Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/323830343a326637303a373030303a3a2f34382d3438203d3e20323634383931.roa
File:                     323830343a326637303a373030303a3a2f34382d3438203d3e20323634383931.roa (raw, json)
Hash identifier:          tbdl2PDnCKgXq157Za7HbEtKTo2+X8Wpiwd0nfx8UiY=
Subject key identifier:   36:E2:B2:80:F0:7A:31:DE:01:D2:89:0D:FC:5C:1D:F7:63:B3:49:F9
Certificate issuer:       /CN=4E6DA43B69CD8C7E9EC9EF843CCE24BE36F94138
Certificate serial:       4676896DC00AF114773A158095402E4C0792C8B1
Authority key identifier: 4E:6D:A4:3B:69:CD:8C:7E:9E:C9:EF:84:3C:CE:24:BE:36:F9:41:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E6DA43B69CD8C7E9EC9EF843CCE24BE36F94138.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/323830343a326637303a373030303a3a2f34382d3438203d3e20323634383931.roa
Signing time:             Thu 04 Jan 2024 13:08:28 +0000
ROA not before:           Thu 04 Jan 2024 13:03:28 +0000
ROA not after:            Thu 02 Jan 2025 13:08:28 +0000
asID:                     264891
IP address blocks:        2804:2f70:7000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:76:89:6d:c0:0a:f1:14:77:3a:15:80:95:40:2e:4c:07:92:c8:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E6DA43B69CD8C7E9EC9EF843CCE24BE36F94138
        Validity
            Not Before: Jan  4 13:03:28 2024 GMT
            Not After : Jan  2 13:08:28 2025 GMT
        Subject: CN=36E2B280F07A31DE01D2890DFC5C1DF763B349F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9b:71:2e:b1:a3:74:71:dd:21:e2:41:b9:99:
                    e9:72:bc:b2:8a:47:9c:29:b1:77:b6:55:cb:2e:e0:
                    e5:ec:06:3d:c5:f4:4e:9e:23:4d:44:c7:03:12:a2:
                    60:4d:9e:fc:fd:b4:9c:52:8d:c5:a4:ca:f6:5a:60:
                    bd:f8:39:f7:1a:7a:3a:79:16:10:e3:e3:37:f6:02:
                    ae:fb:74:7e:92:32:41:3f:e1:40:73:eb:af:f8:37:
                    0d:a8:f3:3a:a2:be:47:cf:2b:17:a8:38:13:60:de:
                    b7:8f:53:b5:60:16:b5:ab:89:a9:23:6b:68:04:55:
                    0d:15:66:92:97:be:ee:6e:19:1a:3c:0a:cc:db:a5:
                    2a:4f:5e:89:45:94:6b:99:73:ae:2a:93:12:7e:19:
                    26:95:d9:bd:e5:5e:3d:04:9d:5b:a3:8a:1c:88:e8:
                    af:df:d5:6b:2e:cc:35:74:75:55:31:1d:6b:79:24:
                    c4:dc:e5:49:a0:2b:56:b8:5d:74:41:5d:23:a8:df:
                    5b:11:f4:b3:fb:c3:55:c0:b8:a4:bf:9d:f9:95:dc:
                    4c:9c:0b:b1:78:28:3c:66:e8:50:68:d9:1d:f6:e6:
                    dd:23:65:5e:60:7c:54:24:e7:01:88:4a:e0:8d:cc:
                    00:03:95:c5:fe:4b:d5:b2:88:ad:dd:9b:65:a4:e5:
                    45:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E2:B2:80:F0:7A:31:DE:01:D2:89:0D:FC:5C:1D:F7:63:B3:49:F9
            X509v3 Authority Key Identifier:
                keyid:4E:6D:A4:3B:69:CD:8C:7E:9E:C9:EF:84:3C:CE:24:BE:36:F9:41:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/4E6DA43B69CD8C7E9EC9EF843CCE24BE36F94138.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E6DA43B69CD8C7E9EC9EF843CCE24BE36F94138.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/323830343a326637303a373030303a3a2f34382d3438203d3e20323634383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f70:7000::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:bd:62:a2:55:bd:24:05:cc:7c:52:87:55:f8:9d:90:c9:f8:
         16:76:cc:f4:5b:9f:0b:29:c1:5b:e7:8e:c5:f2:a9:e6:29:3c:
         2d:de:2e:fc:c3:7b:14:45:b3:5d:df:ad:ff:be:73:83:c7:05:
         83:1f:73:d0:cb:43:24:2c:4e:60:0a:96:64:ac:69:a3:ec:5c:
         4e:8f:4d:05:03:9e:ec:ab:a1:f5:a1:3c:37:bc:06:f6:1d:ca:
         c9:8d:2e:cc:63:a0:30:07:34:a5:2d:f5:07:55:a0:27:41:48:
         73:bc:d0:87:54:28:fc:c3:33:e0:ee:9a:be:67:60:ce:a6:67:
         96:2e:e7:4f:31:0b:bb:73:8c:09:af:09:e1:54:2b:7b:90:68:
         4b:18:e7:34:6a:47:08:01:de:93:c6:b6:e1:19:34:21:bf:f6:
         c6:b7:c5:b4:2a:ac:a5:21:ec:c6:0e:bb:74:d2:7d:14:71:6e:
         c0:6d:65:78:1e:0d:47:d6:cf:9f:16:42:4e:c4:e4:dc:7b:f2:
         d4:40:aa:00:44:2f:79:9b:1f:6e:40:56:88:9b:70:5a:85:8d:
         69:9b:8a:14:2b:bc:dd:6d:ee:a9:77:76:7c:f8:b6:41:7c:fa:
         c0:43:1f:ea:ef:7f:12:73:87:2f:12:d0:a5:d4:9b:71:4f:58:
         e1:32:ef:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----