Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/1/323830343a316162633a3a2f33322d3438203d3e203631383832.roa
File:                     323830343a316162633a3a2f33322d3438203d3e203631383832.roa (raw, json)
Hash identifier:          5T3rNg9VTJQV4/aAa9zfypfv5c4QXfa+57aWVrsPbqE=
Subject key identifier:   E4:E7:1E:1C:EC:AC:20:31:87:F1:AA:3C:04:24:CD:0B:55:8B:E4:45
Certificate issuer:       /CN=0F73309BD187659C71CCBDC81E84964AD6C5AEEA
Certificate serial:       0A7AF3571D808898C87FAB83D527E896D27F2F6A
Authority key identifier: 0F:73:30:9B:D1:87:65:9C:71:CC:BD:C8:1E:84:96:4A:D6:C5:AE:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F73309BD187659C71CCBDC81E84964AD6C5AEEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/1/323830343a316162633a3a2f33322d3438203d3e203631383832.roa
Signing time:             Mon 08 Apr 2024 19:25:05 +0000
ROA not before:           Mon 08 Apr 2024 19:20:05 +0000
ROA not after:            Mon 07 Apr 2025 19:25:05 +0000
asID:                     61882
IP address blocks:        2804:1abc::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:7a:f3:57:1d:80:88:98:c8:7f:ab:83:d5:27:e8:96:d2:7f:2f:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F73309BD187659C71CCBDC81E84964AD6C5AEEA
        Validity
            Not Before: Apr  8 19:20:05 2024 GMT
            Not After : Apr  7 19:25:05 2025 GMT
        Subject: CN=E4E71E1CECAC203187F1AA3C0424CD0B558BE445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:c4:c1:79:c8:73:4a:c7:0c:44:ec:12:da:40:
                    05:3c:89:64:60:4b:b0:fa:1b:b5:21:c8:f7:66:56:
                    b7:51:91:11:7e:7b:dc:e4:1a:91:77:83:97:68:27:
                    7d:63:d5:82:97:b0:e9:a3:15:15:ea:d4:98:7e:6a:
                    30:55:83:e9:0c:a3:38:0a:3c:ac:89:52:e0:81:c4:
                    33:6e:26:ca:dd:f7:c1:7f:e8:b8:56:3f:2b:ec:0e:
                    e6:62:f5:e5:19:36:d4:a1:5d:9d:6e:02:22:a0:e4:
                    67:11:9e:36:6e:bd:f4:c8:84:48:76:c7:7d:ac:b8:
                    31:e0:bd:ac:61:f8:9d:96:e2:bf:cb:84:1a:3e:6d:
                    06:30:57:24:71:55:dc:d1:34:ad:3f:5a:15:de:4d:
                    f6:0d:bb:68:e5:c4:1c:2b:67:25:35:38:06:f5:b6:
                    b2:83:db:37:01:8e:84:50:b8:ea:1e:89:4e:c0:af:
                    15:ad:ce:6a:78:12:6c:5d:f8:f0:59:66:4a:14:34:
                    82:10:07:1a:02:3f:8c:7d:e6:4d:08:2e:b6:fd:d2:
                    b6:56:22:45:c5:bc:33:89:3c:32:60:b2:5a:18:88:
                    2f:1d:45:af:0d:26:1e:94:80:e5:74:d4:14:28:6b:
                    b8:25:a9:34:e3:ba:44:76:a4:09:83:36:5c:5e:6d:
                    3c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E7:1E:1C:EC:AC:20:31:87:F1:AA:3C:04:24:CD:0B:55:8B:E4:45
            X509v3 Authority Key Identifier:
                keyid:0F:73:30:9B:D1:87:65:9C:71:CC:BD:C8:1E:84:96:4A:D6:C5:AE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/1/0F73309BD187659C71CCBDC81E84964AD6C5AEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F73309BD187659C71CCBDC81E84964AD6C5AEEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/1/323830343a316162633a3a2f33322d3438203d3e203631383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1abc::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:da:f3:38:45:ae:ce:84:d2:5d:ae:68:72:dc:88:10:45:b6:
         12:bc:74:43:86:f7:17:4e:e9:e5:5d:f5:81:42:1a:e8:13:86:
         bb:a5:ff:31:94:a4:d5:0d:3b:48:b7:1c:ea:e6:6d:6f:0c:df:
         9f:47:42:f9:ec:6e:5e:39:22:80:89:67:fd:75:6d:66:f0:b4:
         f5:f7:66:8f:e6:fa:8f:f0:1a:47:0b:20:65:d5:45:73:91:1f:
         de:67:72:2b:d5:5e:7b:06:c6:70:48:bd:70:47:89:e0:69:00:
         77:17:70:f7:50:dc:71:23:a2:3b:e1:26:e6:51:7b:ec:57:12:
         0f:9a:a2:4b:1a:65:56:82:df:0d:75:96:25:b1:8b:69:ef:9a:
         de:82:88:25:b9:cd:7f:21:3e:d8:11:ad:8d:c0:53:44:c5:55:
         95:eb:13:c1:62:ff:0f:9f:03:77:cd:ae:75:3c:ab:e2:e5:a1:
         37:48:9c:28:e5:b0:8a:b5:31:ab:8f:ee:a8:df:c8:b7:4d:ab:
         07:de:2a:c7:88:41:63:2c:de:e9:6f:f9:f9:43:5c:9c:ab:24:
         b7:1c:e6:b5:4f:28:e1:a4:05:8b:56:8c:50:4e:8f:5b:f6:7d:
         60:c4:bd:9a:f4:89:f3:a3:4a:4a:ff:25:5e:1a:00:e3:49:50:
         fc:b5:d3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----