Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/1/323830343a373131303a393430303a3a2f34382d3438203d3e20323730373634.roa
File:                     323830343a373131303a393430303a3a2f34382d3438203d3e20323730373634.roa (raw, json)
Hash identifier:          nv40uDt1iJPr8lYSulkx1F+VOGywMcygpAM/s/fOil4=
Subject key identifier:   02:01:FC:B5:50:DC:5E:98:12:47:35:DC:9A:ED:45:BB:B5:07:DD:2A
Certificate issuer:       /CN=6F24DF4A84CC21337AB0CA314C265DC9D5DDA9A0
Certificate serial:       68CA7FEED273BFEE832922F9491B252D09232AF7
Authority key identifier: 6F:24:DF:4A:84:CC:21:33:7A:B0:CA:31:4C:26:5D:C9:D5:DD:A9:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F24DF4A84CC21337AB0CA314C265DC9D5DDA9A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/1/323830343a373131303a393430303a3a2f34382d3438203d3e20323730373634.roa
Signing time:             Thu 04 Apr 2024 18:05:31 +0000
ROA not before:           Thu 04 Apr 2024 18:00:31 +0000
ROA not after:            Thu 03 Apr 2025 18:05:31 +0000
asID:                     270764
IP address blocks:        2804:7110:9400::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ca:7f:ee:d2:73:bf:ee:83:29:22:f9:49:1b:25:2d:09:23:2a:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F24DF4A84CC21337AB0CA314C265DC9D5DDA9A0
        Validity
            Not Before: Apr  4 18:00:31 2024 GMT
            Not After : Apr  3 18:05:31 2025 GMT
        Subject: CN=0201FCB550DC5E98124735DC9AED45BBB507DD2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f5:b6:ce:96:58:e5:fb:0c:b6:b5:0c:14:39:
                    26:7a:c3:b9:21:1e:68:53:1d:48:32:21:bb:2c:9f:
                    c5:b5:57:5a:c6:93:14:12:11:e0:40:13:76:b6:ed:
                    f3:81:72:8d:d7:9f:08:bb:ce:d1:b2:7f:ca:56:e3:
                    9c:94:4c:8e:6b:23:d9:e0:f3:53:34:6e:bc:f9:ad:
                    f4:37:d1:0a:e7:d9:34:be:85:73:68:d1:d0:35:14:
                    bc:da:3f:3d:51:a3:9f:af:8a:7e:36:34:be:20:61:
                    55:e1:b0:11:8d:58:11:2b:33:d0:21:56:dc:8a:fc:
                    aa:3b:1b:9a:19:49:3b:cf:32:44:48:3d:ce:54:ce:
                    fa:3e:15:64:7e:c7:a4:86:b9:b9:ff:c1:12:04:0b:
                    2a:f5:dd:ab:02:40:29:37:2a:b6:b7:04:02:0b:eb:
                    9a:e3:73:8c:98:0f:cd:c3:1c:49:eb:b3:b7:46:04:
                    ce:60:1b:a0:8c:36:9a:a3:a1:d3:75:c5:2d:f5:bf:
                    6f:14:18:e8:99:02:f5:b9:2a:01:89:7d:19:6f:93:
                    ed:a4:82:9e:cf:4b:4f:dd:5c:09:0a:ba:08:a6:08:
                    d3:dc:ec:2e:5f:aa:21:07:56:fa:9c:03:ce:2d:28:
                    47:ff:9c:db:1a:1b:4b:40:4f:c7:1c:7b:84:5e:ba:
                    06:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:01:FC:B5:50:DC:5E:98:12:47:35:DC:9A:ED:45:BB:B5:07:DD:2A
            X509v3 Authority Key Identifier:
                keyid:6F:24:DF:4A:84:CC:21:33:7A:B0:CA:31:4C:26:5D:C9:D5:DD:A9:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/1/6F24DF4A84CC21337AB0CA314C265DC9D5DDA9A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F24DF4A84CC21337AB0CA314C265DC9D5DDA9A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/1/323830343a373131303a393430303a3a2f34382d3438203d3e20323730373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7110:9400::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:2a:c7:11:da:19:b9:76:82:7d:ef:2d:e0:74:3d:17:2e:8e:
         62:83:40:c9:a2:74:05:3c:7d:f4:87:22:b2:04:cc:f8:3b:f0:
         ff:83:92:8a:17:6e:9d:75:90:1d:c5:a8:01:16:7c:b4:8d:17:
         53:a7:7e:9c:d2:a1:41:e7:dd:55:d3:1e:3d:8c:85:e5:85:48:
         2c:49:6f:08:b2:e2:c7:c5:23:54:9c:f6:52:cd:81:83:87:de:
         0d:41:f4:83:ee:12:72:16:40:9d:28:ea:c7:87:70:e1:ba:f3:
         05:98:e0:18:1a:80:eb:17:1a:23:29:7a:ce:2a:34:e8:73:1c:
         41:83:ec:70:9a:ba:22:6b:bc:65:ea:2d:d8:c4:de:be:f4:55:
         08:94:9b:a7:37:3b:28:62:b5:fc:e8:38:a3:8a:86:9d:8c:d2:
         18:bb:11:b5:d3:81:90:3f:3c:6e:d4:32:2d:00:e9:99:5b:46:
         51:09:5d:a6:db:18:7a:75:35:74:73:05:81:33:be:52:35:92:
         0b:dd:dd:08:89:50:49:46:aa:ad:f1:35:ad:a4:8e:a2:ea:a0:
         dd:25:bb:6a:c6:c5:ad:0c:49:e9:fa:43:58:f6:98:74:76:46:
         98:ca:1d:c8:61:12:7f:be:10:93:e4:06:4e:b4:21:39:13:60:
         34:2b:6c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----