Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/1/323830343a376533343a3a2f33332d3333203d3e20323731363039.roa
File:                     323830343a376533343a3a2f33332d3333203d3e20323731363039.roa (raw, json)
Hash identifier:          RtOIREkUZ3i9ILTWH5OXOxtly+D+M8sXhEQ6OGJI5bo=
Subject key identifier:   A6:BA:4C:31:03:BB:3B:FA:5B:17:6C:A8:B9:EF:77:8D:60:21:2F:24
Certificate issuer:       /CN=F32E3E7CA4FB14208FBAD4D91D24DA679A980F5A
Certificate serial:       0BCF0765F4EFEE5CB433D23D8DD7C3CE56229F33
Authority key identifier: F3:2E:3E:7C:A4:FB:14:20:8F:BA:D4:D9:1D:24:DA:67:9A:98:0F:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F32E3E7CA4FB14208FBAD4D91D24DA679A980F5A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/1/323830343a376533343a3a2f33332d3333203d3e20323731363039.roa
Signing time:             Thu 04 Apr 2024 15:03:29 +0000
ROA not before:           Thu 04 Apr 2024 14:58:29 +0000
ROA not after:            Thu 03 Apr 2025 15:03:29 +0000
asID:                     271609
IP address blocks:        2804:7e34::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:cf:07:65:f4:ef:ee:5c:b4:33:d2:3d:8d:d7:c3:ce:56:22:9f:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F32E3E7CA4FB14208FBAD4D91D24DA679A980F5A
        Validity
            Not Before: Apr  4 14:58:29 2024 GMT
            Not After : Apr  3 15:03:29 2025 GMT
        Subject: CN=A6BA4C3103BB3BFA5B176CA8B9EF778D60212F24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1a:f7:9d:62:80:51:d0:0d:9a:4d:cc:d8:99:
                    14:02:04:59:35:a5:c1:87:3f:68:a2:86:38:6c:0a:
                    e2:87:b6:4d:d8:90:0e:b6:66:a7:1f:e9:fe:7f:61:
                    bd:19:0d:e8:84:e9:bc:30:51:a8:40:c2:c1:f8:63:
                    eb:1a:0c:21:20:45:df:19:9e:bd:a5:3c:02:6e:48:
                    3f:56:ae:25:4e:c3:65:41:7d:be:ce:26:c9:e2:4c:
                    ba:1a:4d:85:e9:ed:2d:b6:45:63:58:3e:7d:c9:a1:
                    f4:fe:66:49:fb:c8:b3:a2:79:bf:99:33:6c:02:b2:
                    9a:25:b0:9e:98:d8:a0:9e:12:b0:e0:d8:fb:84:b5:
                    a1:8a:50:ba:2a:24:50:87:86:51:3c:8e:86:3a:9e:
                    5b:a8:cb:cd:a6:aa:fc:00:11:c2:31:9c:6d:10:69:
                    4b:fb:2a:e2:77:7b:d9:cc:45:ef:4e:f0:23:18:92:
                    24:06:62:8b:93:85:23:a0:6b:5d:23:64:df:2a:ed:
                    8e:0f:6e:b3:72:a0:2f:9e:48:55:03:23:ca:99:d9:
                    0c:7c:e0:93:d3:75:7d:29:84:d5:a8:cc:03:cd:a2:
                    13:51:ff:21:59:ed:ea:f7:74:28:b1:f6:f0:cd:97:
                    0e:fd:ae:d5:fa:2b:91:88:94:b7:98:d4:96:ca:9a:
                    b1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:BA:4C:31:03:BB:3B:FA:5B:17:6C:A8:B9:EF:77:8D:60:21:2F:24
            X509v3 Authority Key Identifier:
                keyid:F3:2E:3E:7C:A4:FB:14:20:8F:BA:D4:D9:1D:24:DA:67:9A:98:0F:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/1/F32E3E7CA4FB14208FBAD4D91D24DA679A980F5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F32E3E7CA4FB14208FBAD4D91D24DA679A980F5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/1/323830343a376533343a3a2f33332d3333203d3e20323731363039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e34::/33

    Signature Algorithm: sha256WithRSAEncryption
         25:19:ed:59:26:b5:0d:10:ab:bd:5a:8b:30:7a:2a:e2:31:34:
         c5:8c:dd:d7:fd:c8:c1:3e:28:07:cc:92:23:ab:b9:25:67:31:
         19:ad:73:5c:b8:c0:7d:6c:61:ea:2e:63:90:00:28:fc:58:6e:
         39:03:80:68:e5:0a:56:69:31:dc:86:0f:ba:c2:df:b0:cc:59:
         f3:bf:76:ee:d2:ef:c6:69:cb:31:29:d4:9e:ac:94:64:c6:e0:
         c7:7d:11:71:97:c1:67:7c:cd:17:dc:20:4d:93:2c:ce:c1:67:
         25:63:d1:17:50:c6:b3:ea:84:bd:f7:46:5c:eb:62:86:1a:74:
         1e:33:a4:a9:24:c4:ab:f0:30:a5:37:72:4a:51:24:38:dd:cc:
         d9:22:59:a5:ab:d4:fa:84:f6:5d:ee:28:ec:a8:25:a1:be:48:
         e3:35:06:97:ac:fc:a6:84:66:38:30:b8:80:19:2c:db:ab:4d:
         0c:05:02:1b:f3:05:c8:be:fb:48:5a:78:e8:b8:02:d9:ee:c0:
         33:6e:e6:a7:f2:57:99:b3:9f:2d:7b:44:6d:99:55:2c:5e:34:
         9c:63:a3:65:c7:9d:85:d6:6e:09:d1:35:ab:3c:0f:46:7e:fa:
         f6:77:35:a5:0a:d4:7d:b9:ce:5a:12:2d:0f:b4:31:b4:a9:ba:
         75:df:7d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----