Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/0/323830343a313838343a3a2f33322d313238203d3e203631393337.roa
File:                     323830343a313838343a3a2f33322d313238203d3e203631393337.roa (raw, json)
Hash identifier:          GZdmleT5DuP1ztC1YiC8pVWSobJ1QOlKyNFaJZCsY6E=
Subject key identifier:   A2:36:29:8E:B6:10:F8:09:73:22:1B:CF:9B:8D:4C:32:F9:AF:3D:4E
Certificate issuer:       /CN=AEA761DE82F8C8DD584B9ACB5385D06DFF717C84
Certificate serial:       2A6891F6F631F942C6567E931E3CF4A01C0D4B49
Authority key identifier: AE:A7:61:DE:82:F8:C8:DD:58:4B:9A:CB:53:85:D0:6D:FF:71:7C:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AEA761DE82F8C8DD584B9ACB5385D06DFF717C84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/0/323830343a313838343a3a2f33322d313238203d3e203631393337.roa
Signing time:             Thu 18 Jan 2024 00:20:08 +0000
ROA not before:           Thu 18 Jan 2024 00:15:08 +0000
ROA not after:            Thu 16 Jan 2025 00:20:08 +0000
asID:                     61937
IP address blocks:        2804:1884::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:68:91:f6:f6:31:f9:42:c6:56:7e:93:1e:3c:f4:a0:1c:0d:4b:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEA761DE82F8C8DD584B9ACB5385D06DFF717C84
        Validity
            Not Before: Jan 18 00:15:08 2024 GMT
            Not After : Jan 16 00:20:08 2025 GMT
        Subject: CN=A236298EB610F80973221BCF9B8D4C32F9AF3D4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8d:1b:1a:a4:75:09:30:42:6f:b9:2b:c8:f3:
                    6d:cc:17:b0:a3:66:15:0c:ac:4f:0d:5d:30:3d:e8:
                    84:5c:7c:09:8c:79:fa:be:e3:51:c0:87:bc:d7:0e:
                    c6:d2:4f:b8:13:8d:4a:1d:b9:3e:87:59:7f:0b:19:
                    29:b8:b2:dc:59:2b:a7:88:b8:a3:ee:b1:a5:49:44:
                    43:5b:b6:ce:9e:8e:1b:a0:54:ca:f6:e4:2b:27:8c:
                    fd:dc:64:43:f8:10:1c:a8:aa:4b:8e:f8:96:9e:37:
                    de:6b:eb:42:f4:98:81:47:97:4f:c9:f1:b3:87:d6:
                    4d:22:21:17:4f:45:d7:cd:5c:4b:5a:a9:70:3e:13:
                    b0:ee:ce:a0:ac:d3:5e:6a:1a:de:3d:a3:7e:bf:13:
                    cc:cd:f8:63:6c:59:ea:62:7e:0e:95:38:15:e2:8d:
                    09:c9:1e:50:92:2a:67:b5:ac:73:d4:c6:b7:70:9e:
                    a5:5b:1b:6f:2d:10:0d:10:3a:d5:ef:e7:f0:bc:13:
                    33:96:d0:1a:4e:09:9c:b4:af:f3:89:2c:e5:c8:0c:
                    43:6b:3d:1c:a0:ef:f2:08:8e:ed:33:66:74:b5:6e:
                    06:b5:53:78:bf:dc:60:ea:89:dd:b0:6c:3a:f0:81:
                    19:f4:95:28:13:9f:23:8a:40:93:88:c0:54:e9:9d:
                    9d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:36:29:8E:B6:10:F8:09:73:22:1B:CF:9B:8D:4C:32:F9:AF:3D:4E
            X509v3 Authority Key Identifier:
                keyid:AE:A7:61:DE:82:F8:C8:DD:58:4B:9A:CB:53:85:D0:6D:FF:71:7C:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/0/AEA761DE82F8C8DD584B9ACB5385D06DFF717C84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AEA761DE82F8C8DD584B9ACB5385D06DFF717C84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/0/323830343a313838343a3a2f33322d313238203d3e203631393337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1884::/32

    Signature Algorithm: sha256WithRSAEncryption
         c7:43:a1:c6:7f:1e:59:6c:ae:8b:13:0c:ba:45:08:b3:33:a6:
         7f:d5:22:d2:df:d3:23:0f:15:dc:77:d9:ea:7c:fd:ed:14:98:
         53:e7:7e:aa:76:0d:94:ce:78:8f:1e:c3:80:0e:61:42:35:72:
         97:23:4e:7a:a1:b2:b4:53:81:02:c7:6f:c0:63:98:a2:7c:7f:
         53:cd:8f:26:7a:19:45:2e:7d:02:b2:c6:ff:51:38:0a:fe:af:
         47:87:34:0e:26:5d:ea:8b:04:72:26:e6:c2:34:04:d3:8d:b6:
         bb:4e:a0:38:25:f9:02:c2:6e:1b:7e:71:bd:81:cf:41:c6:ef:
         74:58:c0:f0:99:53:df:d2:4c:4e:d0:07:df:5d:a1:fb:55:15:
         9f:c4:44:3f:58:d6:6c:b0:5d:d8:99:86:a4:2e:49:77:4e:13:
         d6:15:9c:ba:ca:f0:7b:5d:46:5e:51:25:a6:21:c7:4c:b7:7c:
         68:84:05:cf:81:02:3f:b0:73:a1:37:c4:df:df:77:a0:c4:63:
         7d:6d:32:4b:45:e1:e5:dd:bf:26:d8:70:db:54:b6:a3:28:28:
         88:8a:6d:c5:5e:c6:5d:7a:50:a5:8d:97:5c:94:af:4c:92:6c:
         12:17:49:78:08:b0:f3:cd:54:a2:92:25:5e:6d:59:44:69:c4:
         7a:02:6f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----