Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/0/323830343a336365633a3a2f33322d3332203d3e20323636323432.roa
File:                     323830343a336365633a3a2f33322d3332203d3e20323636323432.roa (raw, json)
Hash identifier:          69nIG+QNENmC/m9cd+VZCN4uOtCfenYq00i9CqV3tyA=
Subject key identifier:   A1:41:17:52:59:8B:65:C5:25:A2:7C:B0:89:75:12:46:70:16:42:78
Certificate issuer:       /CN=1547EB99992D867A7DC9C9932309620DED3EB049
Certificate serial:       6FE86AA9F6209A2DC8777CF7DF5AF991DEBA7450
Authority key identifier: 15:47:EB:99:99:2D:86:7A:7D:C9:C9:93:23:09:62:0D:ED:3E:B0:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1547EB99992D867A7DC9C9932309620DED3EB049.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/0/323830343a336365633a3a2f33322d3332203d3e20323636323432.roa
Signing time:             Fri 22 Mar 2024 13:07:38 +0000
ROA not before:           Fri 22 Mar 2024 13:02:38 +0000
ROA not after:            Fri 21 Mar 2025 13:07:38 +0000
asID:                     266242
IP address blocks:        2804:3cec::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e8:6a:a9:f6:20:9a:2d:c8:77:7c:f7:df:5a:f9:91:de:ba:74:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1547EB99992D867A7DC9C9932309620DED3EB049
        Validity
            Not Before: Mar 22 13:02:38 2024 GMT
            Not After : Mar 21 13:07:38 2025 GMT
        Subject: CN=A1411752598B65C525A27CB08975124670164278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f6:fc:a9:56:f6:47:7b:db:b3:ed:94:62:67:
                    8e:69:94:20:4b:64:78:af:0b:5a:d0:e9:8a:60:55:
                    36:b0:22:3f:bf:3e:ad:0d:cc:68:2f:eb:6c:cf:c9:
                    1e:68:17:0d:3c:7e:5f:53:50:a4:51:54:9d:43:f7:
                    d6:c3:f5:82:7d:67:e1:4a:b0:40:5f:98:61:01:c9:
                    e9:78:fe:8a:7a:f4:fd:9e:84:4f:25:90:18:30:e2:
                    ea:c5:cf:a6:36:cf:32:c0:b2:cb:3a:26:63:98:d9:
                    f2:01:d6:d0:ab:96:ba:14:83:3a:64:be:3f:b4:52:
                    ca:8d:04:8d:c8:6c:4b:df:b8:b2:1b:57:4c:a5:65:
                    c8:c5:27:17:2b:b1:64:a7:12:0c:88:3a:04:50:04:
                    e5:81:c0:e8:54:91:34:c4:a2:73:44:2b:3a:cf:63:
                    60:c3:23:36:3d:17:b1:76:04:f6:a6:a8:98:6b:59:
                    3e:26:d2:9d:61:bc:94:c2:1d:39:4c:fe:28:6d:49:
                    7e:37:30:17:f0:35:30:ca:47:1f:5e:a0:6b:2b:d8:
                    2c:58:d6:37:62:79:42:28:d8:f1:97:2b:b7:ee:15:
                    5a:0f:d2:a5:ed:b7:6d:64:98:21:d2:d2:3b:44:22:
                    9c:37:41:e0:95:4b:4e:33:49:b1:ea:32:c3:d9:5d:
                    2e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:41:17:52:59:8B:65:C5:25:A2:7C:B0:89:75:12:46:70:16:42:78
            X509v3 Authority Key Identifier:
                keyid:15:47:EB:99:99:2D:86:7A:7D:C9:C9:93:23:09:62:0D:ED:3E:B0:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/0/1547EB99992D867A7DC9C9932309620DED3EB049.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1547EB99992D867A7DC9C9932309620DED3EB049.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/0/323830343a336365633a3a2f33322d3332203d3e20323636323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3cec::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:e6:36:d0:3c:36:19:a4:c0:aa:8c:04:e4:9f:7a:6e:94:26:
         a7:70:49:02:70:6b:e6:51:5e:de:7c:47:7e:dc:fa:73:34:a0:
         5c:b3:88:38:f6:c6:63:d5:67:64:96:30:18:fb:a0:98:bc:55:
         4f:00:b9:b1:f4:f8:42:d3:07:71:59:88:dd:82:5e:af:ce:8b:
         6c:06:89:20:8c:c0:83:21:6e:b1:50:c8:a4:b6:d4:ae:f9:5d:
         e2:ad:f4:50:e0:27:fe:e4:02:92:63:ca:55:90:f3:c3:54:55:
         d3:23:bf:56:70:aa:ca:28:df:54:23:04:00:8c:67:be:19:84:
         2c:fc:ad:4e:7b:ac:d1:ae:88:4f:b4:5c:8a:7a:44:43:6b:6b:
         c0:70:28:47:69:e4:fd:87:52:59:e9:d2:85:ec:6e:55:98:a7:
         87:b9:73:e0:c7:1a:44:9b:4e:e2:c4:b8:b4:d7:f0:62:f0:66:
         62:c1:01:99:c8:f1:4c:a2:f5:85:bc:45:f9:2f:0e:4e:85:0b:
         a1:a4:65:58:61:00:02:fd:e6:43:54:fd:de:87:74:f2:2d:e7:
         1b:2c:a8:0b:d3:bb:bc:dc:fc:c9:56:66:3c:83:2c:65:fb:a9:
         b7:37:8f:4b:8a:d6:d6:2c:53:8b:a3:68:77:58:b3:34:80:70:
         42:ff:09:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----