Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/323830343a6363633a3a2f33322d3438203d3e20323632383237.roa
File:                     323830343a6363633a3a2f33322d3438203d3e20323632383237.roa (raw, json)
Hash identifier:          e4527Y8+ndhMPUPf3OUTcFDNNmmbrmgoE9QoWzhSTJA=
Subject key identifier:   41:D5:AE:D5:C7:EB:68:D1:7E:93:54:F0:87:EA:C3:B2:A5:9E:B8:3A
Certificate issuer:       /CN=DADE0C80639BA985F0F9357586063522E5D2116B
Certificate serial:       4B251120F290436F2CA4F0B2CCDEF55AB0385E03
Authority key identifier: DA:DE:0C:80:63:9B:A9:85:F0:F9:35:75:86:06:35:22:E5:D2:11:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DADE0C80639BA985F0F9357586063522E5D2116B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/323830343a6363633a3a2f33322d3438203d3e20323632383237.roa
Signing time:             Wed 10 Apr 2024 13:07:46 +0000
ROA not before:           Wed 10 Apr 2024 13:02:46 +0000
ROA not after:            Wed 09 Apr 2025 13:07:46 +0000
asID:                     262827
IP address blocks:        2804:ccc::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:25:11:20:f2:90:43:6f:2c:a4:f0:b2:cc:de:f5:5a:b0:38:5e:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DADE0C80639BA985F0F9357586063522E5D2116B
        Validity
            Not Before: Apr 10 13:02:46 2024 GMT
            Not After : Apr  9 13:07:46 2025 GMT
        Subject: CN=41D5AED5C7EB68D17E9354F087EAC3B2A59EB83A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:6f:72:91:fc:9b:9e:9f:5a:9c:46:47:20:ad:
                    eb:85:19:6e:48:1b:8e:8d:d8:6a:0d:aa:63:e9:bc:
                    af:c3:03:b0:28:e2:2e:de:8c:b3:20:90:ff:5c:96:
                    df:58:09:4c:52:88:fc:aa:d1:34:07:ca:5e:65:cd:
                    89:12:07:4b:c1:dd:9f:e5:0d:c9:53:13:22:50:b5:
                    3a:ad:57:80:16:d7:bc:f3:06:65:27:42:72:2b:c3:
                    ec:02:66:04:d3:45:4f:74:77:96:94:c3:25:62:6a:
                    11:90:51:05:83:a6:98:32:0a:c5:de:20:bb:09:6b:
                    a2:4f:52:cd:4b:51:d7:5d:67:49:ff:59:e8:c7:18:
                    4a:bc:38:43:2e:6c:68:34:79:bd:d2:74:d4:97:a4:
                    5b:7f:e9:58:08:94:9f:29:54:a7:6a:37:b0:79:d9:
                    78:2b:0e:ad:db:c9:4f:74:b8:90:9f:df:bd:80:90:
                    98:d0:4e:eb:cc:3b:98:a4:7d:91:e5:99:aa:eb:b4:
                    1a:57:55:f7:67:db:dc:bf:30:cd:87:00:48:bc:74:
                    4f:8a:08:7c:82:b0:f6:ea:a6:ab:b6:61:23:94:aa:
                    c9:66:03:a0:b3:a4:8c:1d:ef:47:e3:55:3d:e8:dc:
                    f5:ad:f0:17:ec:ed:4f:24:d7:92:c8:d3:ba:88:e9:
                    e6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D5:AE:D5:C7:EB:68:D1:7E:93:54:F0:87:EA:C3:B2:A5:9E:B8:3A
            X509v3 Authority Key Identifier:
                keyid:DA:DE:0C:80:63:9B:A9:85:F0:F9:35:75:86:06:35:22:E5:D2:11:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/DADE0C80639BA985F0F9357586063522E5D2116B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DADE0C80639BA985F0F9357586063522E5D2116B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/323830343a6363633a3a2f33322d3438203d3e20323632383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ccc::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:07:06:5e:8a:4b:7b:86:ea:45:26:84:6d:45:12:5b:ad:35:
         ea:7c:22:59:28:30:1a:6e:ed:bd:c9:ea:5d:ba:79:75:6f:f4:
         98:8f:3e:26:fb:2f:b8:ac:35:36:35:98:10:0f:81:11:aa:2c:
         1d:45:9c:6d:e3:ef:b9:2d:dc:8a:1f:d2:a8:db:e3:21:c4:ed:
         09:fa:94:9f:33:df:a5:c5:b8:59:47:e6:0f:49:87:3c:2b:5e:
         92:bb:77:1d:04:ba:e6:83:82:45:2f:51:11:8c:b6:5a:26:98:
         6a:f1:7e:c0:a7:02:e9:cd:81:fb:54:f1:49:ba:ed:19:76:02:
         a1:8f:ad:2b:a9:e5:ce:55:6a:58:84:e1:f6:cf:ee:d9:c7:85:
         fa:17:d9:80:8f:51:bf:f2:20:a0:aa:d4:d0:13:69:7d:07:eb:
         4f:8d:3e:18:76:82:db:a9:07:20:3f:0c:c6:ba:44:f0:17:8a:
         b2:cc:57:7b:5b:4c:ae:b8:da:f1:76:09:59:f8:64:cd:4a:c7:
         d2:f8:2c:4d:24:d8:91:ff:ef:68:e5:b2:2c:af:28:d3:05:ab:
         50:0b:d6:a5:25:75:cc:0f:c5:e2:c2:75:b5:7b:95:8d:73:f0:
         7a:c4:52:8e:cb:0a:e9:11:90:e9:71:0b:76:1a:ee:4f:12:89:
         c7:5d:77:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----