Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/323830343a316635343a613030303a3a2f33352d3335203d3e20323732323230.roa
File:                     323830343a316635343a613030303a3a2f33352d3335203d3e20323732323230.roa (raw, json)
Hash identifier:          KeBYwqfjD9NZ8Uirc33kchdCNDQUhDS711lurBfyH84=
Subject key identifier:   9C:6E:F6:19:AE:E9:67:14:A2:6A:3C:8C:02:66:BC:0F:3B:81:3F:FA
Certificate issuer:       /CN=4F7C6599F80B64AFC2A339651834D8FBB53C1B85
Certificate serial:       2B78CD429B713EA7E481B90B1B3884CECC67EA12
Authority key identifier: 4F:7C:65:99:F8:0B:64:AF:C2:A3:39:65:18:34:D8:FB:B5:3C:1B:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F7C6599F80B64AFC2A339651834D8FBB53C1B85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/323830343a316635343a613030303a3a2f33352d3335203d3e20323732323230.roa
Signing time:             Fri 12 Apr 2024 20:00:00 +0000
ROA not before:           Fri 12 Apr 2024 19:55:00 +0000
ROA not after:            Fri 11 Apr 2025 20:00:00 +0000
asID:                     272220
IP address blocks:        2804:1f54:a000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:78:cd:42:9b:71:3e:a7:e4:81:b9:0b:1b:38:84:ce:cc:67:ea:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F7C6599F80B64AFC2A339651834D8FBB53C1B85
        Validity
            Not Before: Apr 12 19:55:00 2024 GMT
            Not After : Apr 11 20:00:00 2025 GMT
        Subject: CN=9C6EF619AEE96714A26A3C8C0266BC0F3B813FFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5d:b0:c1:94:01:b8:70:56:a3:4e:30:e2:b0:
                    0f:9e:8e:7d:a1:58:38:52:3d:ae:a2:c0:1c:df:a6:
                    93:38:a0:27:e0:de:74:f3:9c:83:4e:95:96:d5:18:
                    dc:4e:4b:a2:2c:2b:1f:86:7c:e8:5f:1f:58:a9:58:
                    e9:71:90:8a:76:30:25:ed:e0:1f:d6:12:75:5b:b1:
                    b2:cf:d2:d2:8c:de:89:f3:a2:a0:60:11:2e:44:8c:
                    7d:02:01:46:61:91:5a:5d:ee:2b:a0:1a:41:ee:e1:
                    a8:f6:a7:36:f6:02:90:b5:35:0b:c2:6d:57:b1:de:
                    fb:81:90:7d:d2:9c:35:b4:fc:04:91:4e:02:62:77:
                    f9:22:49:70:f6:27:cb:3a:35:13:47:06:ce:33:e4:
                    01:57:35:37:7e:15:a1:00:2d:4a:4f:91:68:ca:b4:
                    21:da:69:d3:e0:d7:e1:34:24:79:20:f7:b1:c6:ab:
                    53:24:6b:95:62:99:21:a3:cd:75:48:85:0b:f1:68:
                    71:a4:5f:34:c1:0a:f0:5c:e2:36:f2:37:90:4e:4e:
                    9d:d4:fd:5d:9c:a8:e2:be:04:ce:e7:5a:e6:2e:d0:
                    3f:bf:70:e2:f4:14:09:e7:db:f8:e4:eb:5a:6e:1b:
                    c5:7d:b7:c5:7f:c7:22:41:f3:4b:e1:23:a1:18:ca:
                    32:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:6E:F6:19:AE:E9:67:14:A2:6A:3C:8C:02:66:BC:0F:3B:81:3F:FA
            X509v3 Authority Key Identifier:
                keyid:4F:7C:65:99:F8:0B:64:AF:C2:A3:39:65:18:34:D8:FB:B5:3C:1B:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/4F7C6599F80B64AFC2A339651834D8FBB53C1B85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F7C6599F80B64AFC2A339651834D8FBB53C1B85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/323830343a316635343a613030303a3a2f33352d3335203d3e20323732323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1f54:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         c6:51:5b:c4:72:1e:75:5a:e4:7d:43:ab:34:26:ee:fa:b3:c9:
         55:fb:ea:0a:ee:a8:95:55:f9:a2:30:b4:96:8c:63:11:c5:ed:
         4c:cf:c4:4a:07:d4:35:1f:de:e4:91:28:c7:b7:13:38:ff:6e:
         58:19:63:67:a2:4f:41:93:be:f2:a0:2a:88:25:47:ea:ca:c1:
         b7:07:49:33:3e:4d:5f:c9:f4:37:f0:a9:d9:2f:a8:9a:33:fe:
         0a:52:dd:b5:51:08:82:16:0e:35:3e:66:04:72:84:f3:fc:b1:
         1d:9d:b8:3a:78:06:2e:73:44:98:9f:22:b1:0e:15:31:32:f6:
         e3:4f:a2:b7:c4:99:d1:e7:ff:dc:de:1b:26:e1:d1:98:dc:3c:
         97:1f:42:85:bd:57:bf:46:81:4e:d6:0e:1f:c7:0f:6d:5e:a6:
         bc:2a:78:28:38:ec:41:82:7c:43:f2:cb:a7:2d:38:ff:80:b3:
         cd:7b:55:59:0b:9f:e6:37:16:f2:d4:91:b4:fd:09:a5:52:7c:
         5b:64:d9:29:c2:52:a9:7d:5b:b3:4f:3a:4d:88:20:7f:b7:6c:
         12:a0:6a:60:7d:82:4a:27:97:41:49:da:58:5e:55:64:a2:2f:
         a6:b3:6b:8c:c4:de:84:e0:eb:3b:db:1e:9a:cf:8c:11:90:a7:
         a1:c1:c0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----