Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/0/323830343a386435343a3a2f33322d3335203d3e20323733333530.roa
File:                     323830343a386435343a3a2f33322d3335203d3e20323733333530.roa (raw, json)
Hash identifier:          LG7J2OwhdKa2s9YE1PMw5On7XhQyvMWbAI55/qEpssE=
Subject key identifier:   B8:04:C2:C1:5D:E3:A8:A7:BD:52:8C:BD:76:CE:DA:F0:BA:18:0D:EE
Certificate issuer:       /CN=A20BDDCD2FFBE8C8E5367693282AEBF783D80B4B
Certificate serial:       1269B3071BB2F5D7684E25BBE487F0F68FD8FF35
Authority key identifier: A2:0B:DD:CD:2F:FB:E8:C8:E5:36:76:93:28:2A:EB:F7:83:D8:0B:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A20BDDCD2FFBE8C8E5367693282AEBF783D80B4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/0/323830343a386435343a3a2f33322d3335203d3e20323733333530.roa
Signing time:             Fri 26 Jan 2024 13:09:07 +0000
ROA not before:           Fri 26 Jan 2024 13:04:07 +0000
ROA not after:            Fri 24 Jan 2025 13:09:07 +0000
asID:                     273350
IP address blocks:        2804:8d54::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:69:b3:07:1b:b2:f5:d7:68:4e:25:bb:e4:87:f0:f6:8f:d8:ff:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A20BDDCD2FFBE8C8E5367693282AEBF783D80B4B
        Validity
            Not Before: Jan 26 13:04:07 2024 GMT
            Not After : Jan 24 13:09:07 2025 GMT
        Subject: CN=B804C2C15DE3A8A7BD528CBD76CEDAF0BA180DEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2f:da:99:60:03:37:79:69:a6:bd:4a:64:60:
                    e6:c8:b3:f4:83:bd:85:81:6d:4c:6b:93:b6:e9:20:
                    6b:03:0a:eb:71:ff:27:88:59:89:82:44:da:e7:f5:
                    3c:c1:a0:c8:4b:42:15:17:39:bc:5e:10:61:bc:41:
                    c7:96:f6:50:a0:32:5b:1d:61:18:18:5b:ec:63:18:
                    21:81:9c:f7:54:07:0c:fe:17:2a:ac:b0:dc:30:9e:
                    95:b0:49:71:16:19:6f:99:9d:a4:ca:e3:93:2d:27:
                    f2:d8:a6:0f:24:f2:d1:c8:be:17:5f:d3:4b:db:c4:
                    5b:49:c6:39:f6:27:8f:c6:3a:f4:7b:7f:5f:82:7c:
                    2c:69:bb:eb:8b:68:bf:a6:9c:0b:f7:4b:75:97:c3:
                    d6:07:64:6c:3c:10:71:37:46:6a:3f:28:9f:43:bd:
                    7c:a4:18:8e:fd:72:2a:74:5c:ca:0c:4e:fa:44:e9:
                    0b:65:c3:3a:1f:b8:e5:43:f0:fb:de:05:a6:d1:fe:
                    41:6d:e8:f2:e6:78:6b:1f:dd:5a:5f:4d:77:bf:2b:
                    b1:49:2d:58:bd:52:cb:e4:1e:46:02:df:f4:ac:9f:
                    7a:ca:f1:27:a0:83:02:c4:3c:df:7b:95:70:d8:d1:
                    50:f8:13:68:93:b8:86:e1:5e:b3:35:84:50:ff:8f:
                    34:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:04:C2:C1:5D:E3:A8:A7:BD:52:8C:BD:76:CE:DA:F0:BA:18:0D:EE
            X509v3 Authority Key Identifier:
                keyid:A2:0B:DD:CD:2F:FB:E8:C8:E5:36:76:93:28:2A:EB:F7:83:D8:0B:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/0/A20BDDCD2FFBE8C8E5367693282AEBF783D80B4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A20BDDCD2FFBE8C8E5367693282AEBF783D80B4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/0/323830343a386435343a3a2f33322d3335203d3e20323733333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8d54::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:70:2a:1e:37:cb:1a:ef:56:57:f5:65:9e:62:69:9f:5f:cc:
         19:49:b3:bf:7a:e3:9e:25:fa:1a:8c:56:22:06:0a:90:20:8c:
         eb:ec:99:ed:e0:2e:ad:69:ad:13:55:5f:75:1b:82:a0:ff:ef:
         f0:ba:69:5d:36:af:6b:dd:91:73:3b:23:87:e7:ed:bd:a9:17:
         9d:f4:58:86:46:8f:ab:f3:b1:3d:2a:0d:6f:3d:d8:63:1c:70:
         a7:38:72:e2:65:e4:7b:a0:0b:5d:81:46:1c:3c:de:1c:ed:80:
         3c:8f:98:2c:f5:75:95:d7:8c:b3:3a:37:d2:d2:34:c2:e6:b9:
         6b:73:6d:67:80:46:4c:d8:98:3c:00:c9:22:84:b7:06:48:81:
         03:69:04:bb:cb:4c:ce:e2:f4:11:c2:61:74:47:2b:50:f2:54:
         a7:80:3c:43:32:dc:3a:1f:63:ad:52:ac:d6:ef:9f:6f:8d:2f:
         7e:b7:7a:2f:12:b2:1c:f7:2c:65:1c:c5:18:e6:38:b0:20:74:
         a1:e2:ee:29:16:4d:87:58:e9:c3:7a:e4:cf:be:c5:60:a1:16:
         b2:5e:d1:55:e5:fb:12:27:48:dc:b6:83:d3:c9:93:c8:77:11:
         50:b5:75:24:8b:d1:6f:02:b8:94:5c:8b:cd:65:bc:ed:77:87:
         e0:32:a6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----