Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/0/323830343a363538633a323030303a3a2f34382d3438203d3e20323639343939.roa
File:                     323830343a363538633a323030303a3a2f34382d3438203d3e20323639343939.roa (raw, json)
Hash identifier:          /hmW2DV0aVA2/K1GhWT5XfXae4C/cEOtQRgDlA6XJ9o=
Subject key identifier:   2F:B9:0A:18:4C:D5:A9:6D:BA:4F:82:C8:4E:5C:DF:0E:A7:35:9C:BC
Certificate issuer:       /CN=A0086FD21CF6CD26003723997398968937DC3452
Certificate serial:       2113A2B8B5DC18E7ED5CBCDD61B16FE66C8B97B2
Authority key identifier: A0:08:6F:D2:1C:F6:CD:26:00:37:23:99:73:98:96:89:37:DC:34:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0086FD21CF6CD26003723997398968937DC3452.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/0/323830343a363538633a323030303a3a2f34382d3438203d3e20323639343939.roa
Signing time:             Thu 05 Sep 2024 18:20:18 +0000
ROA not before:           Thu 05 Sep 2024 18:15:18 +0000
ROA not after:            Thu 04 Sep 2025 18:20:18 +0000
asID:                     269499
IP address blocks:        2804:658c:2000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:13:a2:b8:b5:dc:18:e7:ed:5c:bc:dd:61:b1:6f:e6:6c:8b:97:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0086FD21CF6CD26003723997398968937DC3452
        Validity
            Not Before: Sep  5 18:15:18 2024 GMT
            Not After : Sep  4 18:20:18 2025 GMT
        Subject: CN=2FB90A184CD5A96DBA4F82C84E5CDF0EA7359CBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7a:91:7d:46:32:a7:a9:b6:db:b5:2d:c5:0b:
                    8d:b8:c7:f8:ab:4f:da:40:33:f5:1e:76:29:7b:72:
                    c3:5b:20:29:80:73:3c:6d:4a:5c:cd:d2:84:0d:e2:
                    b4:f3:4d:20:c7:b6:7c:d1:45:32:f0:8c:4d:c7:fa:
                    e4:42:d5:da:19:99:72:91:d2:c4:55:96:37:f9:e5:
                    9e:d5:36:a0:15:94:a3:21:57:3c:af:21:9f:62:14:
                    ae:db:68:0b:ac:77:8e:27:df:2d:b7:35:9c:a4:61:
                    a1:7e:f3:ee:9e:72:9d:83:2d:d4:79:99:c2:73:ae:
                    19:18:d5:07:54:02:e5:e3:40:c7:fe:df:45:12:5d:
                    95:b4:f5:1f:65:6e:09:f9:7b:fa:9c:0b:c8:52:ba:
                    02:a3:0e:21:ae:0c:5a:f9:f1:a1:d2:53:46:4d:f0:
                    79:af:6f:87:ed:9c:96:ad:43:9c:3e:be:27:a3:1f:
                    a3:37:e9:27:28:64:0a:11:3a:53:ca:80:32:8e:db:
                    8a:05:48:f9:91:75:dd:64:aa:e2:8e:b3:93:fb:40:
                    11:b9:a3:c7:2f:ca:52:63:6d:40:97:08:1c:2f:d9:
                    e3:b3:7f:9c:98:1c:29:5b:fd:64:fe:10:8a:c7:b1:
                    b9:2d:c7:bc:ed:30:a8:14:3b:bf:2f:86:e5:8c:87:
                    ed:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B9:0A:18:4C:D5:A9:6D:BA:4F:82:C8:4E:5C:DF:0E:A7:35:9C:BC
            X509v3 Authority Key Identifier:
                keyid:A0:08:6F:D2:1C:F6:CD:26:00:37:23:99:73:98:96:89:37:DC:34:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/0/A0086FD21CF6CD26003723997398968937DC3452.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0086FD21CF6CD26003723997398968937DC3452.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/0/323830343a363538633a323030303a3a2f34382d3438203d3e20323639343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:658c:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:01:e7:95:3a:59:38:f2:c1:bf:5e:4c:10:ca:98:89:73:db:
         08:b0:88:98:77:ed:18:77:9c:0d:33:bf:3f:bc:f1:5c:ad:2f:
         1c:ca:6a:22:24:30:b5:99:b0:4f:87:83:0f:a2:11:f5:c7:79:
         2d:49:2a:a7:ec:86:4f:1e:ed:df:62:26:35:33:fa:6c:fd:c2:
         bd:25:d9:a2:00:0d:37:9e:4b:19:94:5f:10:d4:19:8c:99:de:
         71:7d:87:da:53:01:fb:9c:a1:1e:4d:4f:15:26:fc:3f:2f:d3:
         55:b5:43:47:7d:30:7e:2d:e4:43:a4:99:a2:93:fe:73:f7:7c:
         d5:fd:4b:1d:dc:a2:c0:e9:2b:b7:ec:7b:a4:0c:8d:57:43:d2:
         3e:2c:3e:4b:de:16:08:11:fe:e2:21:37:9b:ba:75:f8:45:c0:
         a3:bc:33:9c:5a:5f:fd:28:92:16:9d:07:99:33:2a:33:55:bb:
         95:18:5c:9f:94:7b:bc:95:d2:0c:55:73:c7:ab:f0:b9:c1:53:
         bf:1e:65:f6:f9:9e:87:4b:77:75:52:92:a2:d7:af:95:a6:57:
         a4:d1:50:78:bc:32:23:4d:aa:ec:fa:39:da:a5:ae:5e:81:e0:
         f3:c1:2f:be:23:2f:95:37:a9:c1:93:bf:1d:3b:83:6f:51:4a:
         96:b5:07:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----