Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BgrT7t86dD7Pt44BKjpVsioX7hseB6SQQogKC9ZvLR7a/1/323830343a326435383a3a2f33322d3438203d3e20323635323736.roa
File:                     323830343a326435383a3a2f33322d3438203d3e20323635323736.roa (raw, json)
Hash identifier:          G11AWafotoDdWZjagDHEyzVr8V40rZ4j5OkkYq4xjrU=
Subject key identifier:   63:1E:5A:04:93:6E:88:18:EA:2A:C0:CC:52:E7:40:76:3B:D3:69:7B
Certificate issuer:       /CN=7A6CA5F8254E0600BFD3A45AEEDE35C24A71CCD1
Certificate serial:       5E44F8D903036A117701213A2E1CC48FA930E663
Authority key identifier: 7A:6C:A5:F8:25:4E:06:00:BF:D3:A4:5A:EE:DE:35:C2:4A:71:CC:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A6CA5F8254E0600BFD3A45AEEDE35C24A71CCD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BgrT7t86dD7Pt44BKjpVsioX7hseB6SQQogKC9ZvLR7a/1/323830343a326435383a3a2f33322d3438203d3e20323635323736.roa
Signing time:             Tue 12 Mar 2024 18:40:39 +0000
ROA not before:           Tue 12 Mar 2024 18:35:39 +0000
ROA not after:            Tue 11 Mar 2025 18:40:39 +0000
asID:                     265276
IP address blocks:        2804:2d58::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:44:f8:d9:03:03:6a:11:77:01:21:3a:2e:1c:c4:8f:a9:30:e6:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A6CA5F8254E0600BFD3A45AEEDE35C24A71CCD1
        Validity
            Not Before: Mar 12 18:35:39 2024 GMT
            Not After : Mar 11 18:40:39 2025 GMT
        Subject: CN=631E5A04936E8818EA2AC0CC52E740763BD3697B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4f:37:50:2c:da:5d:dc:ae:6c:d8:e0:80:2e:
                    8f:7e:d7:f5:cd:88:75:5d:d6:ff:cf:85:a0:66:9a:
                    08:18:5e:88:72:3b:98:6c:08:e1:4e:43:b1:84:ae:
                    b2:6e:05:b9:76:b3:d5:9f:09:75:1e:ed:2d:32:9f:
                    33:6e:41:c7:14:c1:52:53:7d:3f:9f:c1:e1:3e:78:
                    e7:d2:48:9f:c5:32:0b:a0:22:82:f9:71:6c:b8:47:
                    88:f2:1d:e3:1a:42:5a:9d:fc:19:d2:c0:52:67:2c:
                    db:66:50:94:5d:6f:66:7c:77:1f:ed:ac:4b:1c:d7:
                    b6:bf:39:88:d2:32:24:80:72:fb:cd:64:73:65:40:
                    18:73:f3:39:66:aa:63:44:70:16:ff:18:3a:9c:2e:
                    4c:9f:0e:9a:c5:44:4e:e9:db:ad:8c:56:71:6d:a3:
                    22:3c:60:e8:b5:88:0e:f9:b8:04:f7:27:b6:84:98:
                    2d:46:6e:e8:95:6a:b2:a7:ad:4a:fe:ef:e5:1b:3c:
                    7b:b5:81:c2:a3:3c:23:ca:26:ef:b4:71:83:e8:29:
                    b6:ea:c4:45:08:28:63:68:22:c3:94:e0:5b:91:6e:
                    e8:dc:ec:3d:04:b4:5f:0d:9d:ad:a5:48:9f:5f:3e:
                    5b:a3:ab:a4:8b:18:30:dc:7d:8c:11:c2:b8:3c:8e:
                    62:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:1E:5A:04:93:6E:88:18:EA:2A:C0:CC:52:E7:40:76:3B:D3:69:7B
            X509v3 Authority Key Identifier:
                keyid:7A:6C:A5:F8:25:4E:06:00:BF:D3:A4:5A:EE:DE:35:C2:4A:71:CC:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BgrT7t86dD7Pt44BKjpVsioX7hseB6SQQogKC9ZvLR7a/1/7A6CA5F8254E0600BFD3A45AEEDE35C24A71CCD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A6CA5F8254E0600BFD3A45AEEDE35C24A71CCD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BgrT7t86dD7Pt44BKjpVsioX7hseB6SQQogKC9ZvLR7a/1/323830343a326435383a3a2f33322d3438203d3e20323635323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d58::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:81:0f:de:0d:77:30:d4:ca:05:38:5f:dd:ca:11:44:a4:82:
         82:e2:ba:e8:fe:35:b9:18:10:15:64:ff:2e:bf:0b:5b:1a:b5:
         e1:40:1e:18:49:a9:97:4a:bd:10:48:6f:50:f0:bd:ad:cb:4f:
         e1:aa:05:1b:47:6c:33:e7:7d:42:b9:fe:7f:3e:99:2a:19:b2:
         b8:10:80:b3:ec:b2:98:a2:63:90:89:27:82:bc:94:ae:2d:e0:
         a8:cd:3c:5d:33:80:78:82:df:45:48:e8:fa:af:c0:be:71:d6:
         4b:74:2c:a9:c8:d3:50:ef:f5:38:07:91:63:0e:0f:58:96:80:
         3c:5e:08:24:38:79:52:a0:9a:4a:8b:61:b6:ba:74:67:c2:50:
         9d:36:b0:0b:ea:3d:07:37:c3:64:fc:09:69:06:24:b3:6e:df:
         a1:46:97:9f:b4:1d:35:d9:54:87:69:80:b4:0d:77:58:a0:ab:
         88:c7:20:1a:36:1b:4e:e4:d3:28:ac:24:fe:b9:aa:e5:45:e3:
         4f:88:17:b5:89:6a:e5:84:4e:a6:62:0a:d5:b0:19:b9:8d:18:
         f2:c3:de:06:96:20:e7:ff:6d:7a:75:4d:23:47:a6:27:4c:56:
         3c:a9:2a:f6:cd:3e:2e:76:0e:39:9d:8d:87:e6:3d:db:34:0e:
         d1:df:c5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----