Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/323830343a353831383a3a2f33322d3332203d3e20323638313036.roa
File:                     323830343a353831383a3a2f33322d3332203d3e20323638313036.roa (raw, json)
Hash identifier:          DK0ovn55H22QHq0thbBFk1uukCLI+KSKBry+KhjG+Do=
Subject key identifier:   B5:68:B8:FB:C5:18:B4:94:E6:90:D2:FA:57:98:37:5D:36:9E:B9:11
Certificate issuer:       /CN=48DFE379FC64C3F50512033477F929291FC10CF2
Certificate serial:       6755E90AD5D539864945C506E4CED9F36F61B9B7
Authority key identifier: 48:DF:E3:79:FC:64:C3:F5:05:12:03:34:77:F9:29:29:1F:C1:0C:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/48DFE379FC64C3F50512033477F929291FC10CF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/323830343a353831383a3a2f33322d3332203d3e20323638313036.roa
Signing time:             Fri 08 Mar 2024 19:47:23 +0000
ROA not before:           Fri 08 Mar 2024 19:42:23 +0000
ROA not after:            Fri 07 Mar 2025 19:47:23 +0000
asID:                     268106
IP address blocks:        2804:5818::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:55:e9:0a:d5:d5:39:86:49:45:c5:06:e4:ce:d9:f3:6f:61:b9:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48DFE379FC64C3F50512033477F929291FC10CF2
        Validity
            Not Before: Mar  8 19:42:23 2024 GMT
            Not After : Mar  7 19:47:23 2025 GMT
        Subject: CN=B568B8FBC518B494E690D2FA5798375D369EB911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:33:20:e6:25:44:59:9e:ca:40:31:af:55:24:
                    17:7a:31:df:b4:65:cc:4b:66:01:6e:bc:ce:25:a6:
                    71:89:02:5e:5c:55:57:8c:a3:68:5c:b9:bc:69:8f:
                    1f:17:20:11:5f:90:05:5a:c8:50:9a:ad:a7:75:f6:
                    3f:88:f2:8c:a2:6d:c3:0d:42:2c:43:df:d6:94:0d:
                    a8:59:86:ff:60:aa:86:01:c6:6e:63:93:a0:cb:fc:
                    a7:9f:31:b6:df:f9:38:e0:06:00:bb:fd:7b:12:50:
                    65:65:94:f6:c5:8f:4b:39:43:d9:c1:14:7b:36:81:
                    e2:be:8e:e4:c1:58:c6:e2:53:30:4a:52:ea:1b:85:
                    2a:8c:fd:42:a8:57:38:9f:06:75:91:85:a2:aa:62:
                    f8:43:e0:3a:c3:fc:f1:35:f6:51:32:8e:82:cb:90:
                    d5:5a:60:51:c4:04:38:03:80:f6:5c:54:3e:bc:55:
                    6c:df:05:e4:db:13:2a:ec:a2:73:a7:43:77:5b:bb:
                    b5:8d:a9:07:34:79:75:80:9c:16:1a:31:e5:b3:e4:
                    9f:24:33:60:45:35:f1:cb:04:77:21:c8:ce:3b:d4:
                    9c:12:35:f9:3b:4f:40:55:29:09:fc:e8:1f:65:f0:
                    d1:49:69:4b:68:0e:9c:21:db:85:a4:2c:b2:54:66:
                    8f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:68:B8:FB:C5:18:B4:94:E6:90:D2:FA:57:98:37:5D:36:9E:B9:11
            X509v3 Authority Key Identifier:
                keyid:48:DF:E3:79:FC:64:C3:F5:05:12:03:34:77:F9:29:29:1F:C1:0C:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/48DFE379FC64C3F50512033477F929291FC10CF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/48DFE379FC64C3F50512033477F929291FC10CF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/323830343a353831383a3a2f33322d3332203d3e20323638313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5818::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:52:17:48:4d:ac:71:38:a0:c9:05:1c:cd:ea:bb:29:ef:f3:
         af:ef:7d:84:63:08:90:67:aa:91:b7:19:3c:97:8c:31:16:23:
         12:db:ea:7f:28:06:4b:a1:db:80:a6:f5:91:24:d8:fe:76:89:
         70:e6:49:7c:3a:dc:86:f4:a5:b5:35:f8:14:a3:4c:45:44:6c:
         31:14:f7:b5:91:17:a8:6c:c0:13:f5:02:5a:00:f4:ba:3e:62:
         42:d2:c0:47:b0:23:a5:5b:ed:f8:38:de:5c:c2:6a:6f:cf:07:
         ca:3d:52:64:54:c8:4c:38:9b:d6:4a:86:70:1c:0b:20:03:d0:
         3e:b1:62:16:ef:ee:fb:b2:a5:b9:4c:6a:81:14:4d:ae:61:28:
         16:76:33:ab:fe:bf:df:fd:53:98:27:cc:e5:76:78:31:02:c3:
         e4:65:01:c6:b6:02:80:ad:e2:4a:ed:4b:da:6a:13:2c:6a:ca:
         31:26:f5:82:57:2d:3b:54:f5:9f:60:40:80:4c:15:be:43:1b:
         13:d1:b6:9e:88:de:6c:dd:76:7c:5b:dd:d8:e7:a8:c0:aa:4d:
         0c:e1:48:c6:59:dc:be:46:9f:20:7d:03:42:89:bb:e9:0a:ef:
         4c:34:dc:f7:9b:f0:c1:c2:f2:0b:54:1a:6c:e5:ef:a1:cf:40:
         91:5a:69:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----