Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/323830343a326264633a3a2f33322d3332203d3e20323635313831.roa
File:                     323830343a326264633a3a2f33322d3332203d3e20323635313831.roa (raw, json)
Hash identifier:          uaP5ATzLujQ26ha7HPVnLaeXR124DUYmWjmdtzBoEYk=
Subject key identifier:   CF:99:E6:13:50:39:D7:F9:20:B2:BF:C1:75:2E:E0:79:FD:F7:6B:EC
Certificate issuer:       /CN=D62223BCA44D4E6ABCF86B0FAA1734C037B11445
Certificate serial:       4A5BE14B31E0B0ADCADC47D6E0A81CF4D019CFF2
Authority key identifier: D6:22:23:BC:A4:4D:4E:6A:BC:F8:6B:0F:AA:17:34:C0:37:B1:14:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/323830343a326264633a3a2f33322d3332203d3e20323635313831.roa
Signing time:             Fri 02 Feb 2024 00:15:19 +0000
ROA not before:           Fri 02 Feb 2024 00:10:19 +0000
ROA not after:            Fri 31 Jan 2025 00:15:19 +0000
asID:                     265181
IP address blocks:        2804:2bdc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:5b:e1:4b:31:e0:b0:ad:ca:dc:47:d6:e0:a8:1c:f4:d0:19:cf:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D62223BCA44D4E6ABCF86B0FAA1734C037B11445
        Validity
            Not Before: Feb  2 00:10:19 2024 GMT
            Not After : Jan 31 00:15:19 2025 GMT
        Subject: CN=CF99E6135039D7F920B2BFC1752EE079FDF76BEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0c:18:fc:0a:b5:05:5f:9c:52:96:0b:cb:5e:
                    4c:51:13:17:72:c9:4e:f8:1e:71:3d:8b:82:76:90:
                    4e:6d:ce:1f:24:c9:70:e4:4a:81:e3:06:62:a4:9c:
                    fd:f9:26:6f:9e:f6:21:15:eb:6d:d0:18:59:f2:0e:
                    c2:9a:de:2a:ff:12:98:47:67:36:e2:fb:06:c5:ec:
                    ef:28:fb:11:10:0e:08:19:c7:bc:4e:ca:c7:a4:44:
                    80:89:ee:a3:15:22:cf:42:71:25:f1:2e:c6:71:cf:
                    73:7c:01:32:03:bb:21:f9:f3:c7:d6:0f:ee:d0:69:
                    cc:98:bf:6b:cd:f2:1b:14:1c:a6:82:1d:e1:68:a7:
                    e1:07:89:b6:d1:b3:b3:2c:4f:86:91:b8:c7:22:bf:
                    e6:81:ef:59:d3:ed:11:ca:35:cd:c6:cc:7f:a4:d5:
                    ef:75:ed:22:12:09:a4:f2:a2:e1:e9:47:fe:e0:5b:
                    fe:67:6a:57:03:4c:79:63:72:47:50:68:87:4a:19:
                    23:a7:8c:6f:6f:24:f0:4f:67:c8:ce:e6:5d:11:23:
                    43:36:18:2e:b4:66:31:5a:49:9e:b9:b6:00:56:95:
                    82:48:18:0e:7d:ea:9f:b9:00:bf:65:4f:88:a3:98:
                    38:e9:1c:87:3c:30:c7:69:b2:42:33:23:04:50:53:
                    49:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:99:E6:13:50:39:D7:F9:20:B2:BF:C1:75:2E:E0:79:FD:F7:6B:EC
            X509v3 Authority Key Identifier:
                keyid:D6:22:23:BC:A4:4D:4E:6A:BC:F8:6B:0F:AA:17:34:C0:37:B1:14:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/323830343a326264633a3a2f33322d3332203d3e20323635313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bdc::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:d7:6e:0e:3e:cc:01:23:12:00:20:54:ae:38:d2:d2:a9:c6:
         f4:e5:07:63:df:dc:09:ed:23:79:e5:83:c4:60:ff:e6:43:61:
         a0:69:76:cd:89:a2:32:b5:f3:ec:b6:fe:ae:13:f4:ef:be:bb:
         50:c4:47:51:df:73:fe:33:9b:95:5d:e1:98:97:6f:5e:21:23:
         7c:31:e7:04:06:47:9e:46:a5:5f:53:bc:36:b5:af:17:02:41:
         54:4c:64:00:97:f8:b9:d8:8f:4a:77:9e:44:a1:32:63:cd:e5:
         4b:39:b9:6e:52:62:09:30:a7:77:33:6a:12:cc:d1:8a:19:87:
         b8:92:b9:79:c2:7f:f9:1e:d8:58:9e:c0:16:b9:f6:7b:a4:32:
         06:26:cc:86:e1:36:d2:67:5d:fb:1a:33:ce:7c:a1:b2:54:c8:
         2c:82:dc:cd:3e:09:83:97:f1:ba:5f:31:f4:26:b0:0e:a1:73:
         db:6a:c8:9a:5c:88:b6:4e:38:73:51:c5:ef:79:3f:1e:47:cc:
         c4:e5:40:d4:89:5c:a1:1c:44:b9:97:be:6b:00:cf:e6:14:86:
         63:32:73:6c:16:45:88:24:d8:f4:c6:79:e6:84:5a:ce:e6:02:
         22:c9:89:60:13:e5:c9:a8:2e:c2:55:42:34:8c:5d:08:84:d1:
         4d:a9:ca:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----