Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/323830343a326264633a373a3a2f34382d3438203d3e20323635313831.roa
File:                     323830343a326264633a373a3a2f34382d3438203d3e20323635313831.roa (raw, json)
Hash identifier:          Av0TCa/ShAXuYRoMiUFJuj8vbYEBIgykFTL/iKW4ry0=
Subject key identifier:   9F:11:7A:96:2F:74:F2:8C:73:6A:DD:46:D5:30:1B:3A:F2:7A:74:B2
Certificate issuer:       /CN=D62223BCA44D4E6ABCF86B0FAA1734C037B11445
Certificate serial:       74F9D78B52CC5854245D0232C7A3725A7B7390C0
Authority key identifier: D6:22:23:BC:A4:4D:4E:6A:BC:F8:6B:0F:AA:17:34:C0:37:B1:14:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/323830343a326264633a373a3a2f34382d3438203d3e20323635313831.roa
Signing time:             Fri 02 Feb 2024 00:15:30 +0000
ROA not before:           Fri 02 Feb 2024 00:10:30 +0000
ROA not after:            Fri 31 Jan 2025 00:15:30 +0000
asID:                     265181
IP address blocks:        2804:2bdc:7::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:f9:d7:8b:52:cc:58:54:24:5d:02:32:c7:a3:72:5a:7b:73:90:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D62223BCA44D4E6ABCF86B0FAA1734C037B11445
        Validity
            Not Before: Feb  2 00:10:30 2024 GMT
            Not After : Jan 31 00:15:30 2025 GMT
        Subject: CN=9F117A962F74F28C736ADD46D5301B3AF27A74B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ea:51:15:69:2f:e4:81:dd:4b:ae:43:12:24:
                    69:e5:11:2d:35:10:a0:30:bf:22:37:d8:bb:15:87:
                    85:ba:5a:13:31:53:92:ce:4e:45:3c:9e:b2:d4:41:
                    37:74:13:6e:8b:45:e5:18:55:78:86:c9:00:c3:d3:
                    d8:ef:3f:af:d3:21:7b:c4:4f:d9:7e:1c:ac:5c:3a:
                    56:78:0b:8b:13:6c:3e:f7:07:c2:c6:b2:20:9f:0c:
                    77:31:70:47:ea:6b:09:56:be:d4:5b:73:7f:2d:e2:
                    52:1a:b4:19:90:b8:29:35:90:97:48:60:01:b7:21:
                    5a:16:28:43:ff:2b:d7:a2:dd:28:23:17:00:40:f6:
                    bd:9a:83:38:0f:db:7e:cd:f0:9a:ef:93:de:ee:ea:
                    26:a1:cc:89:9b:f5:4e:3c:28:c5:3f:2b:f7:09:64:
                    af:d3:cd:0b:03:eb:91:1a:2d:d0:5f:4a:82:0c:bc:
                    be:35:87:1f:eb:4d:b2:92:47:fe:41:d4:1b:d8:21:
                    09:97:2e:4c:9e:be:11:87:62:f1:d7:bb:a8:69:8d:
                    c4:ed:c0:90:77:6d:29:3f:44:27:58:35:f0:6e:6f:
                    1d:8b:aa:e6:e5:17:a3:f1:e7:59:45:91:2e:e7:62:
                    25:a9:4c:c4:9a:cd:e5:ba:21:1a:9d:a8:86:52:68:
                    38:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:11:7A:96:2F:74:F2:8C:73:6A:DD:46:D5:30:1B:3A:F2:7A:74:B2
            X509v3 Authority Key Identifier:
                keyid:D6:22:23:BC:A4:4D:4E:6A:BC:F8:6B:0F:AA:17:34:C0:37:B1:14:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/323830343a326264633a373a3a2f34382d3438203d3e20323635313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bdc:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:ff:de:7f:19:9b:54:c5:56:c0:3b:df:e1:4b:f9:7d:b1:c9:
         f4:a7:15:b6:97:76:38:8f:35:f6:09:bc:e4:6e:d0:75:ef:41:
         a5:e4:b6:60:ab:60:81:c2:1a:40:21:2b:57:52:64:7c:f2:a3:
         9f:47:c9:fc:51:c9:46:a9:54:88:24:60:ac:d6:34:49:5c:5a:
         71:d8:cd:10:ae:97:cc:28:ac:b1:c0:92:1f:fc:7c:ef:17:31:
         4b:90:80:7b:5f:3a:d7:4e:7f:4c:be:f4:77:3e:fb:b8:bd:c5:
         33:d1:1d:30:07:81:8f:05:7b:5a:6f:49:2d:6b:c8:fc:49:ec:
         b4:54:be:0d:97:20:f0:b7:ce:c1:41:99:3d:a3:c2:9e:c0:80:
         80:3b:40:93:e5:2c:c3:48:21:77:5b:ee:fe:d5:d6:7b:64:37:
         7c:6e:bd:c4:27:0e:df:82:86:38:79:45:5f:a9:a5:ac:cf:9a:
         7f:83:c3:49:3c:42:c3:bf:74:a1:03:27:6d:2d:29:4e:cc:98:
         86:9d:42:fd:12:05:fb:35:29:31:cb:87:ce:6d:2c:69:16:36:
         96:0e:9a:8d:30:09:f1:54:5e:34:06:a3:48:d9:bc:63:99:ed:
         b9:de:3f:41:67:f2:97:60:f1:c2:9b:5f:0f:7a:2d:b4:e7:10:
         9f:bc:bc:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----