Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9qfdey7QoiByWt1GLd48NMekhLgtiREBs9fKYZaUmwFL/0/323830343a373232633a3a2f33322d3332203d3e20323730383337.roa
File:                     323830343a373232633a3a2f33322d3332203d3e20323730383337.roa (raw, json)
Hash identifier:          +10Ixn94MSyqdpk51vCu29SHtV0XVuXp8Ohc4X73Bkk=
Subject key identifier:   86:D6:38:F3:9F:72:E1:3D:A2:E6:25:D7:A5:3D:50:64:ED:EC:59:D8
Certificate issuer:       /CN=485BB2663E7F49C974E06AA83CC46A85FB468BF6
Certificate serial:       2B0AC374A2C5CA5EF1A0BEB26E5996B9B2515EB0
Authority key identifier: 48:5B:B2:66:3E:7F:49:C9:74:E0:6A:A8:3C:C4:6A:85:FB:46:8B:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/485BB2663E7F49C974E06AA83CC46A85FB468BF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qfdey7QoiByWt1GLd48NMekhLgtiREBs9fKYZaUmwFL/0/323830343a373232633a3a2f33322d3332203d3e20323730383337.roa
Signing time:             Fri 26 Jan 2024 21:12:17 +0000
ROA not before:           Fri 26 Jan 2024 21:07:17 +0000
ROA not after:            Fri 24 Jan 2025 21:12:17 +0000
asID:                     270837
IP address blocks:        2804:722c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:0a:c3:74:a2:c5:ca:5e:f1:a0:be:b2:6e:59:96:b9:b2:51:5e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=485BB2663E7F49C974E06AA83CC46A85FB468BF6
        Validity
            Not Before: Jan 26 21:07:17 2024 GMT
            Not After : Jan 24 21:12:17 2025 GMT
        Subject: CN=86D638F39F72E13DA2E625D7A53D5064EDEC59D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0c:bd:29:c3:71:ba:6c:9c:0c:42:1a:1e:3e:
                    b8:d6:2c:29:70:45:e8:97:3b:66:5d:a0:bd:98:f9:
                    29:88:c6:57:6e:1c:a7:53:7b:b1:ce:54:cb:99:24:
                    30:3f:13:1b:97:3d:1c:81:cc:d2:79:c3:53:a8:d9:
                    60:1b:d2:da:4f:56:13:e1:a4:68:fe:b1:1a:1b:8f:
                    14:d2:36:57:84:b1:ac:2e:a2:ce:77:9d:45:ec:9e:
                    1b:ed:c5:29:67:fa:16:63:bb:bc:ef:68:73:d7:ac:
                    ff:8a:55:df:fb:06:04:b0:5b:c2:73:d0:d5:80:1e:
                    33:e6:27:22:fe:8f:08:06:f3:18:b2:62:f0:ce:83:
                    78:bf:d9:99:a3:a6:88:b9:51:92:11:ee:be:0b:b5:
                    f7:5c:e2:b3:39:7f:bb:5c:3e:63:e5:1e:ff:34:4e:
                    87:a1:ce:64:53:f1:47:2b:2d:df:c7:b6:5f:fc:c2:
                    aa:83:ba:8d:4b:c5:8a:4d:d0:6e:c4:11:43:b2:84:
                    36:61:fb:15:51:45:19:d2:83:7c:30:6b:30:e2:ee:
                    a6:4d:d1:27:9f:f2:36:41:f6:4f:81:21:2c:f0:da:
                    a4:ed:57:94:96:47:6e:93:c4:d4:39:a8:a5:aa:db:
                    06:77:d9:74:4a:4d:d7:52:15:a7:02:09:cf:50:cb:
                    72:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D6:38:F3:9F:72:E1:3D:A2:E6:25:D7:A5:3D:50:64:ED:EC:59:D8
            X509v3 Authority Key Identifier:
                keyid:48:5B:B2:66:3E:7F:49:C9:74:E0:6A:A8:3C:C4:6A:85:FB:46:8B:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qfdey7QoiByWt1GLd48NMekhLgtiREBs9fKYZaUmwFL/0/485BB2663E7F49C974E06AA83CC46A85FB468BF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/485BB2663E7F49C974E06AA83CC46A85FB468BF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qfdey7QoiByWt1GLd48NMekhLgtiREBs9fKYZaUmwFL/0/323830343a373232633a3a2f33322d3332203d3e20323730383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:722c::/32

    Signature Algorithm: sha256WithRSAEncryption
         ba:ae:8b:bc:93:ad:ec:ff:7c:6f:78:4f:ae:fc:77:55:89:c7:
         26:08:cf:44:55:a8:d4:d0:e5:6e:e1:6e:94:a0:3f:ec:5c:d3:
         b2:c4:7d:58:a4:92:06:82:f3:27:76:18:8c:cf:74:e8:73:62:
         3a:b2:3d:bd:7a:80:98:d6:eb:47:4a:c3:9a:44:16:48:62:08:
         3c:0f:5a:78:58:fe:4a:c1:4c:74:1a:47:aa:08:6e:fa:91:5d:
         d4:47:45:8c:32:31:77:63:5b:47:29:0a:8b:7b:aa:98:c8:94:
         4f:c5:4e:a5:50:f0:8c:b8:61:6e:08:a9:06:c3:5a:e3:91:a4:
         92:c6:b4:39:66:95:ee:91:e9:18:1b:f2:01:63:47:2b:f0:39:
         0c:39:b7:3a:e7:89:17:fd:95:09:47:21:55:1e:e8:c6:b6:e0:
         82:0b:4c:30:3d:16:4c:69:20:ee:24:ff:ff:18:f1:0f:13:c6:
         d5:09:82:58:2a:cd:72:50:86:04:22:0c:6e:8b:6f:dc:ee:7b:
         46:9d:36:97:44:68:b1:8c:2d:b2:60:b0:24:75:f2:5e:f9:ae:
         bd:76:ee:fc:52:65:ef:85:7a:77:02:07:ae:3e:51:7c:ea:50:
         98:42:9b:5c:83:49:08:1b:87:6b:de:18:9f:75:e9:99:3d:98:
         47:d9:26:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----