Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/323830343a356161343a3a2f33322d3332203d3e20323638373836.roa
File:                     323830343a356161343a3a2f33322d3332203d3e20323638373836.roa (raw, json)
Hash identifier:          zGgvnhtwsWffCV1phH49/YIq7mEWFKj8xUo5MXwMbcw=
Subject key identifier:   19:88:7A:44:73:3D:22:F2:15:9C:9A:F5:D0:B0:9A:92:74:B4:2E:C9
Certificate issuer:       /CN=A68038F934F5E622FA09D5ED3CCBF64D92391162
Certificate serial:       7801DA7434F226BA74FAD5CDD6E77FCB96C61D0E
Authority key identifier: A6:80:38:F9:34:F5:E6:22:FA:09:D5:ED:3C:CB:F6:4D:92:39:11:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A68038F934F5E622FA09D5ED3CCBF64D92391162.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/323830343a356161343a3a2f33322d3332203d3e20323638373836.roa
Signing time:             Thu 04 Apr 2024 10:25:57 +0000
ROA not before:           Thu 04 Apr 2024 10:20:57 +0000
ROA not after:            Thu 03 Apr 2025 10:25:57 +0000
asID:                     268786
IP address blocks:        2804:5aa4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:01:da:74:34:f2:26:ba:74:fa:d5:cd:d6:e7:7f:cb:96:c6:1d:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A68038F934F5E622FA09D5ED3CCBF64D92391162
        Validity
            Not Before: Apr  4 10:20:57 2024 GMT
            Not After : Apr  3 10:25:57 2025 GMT
        Subject: CN=19887A44733D22F2159C9AF5D0B09A9274B42EC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:62:c1:29:7b:19:6f:1e:74:fa:87:a0:b6:54:
                    1c:21:c6:2a:6d:4d:67:28:e7:cc:dc:77:c3:fa:fa:
                    16:c8:94:fe:8a:33:8e:a7:84:e8:57:f4:62:0c:fd:
                    3a:76:87:aa:e4:df:49:d7:91:15:bc:57:8e:2d:cb:
                    19:40:79:72:e0:ac:ac:ee:0c:30:34:a8:8f:13:26:
                    fc:0b:b7:74:9a:d9:0f:71:45:a3:72:0a:29:eb:59:
                    9b:82:a8:24:7e:ac:52:07:06:87:3c:18:13:f6:34:
                    c4:be:b1:d3:6e:bb:bf:56:9a:c2:ca:b7:40:0a:cf:
                    58:5f:0e:e7:98:6f:9d:38:22:23:13:22:e4:3a:50:
                    f9:97:0c:42:3a:73:63:64:e1:56:ec:3a:39:a5:ff:
                    32:f1:1c:de:b3:fd:d0:e3:e5:5c:ba:98:13:a9:d5:
                    06:c8:41:90:9b:c1:8c:48:4e:bb:fd:d5:45:08:fc:
                    8f:24:b6:15:9e:ee:11:40:1c:cd:9b:58:6d:54:50:
                    82:1c:ff:c9:f1:6c:cc:2c:6e:c3:21:4b:ef:6a:27:
                    ed:38:d8:a3:45:0f:41:90:66:5d:08:85:7f:64:34:
                    ac:5d:bc:dd:04:ec:0f:aa:1c:77:46:91:6b:61:0a:
                    ff:46:bd:51:ac:e9:18:b0:bf:85:59:90:70:e8:7e:
                    19:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:88:7A:44:73:3D:22:F2:15:9C:9A:F5:D0:B0:9A:92:74:B4:2E:C9
            X509v3 Authority Key Identifier:
                keyid:A6:80:38:F9:34:F5:E6:22:FA:09:D5:ED:3C:CB:F6:4D:92:39:11:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/A68038F934F5E622FA09D5ED3CCBF64D92391162.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A68038F934F5E622FA09D5ED3CCBF64D92391162.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/323830343a356161343a3a2f33322d3332203d3e20323638373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5aa4::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:41:6a:eb:01:fe:c4:ab:7a:d9:0a:2d:9a:1d:0f:74:55:fb:
         b5:6e:47:8a:e7:ea:88:50:0b:4e:bd:ad:03:51:56:10:12:88:
         c9:34:7e:db:20:f0:4d:a6:dd:34:d9:3e:41:82:e6:b1:f6:01:
         a2:7a:5d:d5:c2:0a:c4:b3:fb:ed:10:1d:10:7f:0d:f4:b6:32:
         65:67:30:8f:b9:ac:89:c3:20:93:fb:43:74:4b:22:e7:98:f7:
         12:e2:6b:a0:49:ce:07:8d:7f:a5:07:ef:36:61:fc:56:d9:e5:
         13:7b:63:24:2a:db:bc:b6:96:3c:3e:aa:31:2c:ef:0f:2c:eb:
         8b:55:e1:ac:bb:ee:09:a7:ee:8e:03:2e:8d:dc:29:f5:3b:f1:
         f1:66:e1:df:5d:3e:b9:c5:7f:3c:d2:ae:2b:e1:8e:59:77:44:
         bf:2e:5a:0a:c1:3d:a0:72:b9:f0:b9:d6:71:c9:6b:8e:80:57:
         a8:33:e1:f4:92:4c:ba:f5:06:47:6d:a4:33:e7:34:80:2d:c6:
         9c:2a:5e:01:96:19:7a:53:4a:52:24:fd:db:a7:a1:f1:e2:b5:
         46:6f:ad:c8:c9:e7:23:7e:51:bd:bf:9f:56:55:ed:4b:ca:b0:
         0f:ec:e3:bb:c3:df:9a:3d:6d:9d:6b:d7:c4:f1:cb:cc:e9:1a:
         0f:3f:f6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----