Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/323830343a326264633a3230613a3a2f34382d3438203d3e20323635313831.roa
File:                     323830343a326264633a3230613a3a2f34382d3438203d3e20323635313831.roa (raw, json)
Hash identifier:          9xCOLsQHKigzhNw/lsdpVr4VDt4nhxaYsta1PjaMG4k=
Subject key identifier:   EB:BA:83:8D:8D:9F:7A:C4:0F:86:1E:3A:19:D2:83:1E:B0:14:58:E0
Certificate issuer:       /CN=D62223BCA44D4E6ABCF86B0FAA1734C037B11445
Certificate serial:       332022F7D71B3CC300BAAA57304095F4886FC958
Authority key identifier: D6:22:23:BC:A4:4D:4E:6A:BC:F8:6B:0F:AA:17:34:C0:37:B1:14:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/323830343a326264633a3230613a3a2f34382d3438203d3e20323635313831.roa
Signing time:             Fri 02 Feb 2024 00:15:32 +0000
ROA not before:           Fri 02 Feb 2024 00:10:32 +0000
ROA not after:            Fri 31 Jan 2025 00:15:32 +0000
asID:                     265181
IP address blocks:        2804:2bdc:20a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:20:22:f7:d7:1b:3c:c3:00:ba:aa:57:30:40:95:f4:88:6f:c9:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D62223BCA44D4E6ABCF86B0FAA1734C037B11445
        Validity
            Not Before: Feb  2 00:10:32 2024 GMT
            Not After : Jan 31 00:15:32 2025 GMT
        Subject: CN=EBBA838D8D9F7AC40F861E3A19D2831EB01458E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:91:d8:3d:1f:a6:95:b3:6d:2f:49:b7:44:b4:
                    e9:23:da:fb:4f:ea:e5:33:3f:15:eb:a6:7a:a8:ef:
                    93:7d:c6:47:57:c5:23:f0:ee:b1:21:d5:fd:68:c6:
                    08:3b:e3:c7:e9:4e:ed:45:68:40:ad:0b:ab:91:05:
                    4a:7a:61:b5:2c:8c:8c:bf:5d:a9:d9:79:f0:f8:e6:
                    9c:d9:ea:e9:97:70:bb:81:91:0b:8f:e6:bb:47:4c:
                    9a:10:28:60:82:45:27:a8:d3:4a:1c:ca:3e:c6:11:
                    5e:42:0d:c5:31:a0:b5:7b:9f:4e:93:23:cc:56:2c:
                    d1:9b:6f:f5:f6:1b:c9:35:d0:32:e3:13:21:68:71:
                    c1:ea:1e:a9:52:54:e9:7b:71:45:dd:29:b2:bf:b8:
                    41:73:bf:5a:52:b9:ee:c1:09:1c:b8:b9:5b:94:29:
                    74:8c:9f:94:a9:e5:14:ac:ec:10:11:ac:1d:cf:d8:
                    f8:a2:bd:30:fe:89:54:bb:fa:1b:9c:89:a2:bb:67:
                    85:4f:ff:6f:21:1f:69:35:9b:5f:a0:e1:56:89:ee:
                    82:82:65:8a:23:e4:1e:10:d5:09:40:e7:c5:c1:83:
                    b6:df:ca:50:e9:78:19:7d:6d:e5:66:60:79:94:81:
                    f2:16:63:a0:b9:4b:47:57:63:1f:6c:d1:6a:28:e9:
                    fd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:BA:83:8D:8D:9F:7A:C4:0F:86:1E:3A:19:D2:83:1E:B0:14:58:E0
            X509v3 Authority Key Identifier:
                keyid:D6:22:23:BC:A4:4D:4E:6A:BC:F8:6B:0F:AA:17:34:C0:37:B1:14:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/323830343a326264633a3230613a3a2f34382d3438203d3e20323635313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bdc:20a::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:a9:19:be:3a:c4:d3:94:ee:4e:66:8c:80:e7:60:7b:49:a5:
         04:ba:0a:61:b4:a9:0d:ef:59:9e:71:42:ec:fb:f1:90:ea:1e:
         eb:ad:75:89:80:d3:30:88:ff:e9:24:36:70:83:dc:17:2f:45:
         5e:a4:eb:51:16:9c:8a:c0:e4:5e:8f:37:88:a4:15:2e:6f:10:
         19:48:b9:9d:bd:66:ab:cf:96:81:84:97:70:19:63:d3:32:46:
         b1:b2:02:df:ca:62:be:7c:0f:ec:21:0c:d3:bf:40:01:33:a9:
         f4:06:3f:82:96:d7:f2:95:cf:64:2c:ea:c9:68:1b:0e:c7:16:
         05:c1:5c:c8:78:86:b5:79:00:2c:4c:7c:48:08:c3:dc:58:77:
         0f:5e:e9:4d:76:dc:8c:1c:65:08:e2:01:d5:79:d8:9e:d6:6e:
         ba:8f:b4:8a:6c:a1:e7:3d:21:95:4d:b9:66:51:ea:bc:af:57:
         db:06:b5:b8:a3:d4:40:a9:77:18:1c:d3:76:93:f2:bd:5c:34:
         7a:0e:3f:7e:29:80:99:a5:19:de:f0:59:32:01:be:1a:25:67:
         51:40:f4:71:bd:2d:08:4b:6a:cb:26:4b:07:56:8c:a7:29:c4:
         a4:55:dc:0a:63:ac:91:99:bd:88:99:af:72:00:e2:17:b2:55:
         21:2a:3c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----