Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/1/323830343a323233303a3a2f33322d3332203d3e20323634353930.roa
File:                     323830343a323233303a3a2f33322d3332203d3e20323634353930.roa (raw, json)
Hash identifier:          vFksZzyg8Mbb1fvMMg6CF76gY9E/5QrGM7J0FcqT/pI=
Subject key identifier:   42:01:CC:CE:2A:7A:32:CE:0B:E3:0A:BF:CB:18:04:2E:94:B3:F4:5A
Certificate issuer:       /CN=747CE51E1AF00483248E82C95FBDBE9BB9A875D9
Certificate serial:       450E0891D610AB26466295CED3F8A159E80EF7EE
Authority key identifier: 74:7C:E5:1E:1A:F0:04:83:24:8E:82:C9:5F:BD:BE:9B:B9:A8:75:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/747CE51E1AF00483248E82C95FBDBE9BB9A875D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/1/323830343a323233303a3a2f33322d3332203d3e20323634353930.roa
Signing time:             Wed 03 Apr 2024 18:31:11 +0000
ROA not before:           Wed 03 Apr 2024 18:26:11 +0000
ROA not after:            Wed 02 Apr 2025 18:31:11 +0000
asID:                     264590
IP address blocks:        2804:2230::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:0e:08:91:d6:10:ab:26:46:62:95:ce:d3:f8:a1:59:e8:0e:f7:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=747CE51E1AF00483248E82C95FBDBE9BB9A875D9
        Validity
            Not Before: Apr  3 18:26:11 2024 GMT
            Not After : Apr  2 18:31:11 2025 GMT
        Subject: CN=4201CCCE2A7A32CE0BE30ABFCB18042E94B3F45A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5a:e2:78:5f:e4:4e:b1:c3:41:b1:c4:b7:93:
                    8f:db:cc:cf:3f:f6:a8:4c:01:aa:82:89:ae:4b:6b:
                    29:13:12:d8:b7:6a:5a:93:6b:ef:61:9e:9b:17:75:
                    4d:5a:25:79:19:96:ed:71:82:f9:1c:4a:bc:bd:69:
                    a0:87:e6:73:29:ca:08:d1:58:8b:c4:b1:e1:56:95:
                    35:03:d2:41:6b:2c:c8:e6:08:c4:36:5f:f2:1d:cd:
                    de:09:41:d0:0a:20:fa:80:5e:14:4d:cc:13:c9:ca:
                    70:3e:a3:df:9f:ee:84:09:b7:54:cc:67:b5:a1:40:
                    b6:e8:87:c3:20:0a:45:2a:e0:6b:cd:39:2a:3f:6f:
                    bc:7c:55:44:80:98:e2:fd:5e:bc:5c:c7:ca:80:12:
                    a7:4c:b6:8c:d4:52:bc:42:da:e8:2a:a7:7b:ce:e9:
                    94:a8:70:68:0c:79:44:c1:4c:c1:15:11:6a:c7:f3:
                    bb:10:a2:2d:1a:7b:7a:0c:8a:ef:00:82:82:d2:60:
                    ee:7d:a2:a5:af:f1:35:8a:0e:4e:82:be:15:f4:e3:
                    61:0f:d1:98:a2:af:29:3f:eb:ce:55:03:73:46:be:
                    ef:c2:80:38:57:44:66:33:8c:8d:04:9e:98:30:34:
                    a0:29:2e:f9:d6:84:40:b9:97:71:1c:17:a8:34:c7:
                    69:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:01:CC:CE:2A:7A:32:CE:0B:E3:0A:BF:CB:18:04:2E:94:B3:F4:5A
            X509v3 Authority Key Identifier:
                keyid:74:7C:E5:1E:1A:F0:04:83:24:8E:82:C9:5F:BD:BE:9B:B9:A8:75:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/1/747CE51E1AF00483248E82C95FBDBE9BB9A875D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/747CE51E1AF00483248E82C95FBDBE9BB9A875D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/1/323830343a323233303a3a2f33322d3332203d3e20323634353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2230::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:d1:73:3f:d2:75:38:33:d1:01:a0:ad:d9:22:59:a5:01:f7:
         b3:bd:be:a9:91:60:66:ee:cd:36:0a:4a:b0:53:9a:0f:99:ec:
         48:d8:0c:f2:9e:1f:b4:72:9a:97:ea:35:86:8b:c6:f1:55:c8:
         89:81:be:1a:ea:67:30:61:58:3a:b6:92:50:a6:73:2e:0d:4a:
         1d:f8:5f:f0:e3:91:d8:ab:6c:38:46:f8:2b:bc:ad:35:13:d8:
         23:0a:74:83:ce:5e:23:be:75:20:88:d7:5c:5c:ec:3f:e5:6d:
         86:82:52:37:02:36:c6:16:88:58:20:13:d8:02:b2:a4:8d:f7:
         74:1a:1e:a8:f5:c4:2b:77:ae:8e:fa:4f:b7:00:c1:e1:f6:31:
         f8:91:c8:3d:70:76:16:43:3a:0e:70:89:7c:e5:d7:10:95:3a:
         2c:67:59:03:bb:99:85:b0:72:60:b6:32:db:f6:a3:db:3a:2c:
         c4:d0:13:72:d9:14:13:b0:c2:9c:1b:83:df:1f:00:81:a0:13:
         3a:bc:e8:ad:f5:93:c5:df:e3:77:29:28:e0:6f:0f:02:49:a0:
         8d:79:a4:84:7c:c1:10:9c:73:47:01:66:fe:56:91:ef:fc:f3:
         68:55:a5:ba:86:2d:a2:11:4f:0e:1e:f0:13:c7:33:04:7c:a1:
         29:43:fb:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----