Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/0/323830343a376336303a3a2f33322d3332203d3e20323731343932.roa
File:                     323830343a376336303a3a2f33322d3332203d3e20323731343932.roa (raw, json)
Hash identifier:          W96DJ25Xd+DhuVj+llCK4Mwc06buU54scoEMUwxVePU=
Subject key identifier:   22:EB:6F:48:44:C9:98:A0:BF:1A:E2:2F:17:44:B6:58:DE:06:B9:FC
Certificate issuer:       /CN=C0EF709048855BA9C15EDC1FB1E07C8C74D4212F
Certificate serial:       2B17FA65D8A0D67014ADE0734AA9493831EBB34D
Authority key identifier: C0:EF:70:90:48:85:5B:A9:C1:5E:DC:1F:B1:E0:7C:8C:74:D4:21:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C0EF709048855BA9C15EDC1FB1E07C8C74D4212F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/0/323830343a376336303a3a2f33322d3332203d3e20323731343932.roa
Signing time:             Wed 29 Nov 2023 17:32:54 +0000
ROA not before:           Wed 29 Nov 2023 17:27:54 +0000
ROA not after:            Wed 27 Nov 2024 17:32:54 +0000
asID:                     271492
IP address blocks:        2804:7c60::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:17:fa:65:d8:a0:d6:70:14:ad:e0:73:4a:a9:49:38:31:eb:b3:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0EF709048855BA9C15EDC1FB1E07C8C74D4212F
        Validity
            Not Before: Nov 29 17:27:54 2023 GMT
            Not After : Nov 27 17:32:54 2024 GMT
        Subject: CN=22EB6F4844C998A0BF1AE22F1744B658DE06B9FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1e:17:65:b8:09:ef:5a:db:8a:44:64:cd:1f:
                    63:30:d7:34:bb:93:4f:ca:a4:1a:5e:3a:fd:86:3e:
                    ad:bf:ef:3a:70:eb:88:ed:c7:f6:21:8a:9e:58:0f:
                    35:08:e8:0b:49:6f:1b:d5:0e:74:18:11:06:7f:3b:
                    db:de:e7:f8:18:64:af:ce:09:7b:85:75:a9:02:fb:
                    e0:d7:42:01:4d:2a:d9:9d:e5:97:3f:c8:76:fa:99:
                    46:90:52:af:87:ac:f9:d6:bd:8c:ef:4a:20:63:dd:
                    7f:39:da:64:6e:2a:00:8c:06:06:d7:8a:fa:44:b5:
                    30:4f:6c:80:82:5c:30:6b:35:7f:69:c9:7c:e3:84:
                    e5:f4:0c:8d:2b:6d:d9:c8:1c:11:92:6a:6b:73:79:
                    16:9b:fe:e9:88:0e:bd:86:4c:98:52:45:c5:67:07:
                    7e:92:39:c0:d1:e5:fc:ca:02:96:77:da:32:60:9d:
                    f2:5d:de:8f:53:d7:13:14:98:18:4e:53:16:32:33:
                    17:b9:2c:e2:a1:ad:cc:23:a9:6e:2d:81:08:7f:c7:
                    38:a4:fe:ac:0a:32:70:a9:22:73:13:50:a1:f9:b5:
                    1e:72:fa:85:54:a8:2c:0f:7c:9b:4d:ae:26:2f:72:
                    9e:22:1e:42:9b:e1:bb:45:81:7d:81:cb:f9:2a:b1:
                    8a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:EB:6F:48:44:C9:98:A0:BF:1A:E2:2F:17:44:B6:58:DE:06:B9:FC
            X509v3 Authority Key Identifier:
                keyid:C0:EF:70:90:48:85:5B:A9:C1:5E:DC:1F:B1:E0:7C:8C:74:D4:21:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/0/C0EF709048855BA9C15EDC1FB1E07C8C74D4212F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C0EF709048855BA9C15EDC1FB1E07C8C74D4212F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/0/323830343a376336303a3a2f33322d3332203d3e20323731343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c60::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:bb:94:11:f1:3c:40:f8:df:43:8a:bd:4f:40:a4:a3:c9:23:
         fd:b7:ad:b6:4a:b3:e7:87:33:34:03:08:f5:0e:ab:81:d0:ee:
         7c:7a:10:b4:c8:2c:50:75:af:2a:72:b1:33:1d:7b:5d:bb:89:
         6a:11:10:b2:09:a1:07:1c:bd:9b:9c:a0:08:e5:50:1c:ac:a5:
         65:d5:52:50:21:cb:7e:34:0a:db:4d:66:bd:56:58:18:18:19:
         c0:02:85:30:25:2a:92:7a:87:37:3a:cc:d0:7f:a6:52:00:bc:
         27:25:be:61:ef:69:47:bf:e5:54:1a:ca:5d:f2:59:46:3f:50:
         ba:fb:8b:a2:ec:18:97:0d:2e:0a:df:b7:36:b4:ef:94:11:e4:
         77:0f:bf:be:be:1a:7a:f7:b5:6f:c5:d7:eb:76:93:2f:33:2a:
         d5:3b:f4:d9:f4:ab:78:a6:9a:71:5d:3e:fc:08:2d:fe:e9:52:
         18:b8:40:8f:3b:2d:57:c9:64:56:8a:98:1f:11:08:17:ba:10:
         b4:5b:cd:c0:9c:a8:c4:89:5c:49:f3:f7:f2:06:1e:7e:5a:53:
         e2:93:b0:2e:34:51:d2:6a:fb:a1:9f:52:2a:09:01:3b:7e:d3:
         8a:ef:35:5c:fc:aa:16:bd:d8:ee:49:7f:1b:07:31:a3:84:d6:
         44:f6:52:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----