Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/323830343a323734383a3a2f33322d313238203d3e20323633383931.roa
File:                     323830343a323734383a3a2f33322d313238203d3e20323633383931.roa (raw, json)
Hash identifier:          JevXfCSaSRwqQ9a5OvFhZdcXx94M8rfoa5nSi8IGF8Y=
Subject key identifier:   90:8F:83:9C:FF:34:00:59:B3:FA:77:B8:BD:09:C4:1F:31:41:14:DA
Certificate issuer:       /CN=2A331FF1DB9B9F1C7AD27AFEFDFD156E6BB24D99
Certificate serial:       128E1E723F731534234431B17F949E5342221079
Authority key identifier: 2A:33:1F:F1:DB:9B:9F:1C:7A:D2:7A:FE:FD:FD:15:6E:6B:B2:4D:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A331FF1DB9B9F1C7AD27AFEFDFD156E6BB24D99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/323830343a323734383a3a2f33322d313238203d3e20323633383931.roa
Signing time:             Thu 27 Jun 2024 15:41:29 +0000
ROA not before:           Thu 27 Jun 2024 15:36:29 +0000
ROA not after:            Thu 26 Jun 2025 15:41:29 +0000
asID:                     263891
IP address blocks:        2804:2748::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:8e:1e:72:3f:73:15:34:23:44:31:b1:7f:94:9e:53:42:22:10:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A331FF1DB9B9F1C7AD27AFEFDFD156E6BB24D99
        Validity
            Not Before: Jun 27 15:36:29 2024 GMT
            Not After : Jun 26 15:41:29 2025 GMT
        Subject: CN=908F839CFF340059B3FA77B8BD09C41F314114DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0a:3f:94:6d:c4:b8:cd:79:24:d9:44:22:b5:
                    02:59:92:47:45:c6:fa:80:69:f6:dc:06:c6:99:c6:
                    b0:77:1c:e5:57:14:de:10:1f:a2:e0:6a:29:7d:27:
                    17:8e:5e:a8:3f:59:76:1f:f0:ee:76:3b:40:72:1c:
                    fb:44:3f:27:0a:ef:29:cb:5b:dd:90:94:0a:56:b1:
                    90:33:ca:d9:35:2e:1f:63:4d:85:b0:51:90:43:b3:
                    e8:a5:77:50:b7:b5:5f:77:46:b7:e4:00:04:de:b8:
                    74:37:bd:81:e7:34:75:1d:8e:b8:ae:b0:58:2c:e3:
                    85:cc:35:7b:41:9e:16:f0:03:b5:ff:60:2d:c8:d3:
                    49:c3:66:f4:18:ec:9a:04:29:a6:f4:a7:26:ab:d3:
                    2a:d9:ab:c2:d5:e5:98:6a:6e:f5:fa:4c:c1:c6:f1:
                    c2:8b:c4:48:8d:e7:b9:24:f8:67:7c:e3:d7:ae:93:
                    3f:12:c0:5e:73:90:4a:e1:4a:00:d8:db:f1:11:f6:
                    64:24:56:f4:dd:0f:fa:ff:a3:22:4f:d0:12:3b:b9:
                    e4:04:f1:ca:6d:7d:e5:02:c5:e8:3f:1f:78:12:a6:
                    bf:13:5c:c6:97:42:d6:6d:fc:23:04:a2:57:4d:38:
                    3d:09:11:6e:f3:d8:f8:62:1b:80:73:91:61:2c:52:
                    ca:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:8F:83:9C:FF:34:00:59:B3:FA:77:B8:BD:09:C4:1F:31:41:14:DA
            X509v3 Authority Key Identifier:
                keyid:2A:33:1F:F1:DB:9B:9F:1C:7A:D2:7A:FE:FD:FD:15:6E:6B:B2:4D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/2A331FF1DB9B9F1C7AD27AFEFDFD156E6BB24D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A331FF1DB9B9F1C7AD27AFEFDFD156E6BB24D99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/323830343a323734383a3a2f33322d313238203d3e20323633383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2748::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:d8:1c:45:86:25:4a:94:c1:32:95:6a:34:bb:5a:fd:0a:92:
         8e:6e:30:6a:b0:e8:19:80:ce:37:28:3e:62:74:0e:33:62:cd:
         2f:7f:92:f6:d1:2a:ad:75:d8:cc:55:e9:93:d0:f8:48:5a:58:
         85:f3:df:c9:eb:18:18:9d:d7:ab:2c:3d:f7:15:a1:f4:9e:c6:
         06:2b:98:34:e5:ba:3e:fe:6b:6f:73:21:b4:d5:22:c6:9b:81:
         a2:0f:54:48:b1:8a:e3:50:8e:be:db:6a:e9:b7:57:39:e1:b1:
         a0:8f:1a:d0:5b:e6:fd:f0:6f:44:84:45:e9:08:a3:e7:bb:bb:
         77:ba:0d:79:78:54:1c:b9:3a:05:f4:1e:86:0b:3c:9b:ab:4d:
         4f:b6:91:fa:68:85:86:79:93:f1:55:a1:8a:88:86:ca:cf:a8:
         a8:b1:84:ac:e3:40:c9:6c:31:e5:43:3c:2d:b2:dd:b7:59:81:
         ae:f1:a2:f7:84:6b:81:ac:87:44:a0:5a:3f:4b:93:cd:41:b2:
         3c:ee:b8:99:db:53:2e:4a:26:9f:1e:2c:b3:3e:f0:09:11:57:
         6f:bc:8c:88:c3:8e:81:3c:8c:21:ea:ba:ae:70:b6:0b:bb:e6:
         10:bd:7e:8f:7f:bc:4c:2d:2f:70:a3:54:c3:f7:f1:c4:7b:e1:
         b9:eb:56:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----