Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/323830343a316236383a363a3a2f34382d3438203d3e203631373236.roa
File:                     323830343a316236383a363a3a2f34382d3438203d3e203631373236.roa (raw, json)
Hash identifier:          v1G6sL+jmcmV5xx7uH8EQsAEcUymu6MdtIiCzCZ3eiE=
Subject key identifier:   3A:62:DD:EC:44:93:EB:54:F8:92:3C:FC:2E:43:6B:C1:9C:19:EA:B1
Certificate issuer:       /CN=DD0ADDE73F928E43B84E117E0F7591F247D189BD
Certificate serial:       58581B3E656E57195B065CE4D90AB69DDFF38258
Authority key identifier: DD:0A:DD:E7:3F:92:8E:43:B8:4E:11:7E:0F:75:91:F2:47:D1:89:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD0ADDE73F928E43B84E117E0F7591F247D189BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/323830343a316236383a363a3a2f34382d3438203d3e203631373236.roa
Signing time:             Tue 06 Feb 2024 18:22:43 +0000
ROA not before:           Tue 06 Feb 2024 18:17:43 +0000
ROA not after:            Tue 04 Feb 2025 18:22:43 +0000
asID:                     61726
IP address blocks:        2804:1b68:6::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:58:1b:3e:65:6e:57:19:5b:06:5c:e4:d9:0a:b6:9d:df:f3:82:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD0ADDE73F928E43B84E117E0F7591F247D189BD
        Validity
            Not Before: Feb  6 18:17:43 2024 GMT
            Not After : Feb  4 18:22:43 2025 GMT
        Subject: CN=3A62DDEC4493EB54F8923CFC2E436BC19C19EAB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3a:4c:85:31:68:ab:23:e1:02:74:09:0f:32:
                    87:19:9f:bc:c2:c3:ec:99:43:e0:7b:31:53:8e:11:
                    ea:16:a2:71:95:39:f2:ea:24:6f:79:a3:ba:0a:17:
                    22:db:54:38:00:1c:9c:73:b9:1b:da:dc:05:e3:70:
                    4c:a7:b9:06:cf:00:df:6c:83:e4:50:72:33:90:9e:
                    48:fd:78:e4:73:e4:37:9d:7d:fb:cc:80:9d:54:f5:
                    d5:2b:5d:c6:9c:6d:1c:8a:94:55:e8:60:fc:c1:a7:
                    0b:8d:b9:03:87:cd:e9:43:c0:71:e1:9a:ad:cb:85:
                    45:46:05:4c:12:f7:74:0a:f7:35:53:d1:e3:2a:f1:
                    4b:75:a9:7c:d0:18:75:81:34:d8:1d:44:17:f0:43:
                    33:b5:b7:2b:18:e3:ef:9d:3d:13:00:a6:4d:1b:c3:
                    47:7c:a0:b3:12:cc:a2:28:ae:68:07:11:63:9c:59:
                    93:b4:49:fc:2e:f6:9b:8d:a4:99:38:6c:f7:07:ff:
                    63:36:85:4c:89:e4:d9:00:61:f1:1a:fa:1a:e2:8f:
                    1d:a0:6d:64:02:8e:1e:8e:a6:bf:2b:fc:44:b5:99:
                    cb:b5:b8:62:59:d0:35:58:d6:e7:75:2c:3f:de:62:
                    a9:81:ce:95:1c:35:ed:8a:48:e9:c8:43:c6:48:c2:
                    08:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:62:DD:EC:44:93:EB:54:F8:92:3C:FC:2E:43:6B:C1:9C:19:EA:B1
            X509v3 Authority Key Identifier:
                keyid:DD:0A:DD:E7:3F:92:8E:43:B8:4E:11:7E:0F:75:91:F2:47:D1:89:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/DD0ADDE73F928E43B84E117E0F7591F247D189BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD0ADDE73F928E43B84E117E0F7591F247D189BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/323830343a316236383a363a3a2f34382d3438203d3e203631373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b68:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:69:67:fe:44:0c:cc:55:c0:95:96:70:01:10:14:8e:be:b6:
         34:62:48:85:10:50:e5:a1:a8:41:a8:e5:a9:4d:be:26:0a:78:
         a0:e1:b4:56:29:56:1f:0a:7c:3b:73:c1:9c:03:6a:32:e6:1a:
         e0:7c:0d:87:a2:1e:c6:17:23:a7:9d:1e:bb:b7:0a:6e:22:e0:
         43:6d:c0:9f:d9:6d:e6:59:41:e2:ff:4e:81:43:ea:c2:b6:f6:
         0e:8a:fb:67:ea:1d:fc:26:9b:e8:8e:cd:17:53:dd:86:56:70:
         5d:4b:fb:76:fd:07:1e:df:1c:7f:54:80:c6:0b:02:72:69:a9:
         43:c4:54:0f:be:bf:bc:20:ef:6e:60:8e:d5:94:03:98:db:44:
         75:e8:ae:a8:f8:ad:85:48:78:0b:8b:66:dd:20:d0:46:03:07:
         06:85:ed:44:66:60:60:a6:c0:41:3c:93:88:0d:62:89:c6:d8:
         10:f2:e8:4c:58:b1:bf:e4:29:92:62:21:a5:55:0f:94:b8:83:
         a9:1d:ab:cb:0d:30:f7:35:2b:2e:56:99:10:ba:1f:3f:b5:a8:
         b0:54:67:3e:bb:90:04:b5:50:f4:f1:f9:bb:52:73:ad:01:0f:
         61:ca:cd:5d:be:ac:e2:32:6c:6b:bb:4a:55:0b:56:21:ff:0b:
         4a:a7:13:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----