Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/0/323830343a376436303a3a2f33322d3332203d3e20323731353537.roa
File:                     323830343a376436303a3a2f33322d3332203d3e20323731353537.roa (raw, json)
Hash identifier:          EZPIIC9wb2LrjOXTEgkokGKyc2rigfYsBucSdfmr8jg=
Subject key identifier:   99:55:D4:AB:7D:BC:62:85:01:E1:5D:0A:D7:1C:A1:3C:F3:32:9B:BE
Certificate issuer:       /CN=66B57D11AE2584EBFA8AF72A96225EBCD62CA04D
Certificate serial:       7063361E94AF4C659D92CF0005FE0676DEC439FF
Authority key identifier: 66:B5:7D:11:AE:25:84:EB:FA:8A:F7:2A:96:22:5E:BC:D6:2C:A0:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66B57D11AE2584EBFA8AF72A96225EBCD62CA04D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/0/323830343a376436303a3a2f33322d3332203d3e20323731353537.roa
Signing time:             Sun 10 Mar 2024 03:55:15 +0000
ROA not before:           Sun 10 Mar 2024 03:50:15 +0000
ROA not after:            Sun 09 Mar 2025 03:55:15 +0000
asID:                     271557
IP address blocks:        2804:7d60::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:63:36:1e:94:af:4c:65:9d:92:cf:00:05:fe:06:76:de:c4:39:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66B57D11AE2584EBFA8AF72A96225EBCD62CA04D
        Validity
            Not Before: Mar 10 03:50:15 2024 GMT
            Not After : Mar  9 03:55:15 2025 GMT
        Subject: CN=9955D4AB7DBC628501E15D0AD71CA13CF3329BBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c0:18:41:0c:32:e3:ac:14:6b:cf:0c:f4:53:
                    d5:99:42:ec:b3:dd:61:16:35:23:0f:24:ea:6d:a1:
                    48:01:18:58:a4:4b:dd:a5:18:e7:3f:36:a6:a5:ae:
                    7f:3a:00:dc:ba:4f:99:60:82:8e:00:79:34:9f:c9:
                    5f:86:12:7d:48:3a:08:e2:b2:7a:b6:a2:24:32:cc:
                    52:ba:6c:10:fc:01:2c:ae:3f:6b:7e:60:6d:d8:0f:
                    7a:fa:91:b5:01:94:da:47:e9:ce:84:04:ab:1c:87:
                    aa:2a:41:4e:46:67:37:b6:4a:c7:d1:6a:af:e7:69:
                    19:e0:ee:ed:2d:d5:fc:07:f5:96:27:46:bb:93:a9:
                    a9:85:84:ad:45:5d:17:8a:ca:e1:e5:e1:53:67:0a:
                    6e:69:cd:42:c1:c1:65:6d:32:03:f5:a7:33:c8:15:
                    45:5c:b9:af:38:ae:f9:ce:8f:3b:56:18:b8:15:4a:
                    d8:96:e9:f6:e0:22:d3:86:ed:81:4f:85:16:64:26:
                    cd:fe:0a:e2:43:30:70:e1:52:c8:d4:7a:80:fc:bf:
                    ce:be:b4:3f:48:3c:df:33:e5:f7:a6:0b:91:52:30:
                    e7:45:72:57:eb:33:08:87:27:50:42:98:61:52:42:
                    a2:f5:62:29:c6:d9:3e:d9:e1:3e:aa:8f:75:37:59:
                    66:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:55:D4:AB:7D:BC:62:85:01:E1:5D:0A:D7:1C:A1:3C:F3:32:9B:BE
            X509v3 Authority Key Identifier:
                keyid:66:B5:7D:11:AE:25:84:EB:FA:8A:F7:2A:96:22:5E:BC:D6:2C:A0:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/0/66B57D11AE2584EBFA8AF72A96225EBCD62CA04D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66B57D11AE2584EBFA8AF72A96225EBCD62CA04D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/0/323830343a376436303a3a2f33322d3332203d3e20323731353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d60::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:b4:7f:bd:6f:44:40:94:90:88:58:33:b8:af:ce:18:3d:44:
         91:29:ef:6a:c2:e1:2a:00:3c:bb:e0:32:9f:a2:7c:e3:b3:a7:
         b4:77:4b:b8:2c:61:d7:fc:83:56:40:9f:27:bb:08:69:cb:23:
         27:3a:57:fa:73:4a:34:d2:50:cb:f4:a7:4f:4e:30:a1:e1:3c:
         b1:38:09:b9:9b:77:18:46:a6:62:a6:fa:f4:ac:6e:16:fe:b0:
         d9:5f:2e:11:73:92:c7:e1:65:7e:b9:f3:24:d0:79:2a:da:d9:
         83:d6:e5:27:4f:85:b2:db:df:92:90:a0:84:75:ed:b3:bb:ca:
         ff:78:cf:24:08:99:f6:6f:3a:9b:7e:09:15:02:70:4f:41:c7:
         26:94:15:e5:9f:80:3a:70:86:d3:87:d1:fd:04:cf:26:4f:97:
         c0:c2:47:53:9e:f8:ee:71:38:c9:4c:e6:fb:f0:d0:fc:3a:df:
         38:cb:5b:bb:96:6a:da:2d:ac:9e:34:2a:9d:e0:b2:b4:42:74:
         8a:8e:0d:50:1c:f5:f2:fd:f6:a3:72:92:5d:7f:bf:0b:00:3a:
         2e:b2:ab:0c:82:7f:d1:42:57:90:19:ed:07:d0:af:7f:56:be:
         0d:e6:0f:2e:b6:74:28:7f:54:a6:4c:f3:9f:a1:c1:b2:00:d3:
         9a:ce:87:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----