Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8px2w9Vu6W2uDDJotin9CPdL87jSUmNY6tmgx7aCLYak/0/323830343a373761633a3a2f33322d3438203d3e20323731313932.roa
File:                     323830343a373761633a3a2f33322d3438203d3e20323731313932.roa (raw, json)
Hash identifier:          u2bKlgThuYjmE0frzXbFSmHa9+hJCupuXlCkl29SsF8=
Subject key identifier:   59:E8:93:13:2A:95:E2:2D:0F:38:C5:12:DD:AC:5B:69:19:3F:EC:FE
Certificate issuer:       /CN=9E96C92DBC20890AA8793363A4DA0020FABEA2B4
Certificate serial:       784549E20F2641CAC3499EDFD06FAAA17C75E1AA
Authority key identifier: 9E:96:C9:2D:BC:20:89:0A:A8:79:33:63:A4:DA:00:20:FA:BE:A2:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9E96C92DBC20890AA8793363A4DA0020FABEA2B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8px2w9Vu6W2uDDJotin9CPdL87jSUmNY6tmgx7aCLYak/0/323830343a373761633a3a2f33322d3438203d3e20323731313932.roa
Signing time:             Sat 24 Feb 2024 04:05:04 +0000
ROA not before:           Sat 24 Feb 2024 04:00:04 +0000
ROA not after:            Sat 22 Feb 2025 04:05:04 +0000
asID:                     271192
IP address blocks:        2804:77ac::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:45:49:e2:0f:26:41:ca:c3:49:9e:df:d0:6f:aa:a1:7c:75:e1:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E96C92DBC20890AA8793363A4DA0020FABEA2B4
        Validity
            Not Before: Feb 24 04:00:04 2024 GMT
            Not After : Feb 22 04:05:04 2025 GMT
        Subject: CN=59E893132A95E22D0F38C512DDAC5B69193FECFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e8:81:4a:49:c8:00:2e:cf:f3:a3:69:9a:4b:
                    89:4c:7d:ed:64:67:09:01:ef:34:a8:e3:61:03:2b:
                    c8:7c:60:d2:cd:13:36:f9:aa:d9:98:17:dc:81:2e:
                    c4:f5:f9:28:f5:79:c6:a0:47:99:65:ec:17:27:35:
                    25:15:7a:2d:7c:60:e2:c9:29:2e:3d:3b:33:f6:6b:
                    d8:5f:d6:c9:17:d0:54:a5:18:36:23:d0:31:d0:85:
                    ec:6d:3e:0d:18:11:09:7f:e5:fe:39:b1:65:66:bd:
                    22:ae:49:57:cc:5f:5c:32:be:96:d0:19:6a:e1:7a:
                    49:55:e5:10:cf:b0:b8:3b:9f:3e:1d:53:d8:21:3b:
                    fd:1e:a7:65:d9:43:be:52:d0:9f:20:6d:e5:53:34:
                    8e:24:38:06:ae:ae:2a:c2:95:b3:12:93:28:c9:98:
                    31:fc:59:73:b5:8c:e0:04:df:fc:c1:4b:ac:81:f1:
                    43:c6:ec:aa:18:e1:e9:4e:78:d3:87:8e:7d:bd:e9:
                    41:6e:2c:4b:e7:e7:b5:32:80:17:b6:ec:0e:8a:59:
                    fd:54:2a:77:04:5c:32:de:92:52:64:c8:18:d0:3b:
                    08:02:e7:3e:72:b3:31:cb:b2:a7:7a:71:20:46:43:
                    5e:37:59:01:d0:ea:e5:35:20:2c:07:98:93:aa:9d:
                    9c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E8:93:13:2A:95:E2:2D:0F:38:C5:12:DD:AC:5B:69:19:3F:EC:FE
            X509v3 Authority Key Identifier:
                keyid:9E:96:C9:2D:BC:20:89:0A:A8:79:33:63:A4:DA:00:20:FA:BE:A2:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8px2w9Vu6W2uDDJotin9CPdL87jSUmNY6tmgx7aCLYak/0/9E96C92DBC20890AA8793363A4DA0020FABEA2B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9E96C92DBC20890AA8793363A4DA0020FABEA2B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8px2w9Vu6W2uDDJotin9CPdL87jSUmNY6tmgx7aCLYak/0/323830343a373761633a3a2f33322d3438203d3e20323731313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:77ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:4b:42:d2:9c:50:69:b5:5c:0e:d3:f6:20:10:e2:eb:39:26:
         d1:8e:74:f5:8f:44:a9:02:f5:cb:fc:6d:ec:ee:2b:73:23:b1:
         8e:6e:84:e2:e9:b2:60:c1:6e:a8:cd:62:b9:b7:a1:6a:2b:99:
         66:fc:10:15:77:a5:2e:a0:83:ce:81:41:b8:67:11:e1:ef:f1:
         4c:62:63:97:a8:42:7d:0c:e2:6f:b3:6d:02:ba:1c:5e:51:a5:
         23:57:19:74:92:b0:5c:41:38:a2:7d:29:6d:6d:8c:fe:34:f1:
         3b:04:a3:5d:ac:c7:35:33:2a:eb:05:49:2f:4c:e1:c3:df:9f:
         35:b3:e3:11:c5:7d:d8:33:2c:00:0f:41:fd:ae:41:92:cf:32:
         d7:17:46:ea:5d:cf:ad:41:94:04:b1:b0:9f:6b:c9:71:cf:9b:
         b5:85:f9:0c:87:ee:22:17:2b:60:5c:a2:5b:ea:c4:0a:ea:f2:
         4b:ff:f5:00:cd:af:07:b9:14:8a:cb:e0:d8:5d:67:84:c7:98:
         2f:0c:59:93:6b:89:18:78:91:99:04:f1:56:1b:cc:6b:2d:37:
         b8:f5:29:d9:0c:69:a3:c6:78:8d:fe:35:ad:51:fd:c0:42:28:
         47:6b:d2:26:f6:c5:88:54:a9:8a:bb:b4:fc:98:dd:17:c9:e4:
         16:94:d2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----