Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/2/323830343a3663383a3a2f33322d3438203d3e20323632363036.roa
File:                     323830343a3663383a3a2f33322d3438203d3e20323632363036.roa (raw, json)
Hash identifier:          EAkAURsBFLdFO7XGfYtSH1kUdsM77tLfnudiQ4AbMpA=
Subject key identifier:   C5:7E:EE:40:C9:44:41:E2:34:8A:FF:36:41:7B:20:BA:C1:06:ED:37
Certificate issuer:       /CN=3544A3DD4CAB11F48428C7B89644B9D5B502409E
Certificate serial:       342D53DAE557035BFBA843FACE7B992B0B71694F
Authority key identifier: 35:44:A3:DD:4C:AB:11:F4:84:28:C7:B8:96:44:B9:D5:B5:02:40:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3544A3DD4CAB11F48428C7B89644B9D5B502409E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/2/323830343a3663383a3a2f33322d3438203d3e20323632363036.roa
Signing time:             Wed 03 Apr 2024 22:54:09 +0000
ROA not before:           Wed 03 Apr 2024 22:49:09 +0000
ROA not after:            Wed 02 Apr 2025 22:54:09 +0000
asID:                     262606
IP address blocks:        2804:6c8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:2d:53:da:e5:57:03:5b:fb:a8:43:fa:ce:7b:99:2b:0b:71:69:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3544A3DD4CAB11F48428C7B89644B9D5B502409E
        Validity
            Not Before: Apr  3 22:49:09 2024 GMT
            Not After : Apr  2 22:54:09 2025 GMT
        Subject: CN=C57EEE40C94441E2348AFF36417B20BAC106ED37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:64:97:b8:2e:5e:b7:0d:1a:b3:6d:f2:dd:3f:
                    4f:62:61:82:77:f1:6b:7b:64:29:7e:33:19:5f:12:
                    4f:1d:18:c0:73:b6:12:53:49:87:be:60:f6:76:7c:
                    e6:7e:53:9c:8e:d0:c7:8e:4b:35:81:75:f2:9e:ea:
                    7e:3a:8e:ca:1a:68:31:21:2d:63:40:c3:99:9b:d1:
                    f4:b3:b3:79:e8:53:38:4e:22:8e:60:2c:bf:51:96:
                    fb:11:fd:96:f8:ca:79:25:94:a4:21:ff:2b:56:58:
                    f4:3b:68:6b:e3:83:c8:db:e5:8a:4d:2e:c0:94:46:
                    bd:67:6a:52:8e:7b:ee:03:4e:10:86:c8:12:e9:43:
                    91:b0:56:9d:40:34:62:27:50:2b:6b:95:e3:38:57:
                    d6:c6:d1:8d:74:0e:af:8b:97:32:42:e2:a6:e8:b5:
                    47:8b:ee:8e:52:a5:f9:7e:fb:49:06:2c:e0:e0:cd:
                    35:ab:22:9b:32:24:d4:02:1e:e7:49:77:f2:73:29:
                    84:91:fd:09:27:b0:62:07:2a:29:f3:5b:d5:10:4f:
                    d8:c5:de:ec:ff:69:9c:d9:e4:54:1d:90:47:13:8f:
                    1a:ca:31:ab:d0:a4:d6:25:91:0f:7e:57:fd:b9:6f:
                    db:b6:3f:b8:85:0e:39:5a:ec:b3:33:6d:f3:d1:4b:
                    ed:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:7E:EE:40:C9:44:41:E2:34:8A:FF:36:41:7B:20:BA:C1:06:ED:37
            X509v3 Authority Key Identifier:
                keyid:35:44:A3:DD:4C:AB:11:F4:84:28:C7:B8:96:44:B9:D5:B5:02:40:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/2/3544A3DD4CAB11F48428C7B89644B9D5B502409E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3544A3DD4CAB11F48428C7B89644B9D5B502409E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/2/323830343a3663383a3a2f33322d3438203d3e20323632363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:92:72:7b:3a:a5:8e:c5:b0:4b:70:2e:61:d1:cf:63:ec:08:
         ea:af:b1:84:7d:81:1c:ae:fe:71:ab:e4:5b:df:33:72:10:7a:
         84:ac:7c:b2:61:ec:84:cd:e2:58:45:3e:1e:b2:e9:6e:2a:f8:
         20:b4:3c:6c:6a:91:0f:10:3b:a6:47:e0:47:56:09:91:35:c1:
         91:57:12:80:d9:12:1a:31:d9:65:10:8b:be:86:ee:ec:43:54:
         85:c7:e8:a0:53:0a:ea:ef:6c:b2:1d:d4:1f:56:5e:61:8c:5e:
         b7:bf:b4:98:84:af:63:fb:fd:35:a9:a6:63:b2:07:95:28:e3:
         e9:32:48:db:08:b1:96:40:e3:75:c3:59:b6:43:5c:93:9d:a2:
         b6:93:c3:3a:54:d3:e6:8d:e7:16:4d:b8:30:55:ce:71:63:72:
         89:7f:80:b4:f4:b4:43:1a:9e:42:23:3d:56:d7:f2:1f:45:8e:
         02:45:1e:e3:3d:55:a9:61:33:1e:a9:47:22:f7:5e:b5:50:75:
         13:f9:36:91:71:bf:48:63:b8:42:d4:03:cd:12:a9:cd:13:51:
         21:2d:02:cd:d6:69:70:14:5c:84:40:d3:98:08:7c:1c:33:05:
         7d:01:b9:51:f3:b8:f8:d2:a1:85:f8:97:26:8d:52:8f:63:3c:
         8a:3a:2e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----