Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Az219Yhr1Lzsz8sSNVyCQ5oR1Z7zwRNSjSaMZgB3CsXo/1/323830343a356566303a3a2f33322d3438203d3e20323639303636.roa
File:                     323830343a356566303a3a2f33322d3438203d3e20323639303636.roa (raw, json)
Hash identifier:          wvksw2RFy4x59+KU+OwMn1U7Q9Otrfua01uPOV8asVo=
Subject key identifier:   38:37:DF:19:BB:93:9D:C2:7F:C4:95:99:30:89:1B:64:EC:0E:E0:28
Certificate issuer:       /CN=F1E9BE3BA021C3ACDB029BA7392CC7CF6FD4E5CE
Certificate serial:       560C47697E237D3DB544C78F6D12614479F016D6
Authority key identifier: F1:E9:BE:3B:A0:21:C3:AC:DB:02:9B:A7:39:2C:C7:CF:6F:D4:E5:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F1E9BE3BA021C3ACDB029BA7392CC7CF6FD4E5CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Az219Yhr1Lzsz8sSNVyCQ5oR1Z7zwRNSjSaMZgB3CsXo/1/323830343a356566303a3a2f33322d3438203d3e20323639303636.roa
Signing time:             Wed 10 Apr 2024 23:15:06 +0000
ROA not before:           Wed 10 Apr 2024 23:10:06 +0000
ROA not after:            Wed 09 Apr 2025 23:15:06 +0000
asID:                     269066
IP address blocks:        2804:5ef0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:0c:47:69:7e:23:7d:3d:b5:44:c7:8f:6d:12:61:44:79:f0:16:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1E9BE3BA021C3ACDB029BA7392CC7CF6FD4E5CE
        Validity
            Not Before: Apr 10 23:10:06 2024 GMT
            Not After : Apr  9 23:15:06 2025 GMT
        Subject: CN=3837DF19BB939DC27FC4959930891B64EC0EE028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:f9:76:31:8b:59:d6:67:b5:d6:6b:13:4f:0e:
                    24:7a:9c:ca:a6:2a:27:86:c5:78:d2:5f:80:6f:a3:
                    30:59:36:35:39:a4:e8:02:00:f3:46:de:73:84:f5:
                    e4:ea:1a:70:73:f5:bf:07:30:de:c9:7a:2d:70:d1:
                    b2:39:2d:3e:ea:cf:f6:fe:af:95:32:27:65:61:c2:
                    a7:de:c4:6f:22:5e:bc:45:c1:a6:1e:34:54:f8:3d:
                    e7:b6:b9:04:9e:10:ff:62:8a:d4:e0:cb:60:18:84:
                    79:30:5e:f3:c5:50:f7:98:e9:d6:ed:99:bf:d4:75:
                    31:58:db:7b:a5:54:7f:02:3d:77:d8:44:85:49:71:
                    6c:b7:8a:ee:5c:26:ae:36:bb:8c:52:0a:f0:9b:99:
                    95:dc:ea:30:a2:1a:dc:a3:aa:31:bf:21:f5:c8:11:
                    3d:ed:c4:0b:49:5c:92:fb:33:ff:55:2a:55:e8:4e:
                    35:92:90:13:1a:82:8f:3e:87:32:a9:69:27:5c:56:
                    3b:35:97:c5:05:77:d5:6e:96:bc:cc:67:0f:08:9b:
                    d4:d3:26:29:ce:93:dd:d7:36:f5:49:dd:b1:89:00:
                    82:d7:24:87:a1:40:36:2f:aa:3e:86:bc:df:b1:eb:
                    62:bd:7d:37:35:d0:33:83:cc:5d:11:78:d5:9c:b7:
                    34:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:37:DF:19:BB:93:9D:C2:7F:C4:95:99:30:89:1B:64:EC:0E:E0:28
            X509v3 Authority Key Identifier:
                keyid:F1:E9:BE:3B:A0:21:C3:AC:DB:02:9B:A7:39:2C:C7:CF:6F:D4:E5:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Az219Yhr1Lzsz8sSNVyCQ5oR1Z7zwRNSjSaMZgB3CsXo/1/F1E9BE3BA021C3ACDB029BA7392CC7CF6FD4E5CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F1E9BE3BA021C3ACDB029BA7392CC7CF6FD4E5CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Az219Yhr1Lzsz8sSNVyCQ5oR1Z7zwRNSjSaMZgB3CsXo/1/323830343a356566303a3a2f33322d3438203d3e20323639303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ef0::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:e1:f7:b3:37:20:95:1d:23:3a:d7:cf:00:96:58:fc:ad:a9:
         69:ab:bd:a7:f2:25:2e:7a:e1:2c:58:7f:92:6a:a5:0e:6c:c2:
         a6:29:a2:43:e0:4e:10:f9:98:26:a8:a3:70:0b:bc:77:9c:ed:
         df:f1:1c:80:cc:02:71:85:70:df:7b:5b:91:53:28:62:a4:b6:
         85:dc:44:2d:16:c2:c9:00:2b:63:a2:1d:36:8f:5a:d2:e6:fe:
         b6:44:b4:48:d6:8b:59:60:e4:c3:80:90:25:c6:06:da:62:b2:
         3d:5f:96:bc:4e:90:1b:cf:ae:66:0e:5b:d5:b1:54:c2:55:b0:
         52:67:42:9d:d9:70:ef:1a:ca:07:43:2f:a4:39:12:4c:d4:37:
         15:e7:b4:25:1b:8b:f3:10:4b:46:bc:3b:cd:85:11:14:34:81:
         55:61:62:a4:b5:58:9b:46:7c:28:0d:3f:36:d7:d0:63:fe:6a:
         8c:44:be:d9:93:5b:2f:62:23:3e:7a:6e:4f:2d:bc:bd:a9:af:
         2a:f2:3c:e8:ca:b9:1f:ed:63:60:83:dd:71:88:e5:3f:03:50:
         a0:8b:49:d2:08:8f:a9:4e:b3:88:ae:2f:be:53:9f:18:a7:a9:
         06:37:9a:8f:21:a3:dc:de:8d:d3:fd:88:be:aa:ee:e6:64:f4:
         9a:8e:1b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----