Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/323830343a333934343a343030303a3a2f33342d3334203d3e20323636303232.roa
File:                     323830343a333934343a343030303a3a2f33342d3334203d3e20323636303232.roa (raw, json)
Hash identifier:          kjTy7NAg/vRbwkstif8xsD1RGl+oKLTKdvBX0QNPvtw=
Subject key identifier:   0E:99:8C:69:52:E1:94:EC:59:E1:6E:4A:1D:D3:80:CD:04:28:F4:46
Certificate issuer:       /CN=3F18422C71C9046C3B4C766867F0CC989883236F
Certificate serial:       40C85D817F3756559606498A65AA56B9D5F60890
Authority key identifier: 3F:18:42:2C:71:C9:04:6C:3B:4C:76:68:67:F0:CC:98:98:83:23:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F18422C71C9046C3B4C766867F0CC989883236F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/323830343a333934343a343030303a3a2f33342d3334203d3e20323636303232.roa
Signing time:             Mon 19 Feb 2024 11:49:32 +0000
ROA not before:           Mon 19 Feb 2024 11:44:32 +0000
ROA not after:            Mon 17 Feb 2025 11:49:32 +0000
asID:                     266022
IP address blocks:        2804:3944:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:c8:5d:81:7f:37:56:55:96:06:49:8a:65:aa:56:b9:d5:f6:08:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F18422C71C9046C3B4C766867F0CC989883236F
        Validity
            Not Before: Feb 19 11:44:32 2024 GMT
            Not After : Feb 17 11:49:32 2025 GMT
        Subject: CN=0E998C6952E194EC59E16E4A1DD380CD0428F446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:df:38:f4:48:3e:6e:b1:b6:fb:d2:27:6f:00:
                    ed:e2:9f:58:1a:81:06:2a:63:b2:30:a8:f0:5c:87:
                    13:96:96:72:05:d7:52:4e:ba:f0:61:48:9c:eb:a7:
                    e4:4a:87:42:0e:48:e8:f7:ce:82:fe:ad:9a:8c:06:
                    00:a5:29:0d:a7:8c:70:68:7b:74:7d:9b:e2:27:71:
                    27:35:91:6b:ce:f5:14:8b:ad:a8:3a:0d:bf:55:d3:
                    92:34:9c:7f:b8:95:cc:e1:e5:9f:bd:dc:f1:4e:0c:
                    f7:52:7e:80:9f:d2:79:d7:a8:da:48:b5:0a:10:95:
                    f2:93:94:fd:f1:61:51:d0:5b:15:69:27:2a:13:98:
                    2a:b2:2f:69:8e:d6:07:97:53:d6:65:c8:74:ba:24:
                    25:38:5b:ba:fa:76:55:21:9f:50:61:33:97:7c:6d:
                    29:3e:b3:93:14:8d:28:9f:5e:34:8d:ef:80:a9:e3:
                    3b:ff:0b:0b:65:ee:45:5a:dd:ff:bb:c8:c9:97:fe:
                    ad:67:74:94:64:bf:6c:9e:d9:ca:f3:52:8a:e5:d3:
                    03:15:7f:dc:29:d5:75:dd:2a:cf:cc:51:3d:19:15:
                    4a:df:33:9d:d9:d1:10:c0:69:98:84:b8:7e:33:92:
                    9a:24:aa:b3:14:d7:3e:69:c8:84:d0:78:5c:99:73:
                    55:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:99:8C:69:52:E1:94:EC:59:E1:6E:4A:1D:D3:80:CD:04:28:F4:46
            X509v3 Authority Key Identifier:
                keyid:3F:18:42:2C:71:C9:04:6C:3B:4C:76:68:67:F0:CC:98:98:83:23:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3F18422C71C9046C3B4C766867F0CC989883236F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F18422C71C9046C3B4C766867F0CC989883236F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/323830343a333934343a343030303a3a2f33342d3334203d3e20323636303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3944:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         16:8d:2c:07:0d:ce:8b:a3:fe:a0:8a:1c:7b:ea:f7:c9:48:48:
         d7:06:99:42:16:67:3b:cc:f1:ea:d8:34:2e:84:a1:7e:6d:78:
         33:69:4e:d9:ca:db:72:38:8e:e9:68:ba:03:d9:06:ce:e8:49:
         fe:3c:80:ee:ff:73:29:21:18:4c:9a:d8:1b:89:d8:4f:8b:57:
         1f:85:bf:19:63:86:27:f7:23:80:17:a5:ab:46:f5:b8:b3:5d:
         51:cf:6f:09:bd:8f:31:ab:8f:91:b2:a3:7c:4a:36:2c:7d:c5:
         03:46:d7:3f:cb:62:e8:db:29:54:f9:96:89:7b:66:74:4c:1e:
         a4:f1:1c:5a:c2:6e:28:a1:7a:76:ad:2a:fb:b8:a6:97:9f:f5:
         a1:81:ee:bb:da:2e:15:a9:1a:67:27:0e:34:a1:65:2f:48:d4:
         ea:79:54:41:63:d0:52:f6:d0:98:52:4b:78:66:c1:03:3c:bf:
         fc:d4:43:9c:00:8f:aa:18:c8:5d:e1:65:c5:19:77:48:0d:38:
         f4:3a:08:04:ee:b7:29:3f:2e:9b:ab:e4:e8:ba:a5:b9:19:4f:
         6f:38:4f:b0:3f:4e:0b:f3:9f:3b:c0:d3:6d:a2:d8:1b:44:e4:
         18:c0:91:c3:76:5a:6b:10:43:65:9e:cf:90:fe:df:54:8f:67:
         43:71:94:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----