Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/323830343a3366343a3a2f33322d3438203d3e20323632343037.roa
File:                     323830343a3366343a3a2f33322d3438203d3e20323632343037.roa (raw, json)
Hash identifier:          tGdwol8qMfbTzikbSYQpecbMB4B29PAU8aef7V4swZk=
Subject key identifier:   C1:C2:8A:C2:9C:D9:A0:A5:64:7A:E6:7E:7C:B3:E5:7B:2B:D9:92:58
Certificate issuer:       /CN=FACADE39A05C0D6EE2D92F07EB9B7703942C91F4
Certificate serial:       581EC103E2ED20303B159DE05366FD162FBD9CBF
Authority key identifier: FA:CA:DE:39:A0:5C:0D:6E:E2:D9:2F:07:EB:9B:77:03:94:2C:91:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FACADE39A05C0D6EE2D92F07EB9B7703942C91F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/323830343a3366343a3a2f33322d3438203d3e20323632343037.roa
Signing time:             Wed 28 Feb 2024 19:45:14 +0000
ROA not before:           Wed 28 Feb 2024 19:40:14 +0000
ROA not after:            Wed 26 Feb 2025 19:45:14 +0000
asID:                     262407
IP address blocks:        2804:3f4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:1e:c1:03:e2:ed:20:30:3b:15:9d:e0:53:66:fd:16:2f:bd:9c:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FACADE39A05C0D6EE2D92F07EB9B7703942C91F4
        Validity
            Not Before: Feb 28 19:40:14 2024 GMT
            Not After : Feb 26 19:45:14 2025 GMT
        Subject: CN=C1C28AC29CD9A0A5647AE67E7CB3E57B2BD99258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:06:f2:1b:f2:d2:1c:36:b7:48:90:b6:fd:06:
                    9d:03:c6:b5:e0:6a:36:62:bf:78:16:d2:f6:78:82:
                    99:2a:c0:3d:4c:ef:1f:27:ee:3b:43:10:e2:ec:d5:
                    e8:20:5a:ef:1b:77:79:dd:0c:c1:72:21:f2:41:ae:
                    5a:ae:61:c8:81:9f:f3:51:fd:32:05:a2:fc:84:27:
                    75:dc:6f:cb:29:0d:1f:e7:8f:e2:2c:87:04:08:39:
                    d3:44:89:f5:35:82:7d:3a:40:b6:06:be:48:1b:43:
                    34:13:dd:57:33:2b:fe:1b:48:97:2a:af:2d:0d:c2:
                    e8:69:36:1d:99:ef:89:76:14:0c:58:06:1a:db:ba:
                    ed:a0:c8:88:8b:51:e5:eb:b9:2f:a2:90:ec:76:ed:
                    61:7c:ad:0f:7b:15:df:45:bd:51:85:ef:d3:f7:42:
                    ad:8d:5c:7a:2e:a7:06:9e:32:3e:9a:d0:6b:97:c9:
                    34:77:8b:23:f8:36:f5:ed:c0:47:2b:82:61:57:0d:
                    8a:11:02:94:d4:0d:86:9d:09:17:57:48:61:e4:6a:
                    91:60:0d:8a:2a:85:56:12:9b:be:24:ef:e5:4d:db:
                    94:17:ac:80:02:a7:97:c2:3a:80:49:b1:b5:75:75:
                    47:f0:bc:3f:ed:e9:ba:72:1b:d5:2a:ac:f8:65:57:
                    ef:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C2:8A:C2:9C:D9:A0:A5:64:7A:E6:7E:7C:B3:E5:7B:2B:D9:92:58
            X509v3 Authority Key Identifier:
                keyid:FA:CA:DE:39:A0:5C:0D:6E:E2:D9:2F:07:EB:9B:77:03:94:2C:91:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/FACADE39A05C0D6EE2D92F07EB9B7703942C91F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FACADE39A05C0D6EE2D92F07EB9B7703942C91F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/323830343a3366343a3a2f33322d3438203d3e20323632343037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:9b:45:e1:17:5b:f8:83:5d:34:93:ba:e7:e0:1e:fa:ab:66:
         ed:41:6c:b8:d8:0a:11:b6:81:e4:46:6f:2a:29:79:fa:97:66:
         9f:90:ee:a8:df:f2:20:76:dd:5b:f5:38:95:91:ef:c0:4d:60:
         a0:6b:2d:ce:7e:f2:85:55:fe:96:6e:75:9b:8d:55:c2:84:b1:
         b0:66:52:7a:a4:14:f7:13:49:0a:41:7a:1d:0d:86:00:0d:38:
         9f:25:ca:bb:61:43:2e:75:34:e4:92:37:c4:89:1d:b7:ec:ac:
         67:1d:36:4f:c8:8f:c9:a4:ee:69:4e:d4:1b:43:d3:dc:f6:4a:
         0b:b9:ea:06:6f:06:b8:94:7e:bb:06:03:8f:b2:32:3b:9f:a5:
         fb:2f:b7:d7:dc:38:d1:63:ea:d8:59:b5:4f:ee:25:77:77:02:
         eb:d5:8c:6e:1c:e9:c9:ea:cb:25:95:f9:6a:d8:02:13:d1:2c:
         36:98:b5:da:b0:82:0c:74:56:ee:b2:34:54:5f:fb:34:59:a2:
         6a:22:07:95:46:89:1b:4d:e7:6e:77:e4:b2:cc:49:19:8b:9e:
         72:22:1c:eb:ac:da:cc:bd:82:8b:40:28:ac:86:e6:b0:bc:ca:
         6f:5a:db:c0:e8:ba:49:0b:30:3f:a4:6d:c4:a4:a8:87:d7:73:
         d3:3c:75:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----