Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/323830343a316136383a3a2f33322d3438203d3e20323632343230.roa
File:                     323830343a316136383a3a2f33322d3438203d3e20323632343230.roa (raw, json)
Hash identifier:          dqPtIUODSzIAcZc56Y7dUgYvIS5vU6EoJZ91bWPHFDw=
Subject key identifier:   82:42:52:69:2F:80:CE:8B:76:B7:CA:9D:C1:4C:0A:D1:69:3D:D5:B6
Certificate issuer:       /CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
Certificate serial:       418D1125B5163E64C7BB9C3A2D63FDFF5BAEA3EC
Authority key identifier: 75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/323830343a316136383a3a2f33322d3438203d3e20323632343230.roa
Signing time:             Sat 20 Jan 2024 18:34:01 +0000
ROA not before:           Sat 20 Jan 2024 18:29:01 +0000
ROA not after:            Sat 18 Jan 2025 18:34:01 +0000
asID:                     262420
IP address blocks:        2804:1a68::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:8d:11:25:b5:16:3e:64:c7:bb:9c:3a:2d:63:fd:ff:5b:ae:a3:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
        Validity
            Not Before: Jan 20 18:29:01 2024 GMT
            Not After : Jan 18 18:34:01 2025 GMT
        Subject: CN=824252692F80CE8B76B7CA9DC14C0AD1693DD5B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d9:af:62:28:8c:8a:98:d4:97:5e:bc:ff:54:
                    16:7a:23:4e:f4:00:79:c6:0d:cc:7f:f0:d4:72:26:
                    bb:9f:f9:66:77:03:72:a7:bc:ae:71:d1:90:da:b8:
                    b8:8c:9d:85:20:b4:5f:dd:8a:35:7b:f2:22:17:37:
                    4e:15:14:11:87:88:83:9d:9d:56:1e:c9:9f:e2:82:
                    3c:7a:02:d7:03:b1:19:75:2d:cb:30:16:ef:99:38:
                    43:13:71:dc:ce:38:47:3f:e0:cb:de:11:f6:1a:1e:
                    20:73:88:43:50:51:c8:ac:9c:80:06:e8:91:b5:8d:
                    95:6b:37:dd:52:e0:d2:26:65:6c:8b:24:89:b6:70:
                    c9:a1:94:1c:9a:6b:53:35:88:c2:5f:ce:30:20:53:
                    1b:ef:9e:c1:50:00:0d:54:86:92:e2:ce:91:65:34:
                    37:44:fc:a9:a1:d2:80:f2:39:a0:39:9d:3b:f2:80:
                    5c:ad:7f:13:d0:98:15:8b:b0:1b:88:75:f7:9a:4f:
                    21:55:0a:7e:8c:5f:a5:fd:1a:1e:29:da:be:45:22:
                    7b:af:33:19:c2:e5:90:58:14:d5:73:c1:35:48:27:
                    96:24:05:96:bd:4b:59:cc:58:af:7c:b7:86:3d:c7:
                    9a:37:90:0f:d2:d2:c5:41:da:62:11:c8:cf:d3:1c:
                    19:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:42:52:69:2F:80:CE:8B:76:B7:CA:9D:C1:4C:0A:D1:69:3D:D5:B6
            X509v3 Authority Key Identifier:
                keyid:75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/323830343a316136383a3a2f33322d3438203d3e20323632343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a68::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:93:2c:78:fa:4e:cd:8c:5e:62:2b:f8:e0:19:fb:1a:04:e9:
         f3:6e:59:e8:28:0d:d9:14:c4:0b:ef:3d:a5:2a:cd:08:d4:82:
         ad:29:25:17:82:8e:b2:96:b6:ad:ea:ca:b1:88:0f:65:c0:b9:
         53:20:09:42:b4:13:21:7d:e0:ee:30:51:8e:ac:69:d1:1d:1b:
         67:f8:e8:b5:9e:d9:45:a3:88:41:66:ec:5c:c3:b4:7f:c2:b5:
         fb:ae:51:5a:5b:8a:b0:24:a8:d2:9e:4b:6b:8f:86:e9:fd:d5:
         59:6c:56:c5:4d:d6:61:d1:94:bd:c1:81:a6:59:9d:a4:f6:f1:
         c1:fd:ab:1d:76:6d:66:88:e9:73:70:bb:81:fa:d6:8d:e8:f3:
         f2:f8:0a:13:60:99:1a:95:6a:ae:ec:78:4a:0f:dc:ae:36:84:
         bf:1c:17:b4:af:91:0d:85:5b:65:cb:6e:c7:a9:d1:a4:cf:9a:
         59:ab:30:68:b5:a8:40:a5:2b:8c:0a:56:c2:0a:62:3c:77:61:
         c7:63:65:48:5e:09:86:f7:e2:fe:ce:83:ef:b6:88:19:d7:36:
         bc:33:4a:52:aa:91:dc:44:ad:07:69:8b:6f:d7:d0:17:d9:f9:
         25:2c:49:35:f7:28:03:3b:c7:75:d1:91:8b:f3:d7:6c:29:11:
         13:8a:cb:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----