Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a3a2f33322d3438203d3e20323633363239.roa
File:                     323830343a313034633a3a2f33322d3438203d3e20323633363239.roa (raw, json)
Hash identifier:          rIRbo2csqM++LWS9DaDYW8RytwG4rk/F11Q4Gv3o6Yg=
Subject key identifier:   74:C5:0A:20:19:AE:63:52:37:AE:02:94:EF:CD:F2:A9:31:D7:BB:3F
Certificate issuer:       /CN=B873691D1ECA5782C8E402766C0263DBED41A2F2
Certificate serial:       16CCB6E2B594DFC870CA396C294A7871267BB0EF
Authority key identifier: B8:73:69:1D:1E:CA:57:82:C8:E4:02:76:6C:02:63:DB:ED:41:A2:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B873691D1ECA5782C8E402766C0263DBED41A2F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a3a2f33322d3438203d3e20323633363239.roa
Signing time:             Wed 14 Feb 2024 18:08:21 +0000
ROA not before:           Wed 14 Feb 2024 18:03:21 +0000
ROA not after:            Wed 12 Feb 2025 18:08:21 +0000
asID:                     263629
IP address blocks:        2804:104c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:cc:b6:e2:b5:94:df:c8:70:ca:39:6c:29:4a:78:71:26:7b:b0:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B873691D1ECA5782C8E402766C0263DBED41A2F2
        Validity
            Not Before: Feb 14 18:03:21 2024 GMT
            Not After : Feb 12 18:08:21 2025 GMT
        Subject: CN=74C50A2019AE635237AE0294EFCDF2A931D7BB3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:36:6b:af:8c:07:3c:e5:10:ba:34:02:56:bf:
                    98:e4:3e:30:5a:e7:20:19:34:0a:e1:f9:fa:76:05:
                    e0:81:47:0c:15:c9:e1:31:b9:65:cc:48:cf:40:3d:
                    62:9c:78:c3:e8:95:c7:20:48:a6:e8:60:de:8c:9f:
                    65:0c:77:ee:b9:a2:6c:73:6d:66:76:37:86:e3:eb:
                    80:92:19:3c:9e:02:55:c8:77:1d:27:c0:3f:25:6a:
                    3c:c9:14:f5:5e:c0:77:b1:8f:04:40:77:51:ba:ca:
                    4a:78:f7:2c:1f:80:3b:69:ea:03:54:2a:d9:e9:71:
                    77:9e:ad:b0:43:30:2f:09:86:35:12:8f:e8:d9:db:
                    0a:ae:2b:b4:a0:d1:c4:2d:5d:31:ad:f4:ca:a6:d3:
                    ef:7c:a6:be:a7:1d:46:21:5d:ad:80:48:d1:cd:28:
                    75:94:f0:04:83:31:e6:1b:41:8f:10:b1:ae:75:b2:
                    ec:14:60:aa:f0:c2:35:8d:68:97:cb:82:71:47:77:
                    ad:2f:80:b4:93:50:ca:f6:f3:ca:5a:77:df:8b:55:
                    0c:bc:ff:dc:53:ac:b9:f4:ff:cf:4f:d4:41:15:37:
                    c5:2b:0e:ee:7c:69:74:70:c2:15:0e:93:8f:02:03:
                    e6:a0:9e:a7:d3:83:3e:ef:b0:06:06:d9:1e:e9:b2:
                    bc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C5:0A:20:19:AE:63:52:37:AE:02:94:EF:CD:F2:A9:31:D7:BB:3F
            X509v3 Authority Key Identifier:
                keyid:B8:73:69:1D:1E:CA:57:82:C8:E4:02:76:6C:02:63:DB:ED:41:A2:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/B873691D1ECA5782C8E402766C0263DBED41A2F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B873691D1ECA5782C8E402766C0263DBED41A2F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a3a2f33322d3438203d3e20323633363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:104c::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:48:0b:3b:48:34:bc:3b:fd:1e:ad:3a:d0:a3:1a:76:0c:70:
         74:0e:76:b3:3c:82:38:1b:3e:4f:16:06:e1:9f:48:71:59:52:
         ef:c7:51:b6:c4:57:b8:74:81:74:0f:f3:6c:6e:30:d3:ef:78:
         3c:a1:02:76:eb:2d:92:a4:bc:6d:89:c5:d1:80:c1:83:7b:31:
         54:93:14:65:ea:b3:74:5c:44:40:0c:b2:ac:58:54:35:01:75:
         aa:32:55:62:be:5c:d6:6b:26:f0:f0:6d:7e:c4:a2:4d:6c:ec:
         08:49:f5:18:f7:d1:e6:5c:d6:16:9a:99:d8:e3:74:38:38:f0:
         78:dc:89:ba:d9:32:8f:bb:48:3c:0d:18:6b:66:a9:05:17:85:
         df:41:9d:d7:bb:e3:8a:70:71:c9:7a:e2:69:e2:e9:1e:ab:2e:
         02:c4:90:9f:2a:33:73:d2:81:1d:25:66:06:4b:f8:f5:06:c0:
         75:cf:f0:10:7f:bc:69:48:39:82:51:f7:29:98:4a:9e:ea:a4:
         2f:90:e5:6a:42:60:6d:79:6a:64:92:79:d0:ed:fe:bd:80:85:
         3e:1c:5f:d0:19:c0:38:9a:e2:8c:fa:6e:2b:87:74:6f:0c:fd:
         90:da:a3:d7:5b:25:59:01:2b:a5:85:4f:8a:e6:6a:08:fc:24:
         90:66:ff:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----