Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ax3sGfduTBhgk2muSHiAccSTThuASzZLZ9JFTY1Law7m/0/323830343a373565633a3a2f33322d3536203d3e20323731303738.roa
File:                     323830343a373565633a3a2f33322d3536203d3e20323731303738.roa (raw, json)
Hash identifier:          qk8o3f2hSatL8YKvhIJv579smNMUEMKae0UFJT5x8Hc=
Subject key identifier:   6A:F0:CF:62:F6:56:9D:4D:0B:8E:AF:E0:F2:F5:08:D3:7D:25:A6:32
Certificate issuer:       /CN=7979B5C5D5EF0988CC5D8FF5F80CFBEAADBF96BA
Certificate serial:       06530CC111817F9A17395E630B966FCD9C4A7AB2
Authority key identifier: 79:79:B5:C5:D5:EF:09:88:CC:5D:8F:F5:F8:0C:FB:EA:AD:BF:96:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7979B5C5D5EF0988CC5D8FF5F80CFBEAADBF96BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ax3sGfduTBhgk2muSHiAccSTThuASzZLZ9JFTY1Law7m/0/323830343a373565633a3a2f33322d3536203d3e20323731303738.roa
Signing time:             Thu 01 Feb 2024 04:32:56 +0000
ROA not before:           Thu 01 Feb 2024 04:27:56 +0000
ROA not after:            Thu 30 Jan 2025 04:32:56 +0000
asID:                     271078
IP address blocks:        2804:75ec::/32 maxlen: 56

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:53:0c:c1:11:81:7f:9a:17:39:5e:63:0b:96:6f:cd:9c:4a:7a:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7979B5C5D5EF0988CC5D8FF5F80CFBEAADBF96BA
        Validity
            Not Before: Feb  1 04:27:56 2024 GMT
            Not After : Jan 30 04:32:56 2025 GMT
        Subject: CN=6AF0CF62F6569D4D0B8EAFE0F2F508D37D25A632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:35:68:5b:6f:56:8e:dc:44:04:00:95:78:b8:
                    0a:a5:f0:1c:4c:9d:71:46:26:1b:3c:38:51:19:f5:
                    3e:49:2c:52:35:2e:ff:f9:d4:50:0f:d4:75:d5:1f:
                    dc:d6:05:05:97:bc:9a:89:9f:8c:17:2c:47:49:c5:
                    60:95:a5:5a:15:4e:82:47:47:31:62:b6:82:30:f1:
                    d2:50:9c:ab:51:0c:06:e9:06:91:06:8a:e5:ca:1f:
                    8f:20:9c:ec:90:0f:e2:5b:1c:69:a6:11:3a:59:1f:
                    63:d6:f1:d4:ff:16:c9:f5:20:33:b5:08:58:65:59:
                    18:6e:e6:68:8d:03:32:91:04:ed:df:04:ec:70:b4:
                    58:b9:eb:d6:ec:f5:72:05:26:bc:04:ee:09:38:6e:
                    19:18:53:34:fb:d1:5a:08:79:77:40:27:b1:e2:8d:
                    6f:43:ab:51:a7:5e:1e:1b:c9:d6:67:84:b2:48:6d:
                    fd:5c:fc:e2:3f:00:23:be:d0:7c:34:1c:32:d9:dd:
                    f5:95:7b:4c:0a:31:d2:7a:9f:99:19:aa:8d:f4:7a:
                    10:0d:11:a1:0b:7c:b6:57:d0:d5:b5:56:2c:67:02:
                    c3:15:5f:64:e7:2b:ba:41:f2:4a:e3:c7:66:1e:8b:
                    09:85:1d:9a:c0:82:a8:1c:25:74:52:11:21:ee:c4:
                    64:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F0:CF:62:F6:56:9D:4D:0B:8E:AF:E0:F2:F5:08:D3:7D:25:A6:32
            X509v3 Authority Key Identifier:
                keyid:79:79:B5:C5:D5:EF:09:88:CC:5D:8F:F5:F8:0C:FB:EA:AD:BF:96:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ax3sGfduTBhgk2muSHiAccSTThuASzZLZ9JFTY1Law7m/0/7979B5C5D5EF0988CC5D8FF5F80CFBEAADBF96BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7979B5C5D5EF0988CC5D8FF5F80CFBEAADBF96BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ax3sGfduTBhgk2muSHiAccSTThuASzZLZ9JFTY1Law7m/0/323830343a373565633a3a2f33322d3536203d3e20323731303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:75ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:61:5d:cf:2f:4a:c9:5f:79:87:41:05:38:5f:0a:c6:e0:d0:
         c5:c7:af:72:89:1d:fd:4c:98:ba:ac:6e:94:75:84:10:d7:40:
         2e:e4:79:76:0a:f8:8a:16:7d:8a:a1:b6:5c:25:72:b4:09:65:
         1c:ee:2b:f7:1a:b4:4b:02:a1:ee:ef:80:af:c9:b8:f7:a4:9b:
         be:62:9e:55:ae:7b:5c:af:c7:f4:bd:fc:bf:65:89:e3:d7:0f:
         d1:44:98:8d:f7:93:1f:32:96:e2:29:15:a7:eb:23:df:3a:37:
         91:61:91:aa:d4:6b:11:ac:4d:9b:31:c9:5e:a1:91:87:33:03:
         56:fa:27:ce:ff:21:87:b4:46:9c:b5:de:70:7a:92:cd:28:85:
         70:02:5c:b8:04:76:bb:5c:16:5f:ec:02:5b:0b:00:cd:bc:6a:
         e7:63:82:94:ef:7b:e4:3c:d9:62:36:6f:8e:dc:e4:10:fc:03:
         b7:9b:90:ed:c3:38:db:fe:0b:c5:28:73:70:94:a4:f8:f9:ad:
         65:fd:72:ba:ef:09:20:bf:e9:a9:53:30:46:50:b2:6c:54:a4:
         1b:b7:44:1d:3b:d9:93:4d:f5:aa:32:db:ba:a1:3b:47:24:08:
         dc:a8:dc:4f:97:f7:57:c3:03:f7:44:39:8a:da:1d:5a:07:61:
         bf:70:a3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----