Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/2/323830343a353637343a383030303a3a2f33332d3333203d3e20323637393939.roa
File:                     323830343a353637343a383030303a3a2f33332d3333203d3e20323637393939.roa (raw, json)
Hash identifier:          smsqRXt9/2EAtisGDJbuRNQUVvI8IPsHMaoWkNiUT1Q=
Subject key identifier:   7C:E3:1A:1B:EF:AB:82:AA:0E:31:CE:E9:5B:F8:23:95:F5:BA:CF:EC
Certificate issuer:       /CN=97DFA5B9AAD5FA9141F4ECCECB06D72AABDB0E32
Certificate serial:       5D2D7663218C5A7823478D54D71CD66472848720
Authority key identifier: 97:DF:A5:B9:AA:D5:FA:91:41:F4:EC:CE:CB:06:D7:2A:AB:DB:0E:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97DFA5B9AAD5FA9141F4ECCECB06D72AABDB0E32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/2/323830343a353637343a383030303a3a2f33332d3333203d3e20323637393939.roa
Signing time:             Thu 04 Apr 2024 23:08:48 +0000
ROA not before:           Thu 04 Apr 2024 23:03:48 +0000
ROA not after:            Thu 03 Apr 2025 23:08:48 +0000
asID:                     267999
IP address blocks:        2804:5674:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:2d:76:63:21:8c:5a:78:23:47:8d:54:d7:1c:d6:64:72:84:87:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97DFA5B9AAD5FA9141F4ECCECB06D72AABDB0E32
        Validity
            Not Before: Apr  4 23:03:48 2024 GMT
            Not After : Apr  3 23:08:48 2025 GMT
        Subject: CN=7CE31A1BEFAB82AA0E31CEE95BF82395F5BACFEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:56:a1:9a:0e:f4:2b:89:3d:a7:f7:07:b5:83:
                    2f:b6:04:2d:26:4f:82:a5:f6:13:c6:d6:71:51:9c:
                    6e:39:36:c5:9f:c9:18:9d:4c:e2:4b:38:8e:0a:7f:
                    97:83:5e:fb:f6:40:48:e3:f7:a8:62:fa:c1:e1:25:
                    a5:8e:69:f4:a3:f1:aa:c4:38:02:7c:9e:f7:e0:0d:
                    66:55:48:88:b6:2b:a0:a2:3d:90:46:b9:68:14:7c:
                    2a:2a:32:3c:7b:63:48:9f:51:f1:70:41:ab:9b:f0:
                    42:41:53:d9:17:17:c4:f8:97:11:6d:d4:eb:4b:21:
                    9a:9e:e2:21:eb:23:af:c2:31:11:63:44:9b:f5:93:
                    aa:02:aa:12:7c:d5:a7:3e:b7:0d:fb:3c:e1:90:05:
                    7a:91:f1:27:53:ea:d5:75:52:39:5f:b8:2f:94:f4:
                    90:9e:bd:0f:28:e2:0f:1b:2c:a9:1e:54:a1:e8:96:
                    29:a3:93:d6:f9:83:0b:c4:7c:4d:2e:e8:41:f5:fe:
                    35:e4:86:7f:d8:59:12:d6:f3:de:b4:c9:f1:c3:bc:
                    b9:8b:0b:d9:51:de:49:cd:27:47:91:e5:b7:18:55:
                    15:b4:94:ae:eb:84:3d:ae:8c:dc:cf:f9:3d:76:c9:
                    c0:09:c5:26:ca:9e:45:e1:6e:38:4e:43:22:7e:59:
                    ed:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E3:1A:1B:EF:AB:82:AA:0E:31:CE:E9:5B:F8:23:95:F5:BA:CF:EC
            X509v3 Authority Key Identifier:
                keyid:97:DF:A5:B9:AA:D5:FA:91:41:F4:EC:CE:CB:06:D7:2A:AB:DB:0E:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/2/97DFA5B9AAD5FA9141F4ECCECB06D72AABDB0E32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97DFA5B9AAD5FA9141F4ECCECB06D72AABDB0E32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/2/323830343a353637343a383030303a3a2f33332d3333203d3e20323637393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5674:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         2c:e1:92:e1:8e:4b:46:a0:f1:43:4f:51:ba:53:43:1d:dc:c2:
         f2:71:c7:ee:9c:60:0b:91:36:e4:81:cb:cc:f7:1b:98:e8:18:
         3c:a0:5b:a1:ed:09:b6:02:42:cc:fa:29:27:97:1e:92:06:f0:
         80:4a:7a:09:55:e0:29:bf:07:1d:c4:44:9e:9c:62:18:cd:60:
         aa:f6:d6:46:18:c2:cc:bb:eb:26:80:89:5c:92:93:5a:fa:13:
         33:5f:ab:21:b4:d8:8b:08:c8:4c:80:a5:a6:2d:34:68:6c:3b:
         83:b3:de:83:ff:52:a2:d1:31:db:31:7f:60:25:b6:03:77:d0:
         b5:9d:21:48:6a:af:51:61:42:c4:9d:c6:55:02:df:91:57:2a:
         b5:d9:f4:27:58:54:ce:0a:82:c1:87:c2:4e:e1:b4:48:dd:ad:
         46:19:fd:f2:24:23:f3:42:2a:4b:66:53:c4:fa:9e:c3:1e:0d:
         f1:34:a7:ad:f5:bf:b1:2b:8b:1a:f7:54:c9:dc:60:6c:48:46:
         e8:17:e5:73:ba:81:fc:42:68:cf:84:6a:34:65:85:5e:ee:5e:
         7b:ad:72:d3:0e:05:09:29:39:68:87:ad:b1:89:08:57:28:27:
         c3:1f:b1:bc:aa:7c:a1:28:8d:b1:2c:02:c8:8c:0b:bf:b4:31:
         a3:06:b5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----