Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/323830343a363436343a3a2f33322d3332203d3e20323639343235.roa
File:                     323830343a363436343a3a2f33322d3332203d3e20323639343235.roa (raw, json)
Hash identifier:          eIbXscMuFjoHuusfTqwZf2A50eUgAz/bTnGDWljd/z0=
Subject key identifier:   40:7C:F7:69:E6:A9:34:E5:4B:54:20:C3:07:0D:C6:D7:D1:26:48:B3
Certificate issuer:       /CN=A52F416E7DE17981FB7334B51C91FD583746E12E
Certificate serial:       371C8FBC019E19196A5C0B42EFC82DE91F200E87
Authority key identifier: A5:2F:41:6E:7D:E1:79:81:FB:73:34:B5:1C:91:FD:58:37:46:E1:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A52F416E7DE17981FB7334B51C91FD583746E12E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/323830343a363436343a3a2f33322d3332203d3e20323639343235.roa
Signing time:             Mon 19 Feb 2024 15:48:29 +0000
ROA not before:           Mon 19 Feb 2024 15:43:29 +0000
ROA not after:            Mon 17 Feb 2025 15:48:29 +0000
asID:                     269425
IP address blocks:        2804:6464::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:1c:8f:bc:01:9e:19:19:6a:5c:0b:42:ef:c8:2d:e9:1f:20:0e:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A52F416E7DE17981FB7334B51C91FD583746E12E
        Validity
            Not Before: Feb 19 15:43:29 2024 GMT
            Not After : Feb 17 15:48:29 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c6:1b:d8:83:e6:54:d8:28:02:f6:8d:29:08:
                    2e:76:54:1e:9a:63:e5:8c:2b:19:5a:5c:da:20:a0:
                    f9:35:24:25:d0:01:53:6a:23:3c:fe:17:e9:eb:a4:
                    87:ce:4e:b6:fa:d2:7f:72:fd:c1:82:92:21:38:3f:
                    a0:ca:bd:79:27:cd:3f:1c:84:6d:ab:bb:89:37:a3:
                    67:a7:62:87:44:33:0f:e6:b2:0f:3b:8f:93:12:ef:
                    50:54:c6:e7:0a:be:1f:e2:ca:3e:e9:bb:1e:4d:1a:
                    1b:e4:65:d3:d6:ae:eb:eb:d2:c9:7f:bf:cd:3c:85:
                    dc:6c:d0:82:d1:7a:f1:fe:75:5d:2e:9f:fd:43:a8:
                    7d:87:4d:5a:da:f6:49:33:0d:12:81:94:5a:de:f3:
                    f6:25:f1:5f:d4:0d:e3:f4:59:c0:ea:2c:91:ea:06:
                    53:e2:f7:35:c5:98:65:79:5a:77:19:b1:e2:47:23:
                    e9:07:39:06:88:44:d5:07:39:f1:7e:87:f1:dd:14:
                    e9:44:c8:bc:88:b4:a8:8e:27:50:9d:b3:04:dc:e7:
                    02:4d:a2:a1:8a:44:c3:ef:86:a4:15:04:57:19:6a:
                    f6:61:5c:f0:b7:65:b6:65:15:36:9e:86:0f:b9:3c:
                    d9:50:34:43:08:32:b1:37:11:4e:39:59:8f:11:93:
                    4e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:7C:F7:69:E6:A9:34:E5:4B:54:20:C3:07:0D:C6:D7:D1:26:48:B3
            X509v3 Authority Key Identifier:
                keyid:A5:2F:41:6E:7D:E1:79:81:FB:73:34:B5:1C:91:FD:58:37:46:E1:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/A52F416E7DE17981FB7334B51C91FD583746E12E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A52F416E7DE17981FB7334B51C91FD583746E12E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/323830343a363436343a3a2f33322d3332203d3e20323639343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6464::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:25:d9:3d:4b:57:ab:ce:62:ba:ef:c9:1d:98:81:b0:63:dc:
         61:92:25:91:d6:51:b1:ac:02:03:b6:a2:82:87:9c:d2:78:ee:
         60:ab:5c:32:c1:ff:aa:ca:86:2f:c5:3f:c9:8b:40:fa:93:a8:
         db:55:88:08:d1:6f:76:c4:74:94:5a:3b:04:6e:23:1e:e4:11:
         e0:04:d1:e4:02:77:ce:36:1f:82:58:c6:73:2a:c2:ba:21:fe:
         d3:00:ea:62:40:e5:85:61:cf:d3:e0:b7:e3:23:e7:6d:a5:b7:
         86:66:59:40:ed:cc:f3:b1:26:01:4e:bf:db:2a:51:d5:c2:68:
         8d:fa:6b:b5:bd:e2:34:b5:cb:fd:e2:31:e6:11:8e:ae:9b:c8:
         4c:a0:53:fa:58:be:df:c4:d0:90:3a:42:10:63:e5:bc:31:aa:
         cc:0b:60:ca:99:b3:c0:8b:83:53:df:5c:83:2f:95:44:9f:90:
         5f:2c:3c:26:c4:8e:93:47:fe:e8:41:ad:7e:4e:50:bf:6e:8a:
         8c:b6:80:af:f2:b3:c3:86:32:13:88:fb:21:6b:bd:04:98:70:
         c3:4c:9c:ea:7a:53:60:57:7c:df:cb:9d:bd:ab:8a:03:5e:4a:
         60:81:6b:b8:62:d7:46:b7:ee:e2:56:c4:28:4a:25:9b:26:e0:
         f6:c7:fd:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----