Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/323830343a316635343a3a2f33322d3332203d3e20323732323230.roa
File:                     323830343a316635343a3a2f33322d3332203d3e20323732323230.roa (raw, json)
Hash identifier:          X+BqTZGQ4JABSgns5TiBsDFGjDN2eo7DUVstU0UDpsg=
Subject key identifier:   AA:4E:2C:D8:D7:B5:CF:BD:DB:B9:8C:80:69:C6:43:FE:FC:9E:7C:1A
Certificate issuer:       /CN=4F7C6599F80B64AFC2A339651834D8FBB53C1B85
Certificate serial:       241C03619877F1C68F7E19FBCEB3E0CE74777BC4
Authority key identifier: 4F:7C:65:99:F8:0B:64:AF:C2:A3:39:65:18:34:D8:FB:B5:3C:1B:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F7C6599F80B64AFC2A339651834D8FBB53C1B85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/323830343a316635343a3a2f33322d3332203d3e20323732323230.roa
Signing time:             Fri 12 Apr 2024 20:00:00 +0000
ROA not before:           Fri 12 Apr 2024 19:55:00 +0000
ROA not after:            Fri 11 Apr 2025 20:00:00 +0000
asID:                     272220
IP address blocks:        2804:1f54::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:1c:03:61:98:77:f1:c6:8f:7e:19:fb:ce:b3:e0:ce:74:77:7b:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F7C6599F80B64AFC2A339651834D8FBB53C1B85
        Validity
            Not Before: Apr 12 19:55:00 2024 GMT
            Not After : Apr 11 20:00:00 2025 GMT
        Subject: CN=AA4E2CD8D7B5CFBDDBB98C8069C643FEFC9E7C1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bc:67:a5:af:50:78:95:c0:d9:3d:12:e4:3b:
                    6f:7e:2a:55:f4:13:03:bb:cf:56:51:ff:ca:d0:18:
                    9a:38:15:49:d0:63:da:4d:42:3f:15:4f:b2:72:a0:
                    16:60:5c:7e:db:ff:d4:88:ff:a7:90:95:d4:99:b9:
                    a7:89:e5:25:83:42:22:86:a6:94:af:fc:81:b5:0f:
                    0c:e9:1f:e6:23:83:f8:d9:2c:d9:0a:e8:c6:dd:6f:
                    3d:4f:3e:d4:53:b2:ab:33:cc:ce:50:f9:04:53:8c:
                    91:a9:70:94:b7:a6:e7:87:18:2b:a9:2d:7a:fa:0f:
                    93:c3:ec:ce:49:9d:52:93:bc:8e:e7:b5:44:6b:cd:
                    9f:35:7e:89:ef:d7:1a:b4:08:36:a6:9b:6e:dc:67:
                    07:30:c1:fa:48:13:6e:03:87:fd:04:3b:c0:21:68:
                    94:06:b2:68:ac:95:b3:11:a5:52:28:91:b2:3d:1a:
                    2c:77:05:74:53:31:11:ff:e7:95:ac:b4:4e:c8:e7:
                    e2:8d:4e:74:4e:01:15:23:24:e4:6d:ad:30:3d:7d:
                    8a:5c:ad:0f:1e:df:f0:5c:e9:88:9f:54:eb:07:39:
                    a2:39:1a:b2:90:97:ce:31:a5:31:9b:fb:3f:e8:66:
                    50:45:96:20:21:f8:21:1d:73:49:2e:b0:7d:11:95:
                    81:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:4E:2C:D8:D7:B5:CF:BD:DB:B9:8C:80:69:C6:43:FE:FC:9E:7C:1A
            X509v3 Authority Key Identifier:
                keyid:4F:7C:65:99:F8:0B:64:AF:C2:A3:39:65:18:34:D8:FB:B5:3C:1B:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/4F7C6599F80B64AFC2A339651834D8FBB53C1B85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F7C6599F80B64AFC2A339651834D8FBB53C1B85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/323830343a316635343a3a2f33322d3332203d3e20323732323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1f54::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:09:41:31:fa:1c:4c:83:f1:64:ac:f1:1f:c9:ce:74:13:6d:
         bb:a7:d3:69:e3:62:df:31:23:47:a1:b2:65:60:e6:ca:10:8b:
         b8:8f:83:a7:59:50:33:18:61:ca:fa:d2:5c:d5:8e:dc:05:e2:
         75:76:71:d4:02:8c:1e:85:6a:24:5a:ef:1d:a0:fb:e9:42:6d:
         07:a2:b8:5d:11:54:9c:00:4a:68:07:b4:55:68:88:c4:3f:38:
         69:b0:98:87:62:cc:85:20:50:d7:0b:ad:9e:6f:96:dc:d7:74:
         b3:09:4c:a7:ee:1f:7d:5f:96:f1:e2:b4:48:2d:38:e4:10:05:
         38:c5:77:7e:5d:3a:84:4b:da:2e:16:d1:cd:ae:b7:25:68:e1:
         58:8e:85:4a:17:e7:1d:c2:64:32:7e:87:28:c0:bf:5b:13:80:
         18:78:a8:1c:4d:04:7f:5a:cf:89:03:94:a8:e7:19:9b:fd:22:
         0a:25:c4:d7:41:a1:14:9f:45:b8:8c:07:16:79:0d:65:9c:07:
         b3:2e:e6:76:a3:03:42:06:af:af:29:9f:da:45:f9:d4:74:40:
         fa:bb:0d:87:c4:90:96:d2:3e:8f:03:e3:7f:c9:b4:66:e6:4a:
         68:68:6f:ea:74:77:b7:d8:76:2d:4d:5a:c4:3c:e7:3a:f1:30:
         fb:61:9a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----