Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a3a2f33322d3332203d3e203631363337.roa
File:                     323830343a316331383a3a2f33322d3332203d3e203631363337.roa (raw, json)
Hash identifier:          sotFFHjqTzFle1pyL7aqYVssuxT2mf8Jqe0kj/7Kv2s=
Subject key identifier:   47:B6:7F:7A:93:C0:78:59:32:4C:82:19:1A:5E:6B:F7:3A:1E:68:41
Certificate issuer:       /CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
Certificate serial:       6C5D7CED60C0FDCA069C7B77315F949E8A4BE77F
Authority key identifier: 59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a3a2f33322d3332203d3e203631363337.roa
Signing time:             Thu 01 Feb 2024 19:55:34 +0000
ROA not before:           Thu 01 Feb 2024 19:50:34 +0000
ROA not after:            Thu 30 Jan 2025 19:55:34 +0000
asID:                     61637
IP address blocks:        2804:1c18::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:5d:7c:ed:60:c0:fd:ca:06:9c:7b:77:31:5f:94:9e:8a:4b:e7:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
        Validity
            Not Before: Feb  1 19:50:34 2024 GMT
            Not After : Jan 30 19:55:34 2025 GMT
        Subject: CN=47B67F7A93C07859324C82191A5E6BF73A1E6841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a4:3b:7d:3c:67:bb:ab:c5:ea:77:20:10:ad:
                    27:df:12:76:a1:bd:46:60:2b:5b:c1:50:d4:ba:7e:
                    64:57:31:cf:36:78:96:18:14:e3:70:1f:dd:a5:f0:
                    c9:a4:c4:7e:d7:6a:cb:f6:ff:45:77:55:88:20:20:
                    e6:62:64:eb:60:ee:4e:f2:c6:4a:37:16:63:67:6a:
                    f0:ad:b8:e3:09:94:dc:bf:6f:61:93:0e:3e:f7:c8:
                    49:35:ca:82:55:da:44:a7:2e:0f:fd:fa:2f:5f:ca:
                    a3:3b:56:85:ee:a9:df:9f:72:81:b6:18:c9:65:e0:
                    d7:ef:a8:43:5b:3a:9b:3a:b8:ba:c8:63:15:1b:3c:
                    a8:67:bb:0a:f7:d4:50:fb:a6:c6:9c:ad:20:91:d2:
                    aa:92:ee:4a:1d:be:87:ac:bd:a8:09:98:4a:d3:79:
                    e7:ea:29:d0:cc:b9:b8:95:52:5c:de:96:7b:a4:1a:
                    1a:1c:36:37:06:1b:e2:ba:6f:01:6c:d1:4c:47:bc:
                    e6:9b:ad:f3:4b:2b:38:97:5c:6f:9e:2d:73:1e:1f:
                    0d:65:1b:09:db:6e:54:a7:2d:6d:d1:28:36:f0:48:
                    8a:b4:46:71:b9:c5:e0:49:9f:f0:ae:75:2a:68:82:
                    94:86:12:d2:53:54:a2:41:3b:c2:4d:b7:62:8c:00:
                    76:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B6:7F:7A:93:C0:78:59:32:4C:82:19:1A:5E:6B:F7:3A:1E:68:41
            X509v3 Authority Key Identifier:
                keyid:59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a3a2f33322d3332203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:bb:cc:f7:f3:6e:b4:d8:f7:55:51:fc:28:0f:56:26:22:11:
         4b:da:28:59:f9:ed:3f:92:36:ee:3b:42:80:6a:be:eb:f6:74:
         27:e1:7c:70:15:97:36:34:04:a9:48:a5:a9:6a:97:26:8d:d3:
         23:83:ea:5b:38:c8:57:19:d1:90:a0:21:d4:70:85:42:84:09:
         3b:9c:e5:57:39:46:3a:42:7d:0b:9f:12:71:6b:fb:4b:d3:fa:
         70:8b:22:5f:44:dc:75:1a:e8:42:cb:f9:2d:5f:58:49:26:a0:
         9f:2b:19:83:98:35:62:12:fa:97:ca:ef:3a:47:5a:4a:c1:84:
         9b:ac:c7:0d:93:e3:1f:e1:03:b3:15:57:6f:c9:0d:1c:bd:0a:
         ca:00:10:c8:32:7d:e0:ef:52:94:81:98:bd:38:01:a7:cd:05:
         a8:03:b3:6d:e6:93:90:4e:9b:77:11:bd:f3:8e:82:9c:b0:2e:
         39:48:93:e7:4e:46:e6:b4:7b:6c:da:32:55:06:9a:0b:3d:34:
         ff:43:bd:b1:c8:e3:24:7f:35:ab:7b:f2:bc:3e:0e:68:9e:76:
         d6:4f:42:ae:40:e3:ff:9b:94:a0:22:59:3d:0e:52:cc:da:51:
         4d:5b:19:8a:50:d6:bb:83:0a:df:d3:65:ca:af:5a:7c:e6:d3:
         a0:51:0f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----