Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/323830343a363565633a3a2f33322d3438203d3e20323639353233.roa
File:                     323830343a363565633a3a2f33322d3438203d3e20323639353233.roa (raw, json)
Hash identifier:          jTN8bcFyAsZ2u9cka4R+9V75FrLZkxkEbM2jhiobcuU=
Subject key identifier:   3C:31:EA:EF:27:75:A2:56:B1:AB:B7:3B:F1:21:7F:A8:CE:B8:61:91
Certificate issuer:       /CN=870C2AD8E67C6E1CC63AAB945280201586BAC84A
Certificate serial:       17682742A54AF4879CE56CDD8C12258B4952DDBD
Authority key identifier: 87:0C:2A:D8:E6:7C:6E:1C:C6:3A:AB:94:52:80:20:15:86:BA:C8:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/870C2AD8E67C6E1CC63AAB945280201586BAC84A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/323830343a363565633a3a2f33322d3438203d3e20323639353233.roa
Signing time:             Thu 28 Mar 2024 19:01:26 +0000
ROA not before:           Thu 28 Mar 2024 18:56:26 +0000
ROA not after:            Thu 27 Mar 2025 19:01:26 +0000
asID:                     269523
IP address blocks:        2804:65ec::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:68:27:42:a5:4a:f4:87:9c:e5:6c:dd:8c:12:25:8b:49:52:dd:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870C2AD8E67C6E1CC63AAB945280201586BAC84A
        Validity
            Not Before: Mar 28 18:56:26 2024 GMT
            Not After : Mar 27 19:01:26 2025 GMT
        Subject: CN=3C31EAEF2775A256B1ABB73BF1217FA8CEB86191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:50:3b:f3:e9:8a:53:87:a1:3b:91:45:82:d4:
                    c2:09:ab:14:14:b9:f7:97:a4:f5:3f:c6:18:f5:7a:
                    fa:a7:db:a2:19:51:5a:b9:52:07:d0:70:5b:34:42:
                    b3:33:e1:85:9a:40:15:38:c9:45:ba:24:ac:3d:77:
                    98:ec:b0:dd:57:91:bc:f3:d5:6f:1b:2c:f4:1a:37:
                    c8:60:fe:3e:0b:0a:80:ff:97:1c:a7:4d:14:e2:34:
                    e5:24:1f:c0:bc:80:60:1d:32:4e:9f:46:16:da:76:
                    b6:57:fe:0f:de:b3:9b:28:86:d7:b9:6b:6b:5f:9f:
                    d7:d4:ad:cf:04:3a:87:6d:45:c1:79:62:c1:b0:1e:
                    c1:24:2b:fc:5a:e3:87:1c:20:8a:52:26:07:cc:77:
                    af:eb:eb:5b:a6:c8:0f:43:04:91:1d:24:9b:8d:ab:
                    f8:7d:c3:d7:11:2f:c6:84:ea:45:57:cb:d5:22:70:
                    b3:9d:e1:e0:3e:a6:f3:10:a7:36:09:67:96:14:82:
                    be:99:16:6a:a0:df:34:2d:7d:af:64:8b:7f:b1:e5:
                    cf:26:64:18:3e:59:e5:8d:37:24:54:29:73:45:4c:
                    4f:7f:da:89:d1:97:57:b4:65:b4:08:2a:4f:b7:d5:
                    44:48:92:c6:61:a8:b8:b6:91:b8:32:79:62:73:bb:
                    94:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:31:EA:EF:27:75:A2:56:B1:AB:B7:3B:F1:21:7F:A8:CE:B8:61:91
            X509v3 Authority Key Identifier:
                keyid:87:0C:2A:D8:E6:7C:6E:1C:C6:3A:AB:94:52:80:20:15:86:BA:C8:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/870C2AD8E67C6E1CC63AAB945280201586BAC84A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/870C2AD8E67C6E1CC63AAB945280201586BAC84A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/323830343a363565633a3a2f33322d3438203d3e20323639353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:f4:35:40:77:6b:0a:87:eb:80:db:ab:19:cb:2d:dc:1d:53:
         d5:a6:df:a2:99:b3:e7:50:58:1d:02:8b:a7:9a:86:e1:71:d4:
         51:62:74:00:ae:2f:ba:c1:cd:e2:14:33:88:9f:20:62:06:02:
         93:8c:ab:87:e7:94:3b:19:49:e1:b4:d8:10:9f:7b:51:91:93:
         4f:ae:48:28:af:10:0a:9e:5a:76:cf:16:40:84:30:27:05:1f:
         df:dc:a2:77:72:e2:7b:e4:30:ab:0e:34:53:c8:02:3e:78:c6:
         50:18:f2:13:80:4a:3c:cf:ac:41:92:9d:72:48:8e:25:bf:38:
         d7:e4:52:ed:53:4a:14:4a:63:cf:46:4e:3f:59:91:a6:db:ed:
         d7:de:78:47:21:7e:80:17:69:6e:9b:e9:c2:58:3e:30:83:0e:
         86:6b:ce:bc:c0:50:1b:3d:3b:00:f0:fa:39:21:3e:58:a3:4b:
         4f:a4:1c:ca:f5:60:51:3f:09:c6:64:be:a4:c2:7c:6a:88:90:
         9a:91:7d:39:79:f9:cd:dd:f0:f7:09:98:77:5e:48:9f:a3:11:
         10:50:fd:a8:dd:82:55:95:97:e7:d4:41:b7:04:0e:47:cd:1a:
         b9:bb:67:b9:ba:66:ff:2b:74:d1:55:fe:a7:fb:02:77:2a:6e:
         55:9f:7b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----