Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/323830343a316466383a3a2f33322d313238203d3e20323634343034.roa
File:                     323830343a316466383a3a2f33322d313238203d3e20323634343034.roa (raw, json)
Hash identifier:          gpIwnaKAtfgoIsBlLSsv02TNzK2cdm+Jt8adtWJYUeE=
Subject key identifier:   0D:54:86:9A:1E:63:2A:D9:72:A1:D2:7A:86:84:1D:E2:38:8A:54:1F
Certificate issuer:       /CN=7A7BFD21EAE2D0E0F9464FA263AC6E47ACD7C229
Certificate serial:       615DD04EAF1EA470B8FB2075B3EE8D2CBF5C9F36
Authority key identifier: 7A:7B:FD:21:EA:E2:D0:E0:F9:46:4F:A2:63:AC:6E:47:AC:D7:C2:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A7BFD21EAE2D0E0F9464FA263AC6E47ACD7C229.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/323830343a316466383a3a2f33322d313238203d3e20323634343034.roa
Signing time:             Fri 22 Mar 2024 19:06:52 +0000
ROA not before:           Fri 22 Mar 2024 19:01:52 +0000
ROA not after:            Fri 21 Mar 2025 19:06:52 +0000
asID:                     264404
IP address blocks:        2804:1df8::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:5d:d0:4e:af:1e:a4:70:b8:fb:20:75:b3:ee:8d:2c:bf:5c:9f:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A7BFD21EAE2D0E0F9464FA263AC6E47ACD7C229
        Validity
            Not Before: Mar 22 19:01:52 2024 GMT
            Not After : Mar 21 19:06:52 2025 GMT
        Subject: CN=0D54869A1E632AD972A1D27A86841DE2388A541F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:15:34:94:41:23:1d:dc:25:56:69:d7:e9:12:
                    68:c7:1e:e6:53:48:f9:a3:0e:37:89:dd:ae:e9:d4:
                    b1:93:36:d9:4d:0e:9c:28:ee:7b:15:94:17:22:62:
                    49:7d:09:b8:68:e8:ae:8e:a0:fe:6b:04:f7:68:c8:
                    58:33:6c:9a:5e:5c:d1:98:36:4f:36:ea:c0:7d:3b:
                    03:90:69:a0:aa:e6:9e:d1:7e:e2:dc:82:ac:59:2e:
                    e2:55:89:dc:f5:1b:d5:86:ee:dc:fb:11:99:7a:32:
                    68:4b:a9:11:d2:89:00:52:95:55:f5:51:78:c5:c1:
                    60:66:53:22:2a:68:a0:a4:30:35:54:b5:0b:55:5f:
                    2d:d0:e1:69:c0:5c:41:53:a8:b0:0c:fd:80:7c:af:
                    1b:94:5c:3a:ba:ba:14:7c:af:9a:30:49:8e:42:c9:
                    a5:f5:ba:d4:92:14:d4:7f:8d:2a:9c:62:88:3a:16:
                    d5:ab:69:73:1d:98:6d:a4:a5:7d:80:db:22:ef:57:
                    e1:e4:d4:11:75:34:db:cb:e3:3c:04:b9:f9:87:6a:
                    59:31:66:98:e0:8d:15:dd:2a:40:44:03:f8:1c:c8:
                    39:33:7d:0e:cf:4a:da:a2:a2:31:cb:2d:ab:d0:f5:
                    8e:34:9c:e7:f3:82:f2:73:4f:b5:45:cf:fa:2f:66:
                    c2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:54:86:9A:1E:63:2A:D9:72:A1:D2:7A:86:84:1D:E2:38:8A:54:1F
            X509v3 Authority Key Identifier:
                keyid:7A:7B:FD:21:EA:E2:D0:E0:F9:46:4F:A2:63:AC:6E:47:AC:D7:C2:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/7A7BFD21EAE2D0E0F9464FA263AC6E47ACD7C229.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A7BFD21EAE2D0E0F9464FA263AC6E47ACD7C229.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/323830343a316466383a3a2f33322d313238203d3e20323634343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1df8::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:4c:51:9a:02:b9:ad:0d:6a:5c:ac:1b:93:1e:1a:d2:8a:a3:
         13:46:5c:1a:2f:70:ff:28:a2:05:27:40:55:8f:56:44:9d:67:
         3a:05:00:b8:5c:88:34:24:52:9f:66:17:2c:8c:6e:99:d1:b7:
         92:a4:48:02:73:01:26:a4:ba:1d:6a:69:02:af:13:21:5e:5e:
         0e:07:cb:55:d0:4a:aa:5d:f1:7b:45:1b:0d:23:07:b0:b8:d2:
         37:8e:da:28:c5:61:80:05:3d:14:37:4e:7e:77:0b:65:82:50:
         3e:a0:44:58:f2:7b:e6:d7:ee:d0:80:ca:bd:f0:1c:30:02:27:
         ba:3f:ad:68:73:a5:72:e3:c5:8c:dc:62:76:a8:b8:23:c4:bf:
         c8:07:2c:0d:1c:ca:c7:ed:c2:63:72:cc:94:80:82:52:9a:f1:
         96:fc:a5:53:d1:9c:46:6d:d3:a8:67:b2:5a:49:c1:6a:6c:28:
         9a:35:41:9f:fa:f7:37:64:b7:74:2f:75:c1:20:3b:94:a3:d9:
         f1:21:ee:94:c5:eb:b8:6a:b2:5b:de:61:a4:2e:95:95:75:40:
         74:6a:f2:36:3d:ee:17:8d:1e:dc:27:ac:68:23:4f:fe:48:27:
         e5:0d:be:fb:4e:f1:a2:45:3e:97:7b:b7:8a:f5:ec:e9:54:10:
         14:31:61:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----