Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/1/323830343a336338303a663162303a3a2f34382d3438203d3e20323636323136.roa
File:                     323830343a336338303a663162303a3a2f34382d3438203d3e20323636323136.roa (raw, json)
Hash identifier:          eNvlxaei/R4jivbDEPXcE8H/2jQtiEbceUhIJszR+y4=
Subject key identifier:   09:18:C9:36:E8:37:31:4C:A2:8E:A4:EF:69:B3:CA:36:71:F6:74:21
Certificate issuer:       /CN=7FD93E2CB5E85500D902F15CB41F892DC4D6D7F1
Certificate serial:       22B722C7EE87A0AFD241124262A25B2215086927
Authority key identifier: 7F:D9:3E:2C:B5:E8:55:00:D9:02:F1:5C:B4:1F:89:2D:C4:D6:D7:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FD93E2CB5E85500D902F15CB41F892DC4D6D7F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/1/323830343a336338303a663162303a3a2f34382d3438203d3e20323636323136.roa
Signing time:             Wed 03 Apr 2024 18:31:27 +0000
ROA not before:           Wed 03 Apr 2024 18:26:27 +0000
ROA not after:            Wed 02 Apr 2025 18:31:27 +0000
asID:                     266216
IP address blocks:        2804:3c80:f1b0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:b7:22:c7:ee:87:a0:af:d2:41:12:42:62:a2:5b:22:15:08:69:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FD93E2CB5E85500D902F15CB41F892DC4D6D7F1
        Validity
            Not Before: Apr  3 18:26:27 2024 GMT
            Not After : Apr  2 18:31:27 2025 GMT
        Subject: CN=0918C936E837314CA28EA4EF69B3CA3671F67421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5a:c5:98:5e:f0:a4:6e:ab:fd:6d:66:f0:e5:
                    b2:7c:69:36:ae:de:e4:f2:3d:1b:eb:3b:9f:ae:fc:
                    12:ef:fd:db:94:0e:bc:d0:53:01:8d:c1:c3:dc:85:
                    d4:e5:c0:67:a4:b0:2a:68:f9:49:a1:c5:3e:bf:c0:
                    26:52:a4:03:40:70:42:c9:1f:7e:48:e9:48:0c:00:
                    f7:19:8f:da:51:8d:a8:60:7c:16:14:fc:f9:9e:a0:
                    97:13:7a:55:13:c8:49:a8:5b:22:4d:43:2d:fb:b4:
                    bb:6a:0c:0e:88:5d:fc:00:dc:6a:09:ff:df:a7:4c:
                    7b:2b:d6:26:80:92:92:bd:3f:cc:58:83:4f:1b:02:
                    67:76:c4:31:2f:32:91:40:53:89:73:34:70:e9:65:
                    4b:9a:34:69:b7:28:ef:a9:fe:7a:18:e4:f0:00:e7:
                    10:c7:2b:13:64:9b:6e:92:54:2d:79:a8:70:b8:5e:
                    f9:9c:16:1f:e8:36:66:61:32:d6:fc:17:b7:9c:20:
                    1a:bf:92:b3:71:9a:ac:58:ee:71:36:15:d1:63:d0:
                    75:c9:6f:4d:63:d0:14:4f:6e:85:a1:77:72:94:1e:
                    88:2a:f5:10:91:7d:9f:d4:55:6a:02:90:65:c9:13:
                    60:a5:4b:db:38:ed:70:07:c0:e9:fa:2b:0a:43:01:
                    6a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:18:C9:36:E8:37:31:4C:A2:8E:A4:EF:69:B3:CA:36:71:F6:74:21
            X509v3 Authority Key Identifier:
                keyid:7F:D9:3E:2C:B5:E8:55:00:D9:02:F1:5C:B4:1F:89:2D:C4:D6:D7:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/1/7FD93E2CB5E85500D902F15CB41F892DC4D6D7F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FD93E2CB5E85500D902F15CB41F892DC4D6D7F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/1/323830343a336338303a663162303a3a2f34382d3438203d3e20323636323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c80:f1b0::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:18:1b:8c:0f:e9:d8:65:da:da:2e:2d:3f:41:95:46:b9:43:
         05:a5:50:74:31:25:19:9b:e1:b6:49:d1:1a:79:c2:02:80:f3:
         99:39:24:03:58:0b:3e:f4:38:69:9b:6b:96:9d:33:5f:ee:71:
         4f:dd:a8:9e:4a:79:b9:83:53:40:38:1a:f3:af:42:f6:66:a9:
         bd:1f:12:21:3c:4e:8f:be:19:70:84:b3:27:81:04:6b:fd:57:
         39:b0:a6:c1:83:a8:6a:a2:85:e8:fb:be:4f:b7:22:7d:c9:3a:
         a4:97:9c:03:d7:5e:38:37:5b:c4:28:20:bc:75:23:97:f9:7d:
         6b:69:e6:d5:5e:93:7e:a3:36:29:c9:91:77:33:dc:4e:61:7c:
         67:1f:ba:2c:b8:3c:13:2b:1f:da:d1:6b:74:c1:b1:48:d7:00:
         5f:64:60:22:94:8d:6c:0c:54:dc:f6:d6:d6:a1:e6:84:70:a1:
         41:8e:15:f0:b0:a0:04:f5:a3:e3:26:5d:60:c9:bf:c6:79:9d:
         62:19:c1:93:92:85:6e:83:f9:d0:82:71:ec:e6:41:4f:89:51:
         e6:50:66:e1:89:be:de:70:18:4e:f4:7d:23:62:9b:7d:04:96:
         e4:ab:da:f0:ad:19:6b:fc:9f:6b:63:2c:8a:ad:05:f1:3e:65:
         bc:00:42:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----