Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/323830343a326264633a6330303a3a2f34302d3430203d3e20323635313831.roa
File:                     323830343a326264633a6330303a3a2f34302d3430203d3e20323635313831.roa (raw, json)
Hash identifier:          Q1SYE+BGEvMATTzzFiSBZP2AU3eQjq6Uwpkor20jD+U=
Subject key identifier:   3B:BD:53:A5:AD:88:5A:F6:37:B7:D5:5A:58:4C:2F:58:80:E0:1B:D5
Certificate issuer:       /CN=D62223BCA44D4E6ABCF86B0FAA1734C037B11445
Certificate serial:       71666D2359553E200BB9CFAEC0C431F137D02089
Authority key identifier: D6:22:23:BC:A4:4D:4E:6A:BC:F8:6B:0F:AA:17:34:C0:37:B1:14:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/323830343a326264633a6330303a3a2f34302d3430203d3e20323635313831.roa
Signing time:             Fri 02 Feb 2024 00:15:53 +0000
ROA not before:           Fri 02 Feb 2024 00:10:53 +0000
ROA not after:            Fri 31 Jan 2025 00:15:53 +0000
asID:                     265181
IP address blocks:        2804:2bdc:c00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:66:6d:23:59:55:3e:20:0b:b9:cf:ae:c0:c4:31:f1:37:d0:20:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D62223BCA44D4E6ABCF86B0FAA1734C037B11445
        Validity
            Not Before: Feb  2 00:10:53 2024 GMT
            Not After : Jan 31 00:15:53 2025 GMT
        Subject: CN=3BBD53A5AD885AF637B7D55A584C2F5880E01BD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:98:bd:7e:d3:d7:a4:03:93:f5:7b:aa:09:d0:
                    c6:b4:24:4a:af:f2:b5:9c:b1:0d:e3:92:15:a1:45:
                    40:8d:03:c7:79:1c:24:58:98:88:20:ec:c0:45:51:
                    c4:41:06:a5:83:0b:f4:9c:21:6d:30:ac:3c:42:f5:
                    14:e7:f9:a1:ee:b0:88:c2:00:1d:8d:99:b6:b0:1b:
                    3a:11:ec:7b:ed:05:72:38:5f:58:cc:f1:18:ad:d4:
                    20:2c:6f:c8:1c:fe:3d:96:f2:1f:ae:bb:23:1a:f3:
                    50:a2:62:dd:d4:bd:22:29:93:df:36:1f:06:09:69:
                    86:3b:0e:2c:d7:50:5f:df:9c:6e:06:54:c6:47:e5:
                    7d:f9:bd:ad:61:d8:88:0c:3b:27:7a:2f:ed:a8:bd:
                    04:4b:27:c8:cc:07:ba:5f:df:cd:98:ea:13:b0:c4:
                    43:dc:9a:3c:bb:6b:7a:fe:d2:dc:f6:42:7d:50:c6:
                    a9:a1:f8:9d:61:ea:ed:d3:a2:19:13:d4:1c:25:01:
                    9a:18:a1:40:76:87:91:3b:9b:f0:f1:30:95:01:8c:
                    be:fc:c4:0d:ff:d8:8f:8b:f3:db:ff:5b:be:78:9d:
                    c7:de:16:c7:95:58:03:d7:bd:a0:77:be:3c:1c:36:
                    1c:47:84:67:dd:d9:d0:7d:1a:58:3a:0c:c3:5f:8b:
                    a1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:BD:53:A5:AD:88:5A:F6:37:B7:D5:5A:58:4C:2F:58:80:E0:1B:D5
            X509v3 Authority Key Identifier:
                keyid:D6:22:23:BC:A4:4D:4E:6A:BC:F8:6B:0F:AA:17:34:C0:37:B1:14:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/323830343a326264633a6330303a3a2f34302d3430203d3e20323635313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bdc:c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         9e:fe:73:5b:76:26:bd:e5:5c:f0:dc:b4:93:00:df:e6:98:1d:
         a7:2c:0f:a4:dd:2c:c1:55:b1:74:1e:0b:e1:6f:95:55:f4:f8:
         46:03:d1:ed:25:26:9b:6a:ec:2a:7d:d1:ee:89:4d:a2:51:ed:
         e3:da:a2:16:cd:0a:81:d3:2e:19:f6:4b:ca:2f:58:55:6a:f1:
         da:8b:53:00:d1:19:67:64:d4:b8:5b:69:12:f7:bb:8c:b9:8e:
         b0:45:13:76:7f:10:c8:25:81:cc:29:78:73:a6:77:de:16:75:
         7b:1e:a6:41:9b:79:86:53:b9:9e:8e:17:78:d5:88:f2:5f:29:
         a4:c2:48:e4:58:cc:be:e4:be:3c:1d:69:18:30:fc:d8:5c:ac:
         0a:3c:16:80:e3:37:c4:7e:92:b1:fd:33:f9:2e:fe:7b:45:e9:
         fd:a0:8b:8d:e1:f5:76:8f:de:d0:7d:25:c3:80:4a:69:11:46:
         c4:9a:93:84:bc:9b:27:52:1b:f2:ec:2f:4f:4e:2e:47:30:cf:
         dc:2d:74:07:a3:b6:e1:61:04:ec:42:2c:36:9f:a7:17:e1:69:
         18:83:1c:99:7c:fa:c8:47:96:04:7d:4b:d8:03:1d:f9:74:b9:
         97:11:cd:26:4b:64:15:d9:d1:ca:08:fb:4e:dd:44:80:69:44:
         67:50:d6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----