Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/323830343a383261633a3a2f33322d3332203d3e20323732353333.roa
File:                     323830343a383261633a3a2f33322d3332203d3e20323732353333.roa (raw, json)
Hash identifier:          f3vsDzPmpydJ1yTCw+MopQQUSR6A0WalqPj5FHLPeB0=
Subject key identifier:   E7:01:97:E4:34:D1:1F:B9:46:E4:31:03:5B:E1:54:85:87:9C:A7:A0
Certificate issuer:       /CN=C133FA3FA6B84483F6615F7504F6EECFD777FA75
Certificate serial:       6B130DA7B8FF1E4138A55CBD54BD559226D01496
Authority key identifier: C1:33:FA:3F:A6:B8:44:83:F6:61:5F:75:04:F6:EE:CF:D7:77:FA:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C133FA3FA6B84483F6615F7504F6EECFD777FA75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/323830343a383261633a3a2f33322d3332203d3e20323732353333.roa
Signing time:             Wed 31 Jan 2024 14:50:44 +0000
ROA not before:           Wed 31 Jan 2024 14:45:44 +0000
ROA not after:            Wed 29 Jan 2025 14:50:44 +0000
asID:                     272533
IP address blocks:        2804:82ac::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:13:0d:a7:b8:ff:1e:41:38:a5:5c:bd:54:bd:55:92:26:d0:14:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C133FA3FA6B84483F6615F7504F6EECFD777FA75
        Validity
            Not Before: Jan 31 14:45:44 2024 GMT
            Not After : Jan 29 14:50:44 2025 GMT
        Subject: CN=E70197E434D11FB946E431035BE15485879CA7A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5d:8a:e5:f9:ee:75:42:2a:05:dd:50:ca:5b:
                    de:2e:f4:52:27:78:29:a4:22:85:d9:6a:86:c0:4c:
                    f7:4b:7a:a2:de:10:94:26:53:96:e2:a7:d4:4b:31:
                    e7:16:71:11:bc:02:78:0c:a5:fa:52:5f:e0:c0:ce:
                    bb:22:67:70:49:c3:4a:70:67:75:20:c9:90:2c:5f:
                    5a:c9:30:05:ef:cb:8a:d8:ce:3b:61:31:62:1e:dc:
                    3a:33:ca:ca:09:2e:8a:7b:cd:22:95:85:4c:12:19:
                    b6:b1:15:d7:c6:8c:e5:2b:40:c6:1e:2e:3a:df:79:
                    81:2f:6b:b7:53:66:9b:cf:fd:71:4d:1e:55:8b:3f:
                    d8:0a:e9:c5:f3:03:b8:b5:38:ee:80:48:80:4a:d1:
                    e5:9f:81:0c:77:06:59:74:c4:69:dc:cf:46:37:f0:
                    5b:1e:b0:39:b9:c5:bf:38:69:67:bb:cc:7d:b3:fa:
                    35:63:22:5b:27:41:e9:11:46:89:22:3e:14:41:c2:
                    56:e5:10:a5:af:45:d1:56:3c:74:1a:82:15:e2:64:
                    1b:1f:04:36:de:93:5c:56:bf:87:ce:5e:40:60:ce:
                    3d:a9:6c:f9:d3:35:12:06:8b:c9:19:d8:c2:4c:7e:
                    24:80:f5:dd:bd:3a:4f:3f:47:eb:c6:e9:45:b2:65:
                    1c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:01:97:E4:34:D1:1F:B9:46:E4:31:03:5B:E1:54:85:87:9C:A7:A0
            X509v3 Authority Key Identifier:
                keyid:C1:33:FA:3F:A6:B8:44:83:F6:61:5F:75:04:F6:EE:CF:D7:77:FA:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/C133FA3FA6B84483F6615F7504F6EECFD777FA75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C133FA3FA6B84483F6615F7504F6EECFD777FA75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/323830343a383261633a3a2f33322d3332203d3e20323732353333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:82ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:3f:90:c4:4d:3d:4c:ad:5b:d3:44:69:ba:5e:41:d9:ae:3b:
         bd:07:7d:cc:d4:40:c5:d9:01:2b:d2:49:1d:c7:08:d0:05:0b:
         40:8c:7e:bd:0f:f6:93:48:92:52:4c:99:a9:71:92:f0:44:73:
         73:b4:00:44:dd:22:2a:5d:62:8f:d1:aa:87:d3:63:e9:0d:71:
         9a:48:61:99:e4:84:73:ca:6b:fe:74:97:49:b5:89:50:a7:54:
         51:e6:53:2f:3e:54:2a:e2:fe:0e:28:b2:f6:23:70:12:c4:2b:
         61:62:17:ca:2a:ea:64:07:1c:43:79:34:cf:c8:76:b0:cf:7a:
         73:67:6c:9e:05:dc:ea:ee:68:8c:da:3e:3e:be:d0:87:15:64:
         7e:39:58:8d:2d:ee:8e:ff:01:c5:e4:5a:bd:a7:72:e9:f4:2c:
         b4:6e:9a:81:9e:43:e1:58:44:d9:79:28:91:e9:cb:1e:4a:c9:
         52:34:df:72:e5:62:af:92:24:52:88:9f:9a:69:4e:cc:ce:82:
         fd:77:9a:62:1f:13:62:54:5d:ab:47:ee:df:c8:17:1b:71:7e:
         39:57:00:37:d9:fb:cf:c6:98:77:20:13:9e:8b:97:7a:fc:4a:
         5b:e7:35:d9:6b:eb:31:f6:d7:af:fc:7a:a0:5c:cb:d8:3a:87:
         92:47:40:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----