Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/323830343a343233303a3a2f33322d3438203d3e20323637343834.roa
File:                     323830343a343233303a3a2f33322d3438203d3e20323637343834.roa (raw, json)
Hash identifier:          Qazv/CUCBaub5+v4LuBpnPKM/1Y3Rg6ImEw6ssJr8+k=
Subject key identifier:   D1:81:C3:4D:2A:B5:EC:9B:04:15:FD:C1:8E:D6:26:03:33:1E:E2:8C
Certificate issuer:       /CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
Certificate serial:       7074D387C3DC6E382CE314AC45394668EA45271C
Authority key identifier: 75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/323830343a343233303a3a2f33322d3438203d3e20323637343834.roa
Signing time:             Sat 20 Jan 2024 18:39:32 +0000
ROA not before:           Sat 20 Jan 2024 18:34:32 +0000
ROA not after:            Sat 18 Jan 2025 18:39:32 +0000
asID:                     267484
IP address blocks:        2804:4230::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:74:d3:87:c3:dc:6e:38:2c:e3:14:ac:45:39:46:68:ea:45:27:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
        Validity
            Not Before: Jan 20 18:34:32 2024 GMT
            Not After : Jan 18 18:39:32 2025 GMT
        Subject: CN=D181C34D2AB5EC9B0415FDC18ED62603331EE28C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2f:c0:47:c3:9f:f6:c8:30:c3:a0:04:e8:38:
                    ed:a6:6f:5d:a4:ca:20:18:40:f9:58:e4:a8:cc:30:
                    04:0e:5b:30:c4:5b:86:ea:d2:26:28:67:17:c3:0a:
                    40:37:83:a1:bf:08:8e:3f:f0:cf:ec:32:d3:e5:60:
                    37:a5:23:76:e1:9d:dc:51:de:dd:58:cd:44:fa:27:
                    53:cb:7a:03:f3:f9:10:9c:37:e9:1e:ab:c6:b8:f6:
                    97:c1:87:39:b2:f1:df:57:7e:73:ef:34:55:da:d8:
                    49:74:fa:59:54:6d:02:43:8f:2f:ce:56:e9:96:f1:
                    1d:c8:92:c9:c1:60:84:42:3e:c5:2d:01:1a:75:0b:
                    a9:05:97:0f:1c:86:4d:d9:31:0b:61:d0:f2:a9:d1:
                    1b:6b:41:96:0e:6f:2b:ee:55:17:6e:55:b5:ad:5d:
                    42:25:50:59:81:2e:1b:dd:37:7b:59:47:0d:2c:4f:
                    57:c2:64:91:ac:5f:3e:c8:00:15:e3:09:c7:ac:fc:
                    bd:e4:c5:cc:0a:b3:59:f4:d5:67:db:34:e7:6e:90:
                    3c:84:41:47:9c:1a:47:c5:c0:41:2c:0d:a8:ea:90:
                    31:e9:70:45:2f:0e:7b:d6:40:2e:36:5c:06:e9:a7:
                    07:72:68:7c:d7:aa:cd:02:69:26:87:78:67:d8:7c:
                    4c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:81:C3:4D:2A:B5:EC:9B:04:15:FD:C1:8E:D6:26:03:33:1E:E2:8C
            X509v3 Authority Key Identifier:
                keyid:75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/323830343a343233303a3a2f33322d3438203d3e20323637343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4230::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:eb:03:b2:18:b5:c0:85:30:9e:20:ac:19:2e:fa:17:e1:c8:
         ed:83:d1:20:7d:ff:bf:d2:45:eb:fc:4d:ce:31:ca:30:d9:66:
         8e:cb:7c:d2:e4:e0:5d:3a:c8:64:4b:94:9d:98:79:7b:5a:3f:
         c0:21:b3:09:90:56:b2:5f:52:d0:61:62:f6:ad:b7:32:f4:36:
         42:36:8c:71:af:9c:ad:78:2b:f6:aa:c4:f8:9d:4a:36:a0:ff:
         38:41:8d:87:af:5a:14:5f:91:88:c4:c7:0a:db:75:07:8d:18:
         9c:ec:af:a2:60:da:de:10:ff:74:be:2e:95:49:1b:8e:55:71:
         00:4c:79:28:f4:6e:4c:c4:a9:7a:5c:1c:e2:8e:a2:ba:ea:d8:
         4b:2b:69:68:da:c0:79:7d:c5:41:b9:82:8d:a2:f7:b4:b0:ed:
         f5:07:8e:1d:d1:20:82:de:67:4a:bf:38:1e:12:a9:c8:06:48:
         e6:e3:a3:29:5a:c8:33:8f:5b:1c:e6:b6:97:19:5b:36:4d:c2:
         d7:f6:79:25:88:69:ae:d8:de:4c:d7:53:b5:60:97:1d:cd:b8:
         c7:af:4c:26:db:71:0a:03:b6:72:3a:f4:60:2a:cf:f2:85:32:
         da:a3:19:0b:56:e8:3f:13:9d:b1:28:ac:66:50:79:71:fe:19:
         dc:a4:33:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----