Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9praPEZ33c2VJUb1heRV84KzUxz6bac9Y2q4AZejJo63/0/323830343a356365303a3a2f33322d313238203d3e20323638393336.roa
File:                     323830343a356365303a3a2f33322d313238203d3e20323638393336.roa (raw, json)
Hash identifier:          uePxJBOT/W0CewALeNlcDS/rC3vtkImVeU0IAOb/RSs=
Subject key identifier:   D4:18:1D:33:72:EB:3B:B4:00:77:41:A3:47:AA:60:EB:A3:D0:4B:5C
Certificate issuer:       /CN=7B000730F699BABE4D6C902494AD2EF272592A92
Certificate serial:       5B932C4EF1AAB12856F0478AB8B13C908D809B37
Authority key identifier: 7B:00:07:30:F6:99:BA:BE:4D:6C:90:24:94:AD:2E:F2:72:59:2A:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7B000730F699BABE4D6C902494AD2EF272592A92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9praPEZ33c2VJUb1heRV84KzUxz6bac9Y2q4AZejJo63/0/323830343a356365303a3a2f33322d313238203d3e20323638393336.roa
Signing time:             Wed 20 Mar 2024 14:09:49 +0000
ROA not before:           Wed 20 Mar 2024 14:04:49 +0000
ROA not after:            Wed 19 Mar 2025 14:09:49 +0000
asID:                     268936
IP address blocks:        2804:5ce0::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:93:2c:4e:f1:aa:b1:28:56:f0:47:8a:b8:b1:3c:90:8d:80:9b:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B000730F699BABE4D6C902494AD2EF272592A92
        Validity
            Not Before: Mar 20 14:04:49 2024 GMT
            Not After : Mar 19 14:09:49 2025 GMT
        Subject: CN=D4181D3372EB3BB4007741A347AA60EBA3D04B5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:24:e8:58:8a:29:f3:96:9b:9c:84:d2:c0:4a:
                    d8:8e:46:8c:71:2a:6f:2c:4a:2d:fe:c7:4d:ca:4f:
                    f2:8c:33:18:26:40:b7:21:1c:50:80:23:8c:6c:5e:
                    b7:75:a2:f9:81:93:27:9b:4d:38:2a:7d:20:13:c4:
                    06:0f:ab:3e:ba:53:b0:7e:fd:a8:7f:c9:d1:87:6a:
                    6a:76:8b:07:2e:c2:99:07:3c:06:e9:ff:3f:fe:d6:
                    fa:c6:1e:4f:21:4e:e8:46:a2:2e:b2:49:99:09:c3:
                    98:a1:c8:65:69:1c:2b:10:9c:39:95:cf:13:77:91:
                    dd:35:c3:36:a2:19:05:ea:55:59:2e:85:d2:cf:4f:
                    75:51:52:35:31:df:82:5a:d6:ee:86:d3:98:6a:a4:
                    c2:4e:08:73:3a:31:22:95:5f:4a:a3:8d:f6:03:34:
                    0a:c2:ff:19:e3:6f:39:02:5d:19:cd:5d:72:16:3d:
                    46:fd:bf:26:ce:ea:4b:e9:b0:d2:7e:a4:a9:a9:10:
                    2f:0a:f9:4c:40:4a:e1:2e:9b:5e:50:10:e4:74:a9:
                    8b:07:27:d8:c6:5e:c0:df:d7:b9:a2:7f:24:ad:34:
                    80:ac:26:8e:95:fb:bd:fd:ba:65:75:50:63:ac:ea:
                    6b:7d:8c:f5:35:11:a3:b7:9b:ec:03:b4:18:bf:52:
                    37:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:18:1D:33:72:EB:3B:B4:00:77:41:A3:47:AA:60:EB:A3:D0:4B:5C
            X509v3 Authority Key Identifier:
                keyid:7B:00:07:30:F6:99:BA:BE:4D:6C:90:24:94:AD:2E:F2:72:59:2A:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9praPEZ33c2VJUb1heRV84KzUxz6bac9Y2q4AZejJo63/0/7B000730F699BABE4D6C902494AD2EF272592A92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7B000730F699BABE4D6C902494AD2EF272592A92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9praPEZ33c2VJUb1heRV84KzUxz6bac9Y2q4AZejJo63/0/323830343a356365303a3a2f33322d313238203d3e20323638393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:5b:8a:d6:19:41:88:b0:e3:b3:61:8f:6f:c5:15:da:88:ba:
         a1:81:f1:43:49:4e:78:28:62:7e:03:5e:ba:85:65:41:8a:e8:
         88:7d:48:d1:1a:bb:b4:91:17:5b:25:75:e0:9d:c6:94:a9:95:
         05:49:95:8f:64:7a:d8:3b:27:36:02:0e:b5:6f:27:9f:fd:3c:
         b8:69:da:c6:06:24:36:dd:1e:19:19:b5:41:b3:7c:ec:ba:17:
         74:14:da:4d:bc:d0:74:71:c4:3e:74:78:a8:06:2b:49:ca:bf:
         ce:45:d6:d1:8a:34:54:0f:36:e3:31:f0:be:dd:67:be:8b:e9:
         af:cd:03:ff:d8:c2:4b:2c:6c:36:bb:d6:0b:d8:23:4d:60:ac:
         df:b7:2d:a9:ce:68:19:f8:ab:85:9b:94:f7:6a:a5:d3:cc:96:
         a8:3f:14:e2:be:4b:24:b4:e6:d9:d8:4e:38:2e:54:ac:e1:8f:
         e9:47:5f:b9:f5:c0:a7:81:3d:4b:a4:69:b3:ff:18:27:bf:4c:
         17:3b:e9:13:8b:b1:ca:1d:69:eb:0f:47:c8:33:04:db:c2:c6:
         ed:25:47:3f:c3:a3:94:51:4e:4d:05:69:b3:b0:35:b9:43:78:
         38:23:b0:42:fb:fe:71:b0:f9:92:ed:81:53:87:b9:3d:3c:2d:
         38:6a:37:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----