637303931.roa
File:                     323830343a343830303a3a2f33322d3332203d3e20323637303931.roa (raw, json)
Hash identifier:          MnmF2YqH3Z8eCuZFBOCKbCa8cS6+X5mz9UoQ7YSUuCk=
Subject key identifier:   83:10:89:F2:F8:AE:6F:06:E3:0B:F5:2E:7E:EF:CD:5F:56:E6:2E:B1
Certificate issuer:       /CN=D3D4B6B6B7DF2CC7AC285E2A712FF399A3B667D7
Certificate serial:       794A3EFF7839CEA23CFE730E2726EFD92E9B8198
Authority key identifier: D3:D4:B6:B6:B7:DF:2C:C7:AC:28:5E:2A:71:2F:F3:99:A3:B6:67:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D3D4B6B6B7DF2CC7AC285E2A712FF399A3B667D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/323830343a343830303a3a2f33322d3332203d3e20323637303931.roa
Signing time:             Thu 22 Feb 2024 07:04:39 +0000
ROA not before:           Thu 22 Feb 2024 06:59:39 +0000
ROA not after:            Thu 20 Feb 2025 07:04:39 +0000
asID:                     267091
IP address blocks:        2804:4800::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:4a:3e:ff:78:39:ce:a2:3c:fe:73:0e:27:26:ef:d9:2e:9b:81:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3D4B6B6B7DF2CC7AC285E2A712FF399A3B667D7
        Validity
            Not Before: Feb 22 06:59:39 2024 GMT
            Not After : Feb 20 07:04:39 2025 GMT
        Subject: CN=831089F2F8AE6F06E30BF52E7EEFCD5F56E62EB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:dc:a9:59:f7:a4:67:9c:84:ea:c5:4c:d9:07:
                    23:df:d6:38:56:5a:c4:e9:5d:45:f5:8d:96:b6:7b:
                    59:d2:b2:5e:a2:93:ee:81:cf:a2:2a:25:72:4d:60:
                    b4:16:fb:1d:8a:32:2f:e5:ef:5b:0b:50:72:a2:7a:
                    f0:4a:c9:c8:11:83:78:51:1c:f0:52:e4:ce:20:5c:
                    bd:46:81:5f:cb:75:72:8d:38:0b:ac:71:12:5d:e0:
                    74:cf:e6:74:88:67:55:98:3f:79:81:af:3d:28:f2:
                    e5:ec:81:bc:e4:e6:91:7b:b8:12:d5:ca:4c:f3:2c:
                    99:75:8c:27:5e:a6:5f:76:1f:b6:10:67:b4:8a:0f:
                    18:b6:df:66:7a:58:7f:37:96:26:a6:32:39:72:dc:
                    4e:74:09:6a:83:70:ed:00:1c:fe:69:b5:d9:4e:9b:
                    a5:0f:5f:b4:5d:dc:da:92:f0:50:05:b3:08:35:ed:
                    0e:13:df:a9:c1:0f:75:1c:42:b9:2f:e6:68:60:c3:
                    dc:aa:07:83:62:68:19:87:f7:a0:dd:56:dd:95:3f:
                    5a:a1:58:d8:6d:cf:9d:a6:e5:70:27:6b:36:c3:1d:
                    1b:6f:7d:c3:7f:ec:a3:f8:c8:96:e4:e6:5d:b5:36:
                    e3:33:4f:e9:3c:62:58:41:bb:89:fc:ed:f0:bc:f6:
                    2d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:10:89:F2:F8:AE:6F:06:E3:0B:F5:2E:7E:EF:CD:5F:56:E6:2E:B1
            X509v3 Authority Key Identifier:
                keyid:D3:D4:B6:B6:B7:DF:2C:C7:AC:28:5E:2A:71:2F:F3:99:A3:B6:67:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/D3D4B6B6B7DF2CC7AC285E2A712FF399A3B667D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D3D4B6B6B7DF2CC7AC285E2A712FF399A3B667D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/323830343a343830303a3a2f33322d3332203d3e20323637303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4800::/32

    Signature Algorithm: sha256WithRSAEncryption
         c0:ab:9e:de:11:72:6c:cb:05:22:d3:e7:49:0a:04:f8:cd:c5:
         8b:8b:57:74:8e:7a:6c:82:e0:f4:6f:c4:8e:cf:06:81:2d:f0:
         f0:02:36:ad:a9:91:6f:eb:56:f5:86:10:e1:9b:30:75:94:1d:
         ff:d8:05:0a:76:71:6f:b8:bd:9f:06:b3:24:36:e6:f2:78:57:
         99:ce:c5:bb:b1:ca:4e:0b:d8:d7:fe:ba:05:3f:d9:72:52:d4:
         60:34:cc:c2:a7:65:8e:a6:b5:93:26:fb:fc:d5:dd:71:e4:1e:
         8d:1a:ab:c8:ed:5b:a6:e5:fb:65:61:2f:3a:b6:7e:80:e3:2f:
         74:f5:6f:f8:c9:a3:33:c2:2f:e2:87:c2:02:e6:f7:f6:11:c5:
         af:25:eb:87:c8:ff:49:d0:c7:3a:0d:72:e1:40:b9:de:35:4d:
         b8:76:31:18:c3:03:3c:b2:ed:42:46:c4:4d:b3:14:36:18:02:
         b6:c8:ea:a4:63:f3:d9:86:2b:23:53:9f:02:15:cd:8e:48:c5:
         37:2d:f8:8b:18:cd:6d:01:2f:d4:e5:86:01:cf:d6:e5:dc:26:
         79:d1:d3:d6:3c:27:43:44:54:71:46:45:4a:41:46:ff:92:ce:
         cf:bf:d1:2e:d3:d3:63:0a:b3:13:e6:1f:0c:73:8f:8a:f6:68:
         4c:fa:c0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----