Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/323830343a343136303a3a2f33322d3332203d3e20323637343239.roa
File:                     323830343a343136303a3a2f33322d3332203d3e20323637343239.roa (raw, json)
Hash identifier:          +V/ykR6sZsdjQCsD+BQz5PklT5Tx/eP/IE7CnKmob7E=
Subject key identifier:   70:82:AE:A6:89:02:02:59:B3:CD:94:61:BD:86:73:5C:A4:C6:30:E1
Certificate issuer:       /CN=2A5011451F0E97D5C76B27823EA7E896246FCC89
Certificate serial:       44CDF276A73EEAA1E618CF1C897300A9B0185FF8
Authority key identifier: 2A:50:11:45:1F:0E:97:D5:C7:6B:27:82:3E:A7:E8:96:24:6F:CC:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A5011451F0E97D5C76B27823EA7E896246FCC89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/323830343a343136303a3a2f33322d3332203d3e20323637343239.roa
Signing time:             Mon 08 Jan 2024 19:36:44 +0000
ROA not before:           Mon 08 Jan 2024 19:31:44 +0000
ROA not after:            Mon 06 Jan 2025 19:36:44 +0000
asID:                     267429
IP address blocks:        2804:4160::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:cd:f2:76:a7:3e:ea:a1:e6:18:cf:1c:89:73:00:a9:b0:18:5f:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A5011451F0E97D5C76B27823EA7E896246FCC89
        Validity
            Not Before: Jan  8 19:31:44 2024 GMT
            Not After : Jan  6 19:36:44 2025 GMT
        Subject: CN=7082AEA689020259B3CD9461BD86735CA4C630E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:16:e4:91:09:c8:b2:61:03:ca:c5:0d:35:14:
                    8e:bb:08:91:a7:5c:64:8e:c0:ba:ea:88:69:73:b1:
                    86:cd:c4:6c:4f:ff:36:f4:5a:02:d0:70:cf:c7:d1:
                    c4:44:25:55:01:5d:4b:b9:c3:1f:aa:68:2a:68:ef:
                    d4:24:db:3b:39:83:be:0d:eb:83:c2:6f:04:2d:32:
                    c6:68:50:3b:70:78:41:ad:c8:0e:ad:be:ff:80:3c:
                    c4:f4:d4:2f:a9:8a:41:0b:b2:56:75:04:fd:15:f5:
                    ee:e4:74:28:d9:30:87:ce:39:6b:40:6a:35:db:53:
                    b8:b1:df:4c:2f:d1:a4:31:74:85:53:6e:f8:6d:1f:
                    cf:4d:90:64:46:b3:0a:a9:67:f6:44:4e:b7:db:b3:
                    06:fc:5e:3d:78:63:8e:6d:f2:f4:b8:2c:6c:b2:ac:
                    e0:04:a1:2b:94:c1:d0:3f:3a:98:9f:44:17:eb:97:
                    0d:7b:8a:e7:0a:d1:be:e1:17:14:18:9e:80:b3:1a:
                    11:68:18:50:95:9f:e6:b7:d2:ad:e3:76:14:bf:63:
                    2d:e6:c3:68:a8:0f:31:13:67:5f:66:6c:2e:43:c4:
                    86:b5:0d:b7:3d:00:9a:27:bd:99:cd:74:fb:03:d4:
                    b7:6e:75:c5:ca:67:3d:29:e7:2b:b2:18:64:8f:a7:
                    52:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:82:AE:A6:89:02:02:59:B3:CD:94:61:BD:86:73:5C:A4:C6:30:E1
            X509v3 Authority Key Identifier:
                keyid:2A:50:11:45:1F:0E:97:D5:C7:6B:27:82:3E:A7:E8:96:24:6F:CC:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/2A5011451F0E97D5C76B27823EA7E896246FCC89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A5011451F0E97D5C76B27823EA7E896246FCC89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/323830343a343136303a3a2f33322d3332203d3e20323637343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4160::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:39:19:f0:88:92:fe:15:6e:08:4b:6c:27:9a:30:99:2e:5d:
         4f:4f:c7:2d:4c:ae:f7:bb:48:1f:50:6a:18:fa:92:b8:56:35:
         cf:6b:68:0d:fb:25:d8:98:e7:70:06:1f:6f:ba:6f:72:f5:2b:
         48:aa:dd:10:2d:84:ec:fc:41:aa:bd:6e:44:c0:9c:18:19:e1:
         42:00:92:98:87:0d:ca:88:5e:fd:2e:ee:1c:6f:88:39:b5:35:
         ed:c8:bf:aa:5f:e3:de:ef:5a:a5:d3:30:a3:2c:35:c5:53:73:
         0e:76:f2:87:fe:98:41:02:79:e6:58:e0:37:ee:31:da:41:70:
         c6:3b:8d:01:ec:7b:02:1b:fb:38:50:81:c3:56:87:a5:7f:e1:
         4c:a6:8c:94:de:04:7f:56:cc:dc:27:c6:0f:9a:e7:89:96:ac:
         c7:c5:c6:ff:6b:fc:0a:f4:70:cd:f3:08:65:6b:5c:98:4e:18:
         c1:b8:e9:ae:ce:ba:8a:61:8a:1a:3d:c7:d9:80:d3:14:14:97:
         08:16:ca:3f:ad:71:ce:6f:aa:7d:c4:55:cd:d7:4f:f7:2b:7a:
         6e:16:d7:cd:b2:27:50:27:d6:e5:5e:9e:ef:31:64:62:ad:68:
         35:26:ce:fb:49:e0:b8:db:8b:63:50:8a:e3:c2:0e:fb:d4:f0:
         a9:3c:42:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----