Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/323830343a373163343a3a2f33322d3332203d3e20323730383130.roa
File:                     323830343a373163343a3a2f33322d3332203d3e20323730383130.roa (raw, json)
Hash identifier:          UDEzidTqL1l9GOz8YRaytA27XR912mZjnyrJ6CrnNPI=
Subject key identifier:   83:5C:AA:4D:42:24:89:FE:BC:06:87:AF:AF:8A:D1:87:2F:BC:AF:26
Certificate issuer:       /CN=082DFAF103E99CC278BC8F1743150767CE35E298
Certificate serial:       304F625FB287517703FC71E3D694ECB149F0295D
Authority key identifier: 08:2D:FA:F1:03:E9:9C:C2:78:BC:8F:17:43:15:07:67:CE:35:E2:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/082DFAF103E99CC278BC8F1743150767CE35E298.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/323830343a373163343a3a2f33322d3332203d3e20323730383130.roa
Signing time:             Fri 31 May 2024 16:51:27 +0000
ROA not before:           Fri 31 May 2024 16:46:27 +0000
ROA not after:            Fri 30 May 2025 16:51:27 +0000
asID:                     270810
IP address blocks:        2804:71c4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:4f:62:5f:b2:87:51:77:03:fc:71:e3:d6:94:ec:b1:49:f0:29:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082DFAF103E99CC278BC8F1743150767CE35E298
        Validity
            Not Before: May 31 16:46:27 2024 GMT
            Not After : May 30 16:51:27 2025 GMT
        Subject: CN=835CAA4D422489FEBC0687AFAF8AD1872FBCAF26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1c:7f:e7:54:ea:19:96:75:e7:f4:f3:f2:ff:
                    7f:8b:b6:3c:59:bb:86:56:2d:df:95:97:12:75:70:
                    b3:69:74:f3:96:ea:ca:85:cf:8a:38:04:71:9d:0c:
                    31:a9:42:de:b8:68:d0:1e:32:8b:4c:c0:0c:4a:9f:
                    07:ee:7b:64:ea:b5:58:63:6f:e1:b1:6a:d6:bf:48:
                    4d:f5:bb:ba:95:20:24:ff:cb:e2:9e:24:ca:60:ef:
                    40:2f:a2:74:9e:39:35:d1:a5:a6:af:d8:22:73:10:
                    0d:61:e5:d2:e5:88:52:1d:ab:f1:25:1e:c6:51:2b:
                    7b:9b:b4:9c:28:2f:9f:e7:65:d2:97:40:9a:93:90:
                    dd:66:fd:b3:6f:db:1c:bf:6b:3b:dd:9b:ed:2d:e9:
                    6f:84:1d:30:77:24:26:25:3e:42:6f:f1:5b:c6:6e:
                    c5:57:59:66:56:bf:c5:99:9d:20:c1:62:e9:25:81:
                    a2:4a:c1:c2:7e:50:c4:3e:09:60:44:3b:4e:db:8d:
                    83:94:f4:1b:e3:ec:7b:a4:d6:42:21:bc:b6:8b:eb:
                    4f:d6:ef:eb:38:ee:77:a2:96:86:cf:59:e2:d4:62:
                    9c:b9:73:ba:eb:ef:04:90:61:38:4e:59:36:74:b6:
                    67:04:92:f9:09:81:90:1d:69:48:6b:35:b9:65:03:
                    98:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:5C:AA:4D:42:24:89:FE:BC:06:87:AF:AF:8A:D1:87:2F:BC:AF:26
            X509v3 Authority Key Identifier:
                keyid:08:2D:FA:F1:03:E9:9C:C2:78:BC:8F:17:43:15:07:67:CE:35:E2:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/082DFAF103E99CC278BC8F1743150767CE35E298.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/082DFAF103E99CC278BC8F1743150767CE35E298.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/323830343a373163343a3a2f33322d3332203d3e20323730383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:71c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:13:85:24:a1:b4:39:a0:85:7e:d0:d5:7e:65:fb:81:80:f1:
         6a:90:d9:fb:6d:9b:f5:ca:75:16:14:74:60:0b:a1:0b:36:85:
         a1:eb:f9:a9:e0:47:79:4a:ba:4e:45:61:39:b0:57:e5:b7:e2:
         94:b3:92:63:8a:a1:78:64:07:2a:ca:19:57:6e:cd:e7:65:f1:
         37:a8:89:77:0e:e0:41:73:4a:72:23:21:76:aa:78:0f:70:66:
         d2:f6:5e:b7:1a:fd:a6:d1:ab:0a:b3:93:33:26:e8:4e:e6:e1:
         a5:bb:f9:ea:21:e8:09:2a:ae:f8:31:a9:0e:91:f4:df:90:54:
         2e:26:eb:31:ed:02:41:f8:ba:67:90:38:43:57:25:59:88:19:
         92:56:5d:1a:31:eb:3c:cb:16:a2:31:d1:2a:dd:62:6f:c2:93:
         7f:b6:11:a9:cd:4d:45:a1:17:4f:55:13:df:8c:8b:5d:19:81:
         d5:d8:91:3a:ec:05:a6:d1:79:9e:6f:79:7d:9c:f7:f3:07:83:
         98:b7:35:b5:4f:f1:39:c3:26:e5:e4:7b:4c:81:98:77:14:8e:
         19:95:e0:6e:fa:e5:1d:f2:bb:8d:9d:0d:05:0a:d8:7e:fb:fa:
         c9:58:4f:b4:cf:0d:18:1d:cc:93:d1:97:64:dc:81:c9:90:b1:
         87:57:b8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----