Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9oestgdJWNpTepHDb1Ew4SvRkpQYu6AQoKrHsVt9V2LX/1/323830343a346637343a3a2f33322d3438203d3e20323638333238.roa
File:                     323830343a346637343a3a2f33322d3438203d3e20323638333238.roa (raw, json)
Hash identifier:          HK0Q6uQNJMMm/zeI/xltLEnZti/+tG/0lBGi1tiZ/ZY=
Subject key identifier:   55:7C:B8:83:CC:1D:28:39:80:D6:67:0A:BD:EC:DA:64:FE:0B:6B:21
Certificate issuer:       /CN=B20C19BE837487F270BE3762AA874E14A967E6EC
Certificate serial:       0B299787AAB8D49144865C5AF02F8D42A922E74B
Authority key identifier: B2:0C:19:BE:83:74:87:F2:70:BE:37:62:AA:87:4E:14:A9:67:E6:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B20C19BE837487F270BE3762AA874E14A967E6EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9oestgdJWNpTepHDb1Ew4SvRkpQYu6AQoKrHsVt9V2LX/1/323830343a346637343a3a2f33322d3438203d3e20323638333238.roa
Signing time:             Wed 10 Apr 2024 20:24:35 +0000
ROA not before:           Wed 10 Apr 2024 20:19:35 +0000
ROA not after:            Wed 09 Apr 2025 20:24:35 +0000
asID:                     268328
IP address blocks:        2804:4f74::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:29:97:87:aa:b8:d4:91:44:86:5c:5a:f0:2f:8d:42:a9:22:e7:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B20C19BE837487F270BE3762AA874E14A967E6EC
        Validity
            Not Before: Apr 10 20:19:35 2024 GMT
            Not After : Apr  9 20:24:35 2025 GMT
        Subject: CN=557CB883CC1D283980D6670ABDECDA64FE0B6B21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:25:10:0e:0d:86:5f:ab:b3:d6:40:23:9c:33:
                    17:d2:5d:bd:3d:8d:eb:9e:3f:c0:00:fe:87:79:6a:
                    0e:d4:95:a6:96:71:6d:d3:f4:e3:1b:f4:f4:e1:17:
                    9e:f5:29:5b:2b:70:f9:38:4f:1e:92:c1:99:52:3e:
                    86:62:bb:4e:b2:01:46:e5:be:c5:e1:b0:db:99:1b:
                    ee:52:e9:23:28:f4:1f:c7:50:4f:a7:e5:a5:69:71:
                    15:11:52:18:f2:51:1c:9a:c2:91:59:ae:79:7f:08:
                    fc:8a:16:7f:6d:4a:e7:6b:10:43:a0:5c:07:e5:88:
                    58:6b:79:1b:06:40:a1:73:e7:3c:f8:c5:f0:62:c6:
                    bc:b0:f0:6a:bb:3d:67:75:68:5c:e3:0f:6d:84:88:
                    56:5a:aa:88:e4:e7:f1:0c:4d:8f:14:b5:17:9b:ef:
                    91:75:ff:a3:bf:84:a1:da:97:91:1a:75:1e:5a:62:
                    b8:a5:11:50:80:ba:13:fa:46:76:fc:75:46:a7:c9:
                    73:aa:03:73:13:72:92:4b:18:35:5f:ff:ae:9d:8d:
                    bc:48:3e:2e:16:25:91:ea:ff:95:7e:1b:75:13:6f:
                    9b:02:27:3f:7f:16:20:ab:b1:23:fb:ee:d3:d5:ee:
                    92:97:34:87:2e:fc:b8:7a:ae:b2:81:c8:42:6d:fa:
                    d2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:7C:B8:83:CC:1D:28:39:80:D6:67:0A:BD:EC:DA:64:FE:0B:6B:21
            X509v3 Authority Key Identifier:
                keyid:B2:0C:19:BE:83:74:87:F2:70:BE:37:62:AA:87:4E:14:A9:67:E6:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9oestgdJWNpTepHDb1Ew4SvRkpQYu6AQoKrHsVt9V2LX/1/B20C19BE837487F270BE3762AA874E14A967E6EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B20C19BE837487F270BE3762AA874E14A967E6EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oestgdJWNpTepHDb1Ew4SvRkpQYu6AQoKrHsVt9V2LX/1/323830343a346637343a3a2f33322d3438203d3e20323638333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f74::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:0c:59:05:16:1a:84:a6:af:49:47:79:53:a6:08:85:54:07:
         8a:7f:7b:b4:6d:b1:97:8c:2b:33:07:5b:52:64:0d:5e:20:e8:
         e3:c8:99:62:db:4b:1a:69:0c:ff:cd:cc:2c:4b:fb:ab:45:db:
         73:aa:e5:dc:29:3f:18:78:1f:e1:26:bf:ee:30:99:6d:cb:1a:
         bd:5a:22:51:05:07:4f:59:de:3f:45:3a:07:47:d0:c3:ab:1b:
         66:7b:cc:f7:d6:af:80:a5:86:68:d0:9d:39:62:27:72:b8:74:
         84:d4:85:c7:ae:4a:4d:ad:23:bd:84:e1:9f:13:59:45:69:13:
         e5:cb:17:a6:58:e5:f3:0d:8a:e6:6a:f3:5e:cd:7b:50:84:fe:
         fc:3d:4a:11:4f:08:ed:28:73:24:ec:fc:5f:cf:5c:74:ef:ba:
         08:50:cd:3e:08:0d:63:4f:57:9f:19:8f:a2:b6:05:62:b2:56:
         f2:62:1f:e0:57:fb:45:21:fd:1b:9f:d8:07:9a:59:b9:53:5f:
         25:c7:df:b8:d4:c1:d0:e9:fe:57:93:91:d1:32:a2:65:1e:5e:
         2a:d9:e4:ee:ef:06:e9:64:51:77:37:19:2a:cd:ef:6f:24:13:
         04:3d:a4:cb:b4:5f:c8:98:9a:fe:3c:25:a2:a9:38:ae:8d:35:
         9f:23:78:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----