Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BmWaa7bVsBmNpLeMtCXLvcAuLcZrHvJHNr1TYGfgMsS3/2/323830343a323562633a3a2f33322d3438203d3e20323634323939.roa
File:                     323830343a323562633a3a2f33322d3438203d3e20323634323939.roa (raw, json)
Hash identifier:          FbuKjXhMDAcfWDgHfgC/Nc3NuSTA/HBtgTeUKp0x9nM=
Subject key identifier:   DA:96:37:44:53:11:52:33:C6:9F:7D:A5:A2:48:E8:57:29:09:72:A8
Certificate issuer:       /CN=10C9E50412BDF457D326557F028EDEA1195C1FD7
Certificate serial:       6EEA1962424369DBA67CAA48B7EA9DF730B49E5A
Authority key identifier: 10:C9:E5:04:12:BD:F4:57:D3:26:55:7F:02:8E:DE:A1:19:5C:1F:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10C9E50412BDF457D326557F028EDEA1195C1FD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BmWaa7bVsBmNpLeMtCXLvcAuLcZrHvJHNr1TYGfgMsS3/2/323830343a323562633a3a2f33322d3438203d3e20323634323939.roa
Signing time:             Mon 22 Jul 2024 18:36:52 +0000
ROA not before:           Mon 22 Jul 2024 18:31:52 +0000
ROA not after:            Mon 21 Jul 2025 18:36:52 +0000
asID:                     264299
IP address blocks:        2804:25bc::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ea:19:62:42:43:69:db:a6:7c:aa:48:b7:ea:9d:f7:30:b4:9e:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10C9E50412BDF457D326557F028EDEA1195C1FD7
        Validity
            Not Before: Jul 22 18:31:52 2024 GMT
            Not After : Jul 21 18:36:52 2025 GMT
        Subject: CN=DA96374453115233C69F7DA5A248E857290972A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:db:1a:d9:33:59:c6:f1:d3:ba:78:fb:c6:e9:
                    80:b5:8e:d9:7a:60:07:3a:fd:c2:8d:85:6e:f6:6f:
                    f8:29:84:3a:db:64:9b:89:73:58:bd:9b:6a:7a:ff:
                    8a:05:9f:42:e7:db:58:b2:59:27:fc:6a:32:0c:e3:
                    1c:eb:c9:05:5a:83:e6:f6:eb:f9:74:de:7c:68:4b:
                    5f:f8:8b:1c:35:7e:df:b3:a9:f1:31:62:4b:ff:ff:
                    7d:8f:56:de:a2:e9:6a:b4:79:81:bb:01:5e:6e:bf:
                    e4:e7:bd:1b:98:d9:33:43:f6:1b:1a:76:9a:a3:88:
                    7c:17:36:79:f3:44:a0:e9:06:ba:6a:89:03:9e:5a:
                    55:44:18:06:a5:cb:d5:23:87:27:cb:c6:bc:6e:56:
                    ce:86:d2:7f:8a:27:83:86:95:62:41:23:f8:e8:c5:
                    fa:a0:2d:2d:57:0b:b8:07:c7:df:d0:51:4a:8f:d8:
                    10:0f:4b:ce:2c:df:8d:9d:72:d1:0b:7b:14:5e:c8:
                    9e:22:58:99:75:5b:4a:29:2d:8d:c6:db:af:a7:f0:
                    ff:f9:60:3e:b3:d4:cc:4b:92:ca:d5:8d:0e:fa:23:
                    8a:a2:c3:63:3d:fe:ce:ab:fc:83:55:36:87:c7:cc:
                    16:cb:93:cd:98:d3:11:19:eb:16:40:12:0b:53:cb:
                    6d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:96:37:44:53:11:52:33:C6:9F:7D:A5:A2:48:E8:57:29:09:72:A8
            X509v3 Authority Key Identifier:
                keyid:10:C9:E5:04:12:BD:F4:57:D3:26:55:7F:02:8E:DE:A1:19:5C:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BmWaa7bVsBmNpLeMtCXLvcAuLcZrHvJHNr1TYGfgMsS3/2/10C9E50412BDF457D326557F028EDEA1195C1FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10C9E50412BDF457D326557F028EDEA1195C1FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BmWaa7bVsBmNpLeMtCXLvcAuLcZrHvJHNr1TYGfgMsS3/2/323830343a323562633a3a2f33322d3438203d3e20323634323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:e5:c3:1b:d5:5c:78:13:43:ab:54:c4:a3:aa:cb:fe:7c:e5:
         0d:93:34:f2:08:27:44:e6:2a:a4:dd:ea:09:8b:6a:cb:82:8b:
         f2:be:4b:37:75:9f:29:7a:8f:48:1f:bb:f0:8b:32:55:c8:82:
         34:33:e4:dc:f8:bb:90:18:d7:36:cb:74:8a:5b:3f:54:d0:1b:
         58:8b:47:71:c6:0c:32:95:74:c5:43:3c:11:fc:fc:c6:9b:69:
         6b:84:22:28:26:f6:08:99:90:7a:50:e7:ff:11:b5:0b:8c:a3:
         d8:f2:84:fe:f5:93:3b:7d:ae:91:22:76:38:67:5d:36:98:a6:
         60:83:64:72:fd:00:e9:0d:d4:fb:7e:27:c1:ce:5d:fe:16:72:
         b5:b3:04:d2:d5:ba:c8:c5:22:03:ce:c6:db:33:24:52:e7:2d:
         61:c1:02:ff:83:b9:47:3c:65:5a:3c:dd:66:76:c0:62:82:c1:
         14:35:e0:16:89:cc:d2:51:77:9e:0e:db:4e:30:2b:20:92:88:
         43:d4:4e:9b:b3:ed:a7:c9:24:4d:a4:aa:c2:9a:bc:4e:f0:34:
         0f:4b:86:54:1c:ac:08:27:24:0f:78:fd:94:03:45:e2:e2:09:
         60:7c:96:4d:69:34:27:07:5d:9a:6b:46:fc:69:da:6b:1e:34:
         a9:eb:da:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----