Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/323830343a316330343a3a2f33322d3438203d3e203631363333.roa
File:                     323830343a316330343a3a2f33322d3438203d3e203631363333.roa (raw, json)
Hash identifier:          +YE0bpZyVGG0gN1dQcSWiKy4BT7+0mxY50IwiwLgBjk=
Subject key identifier:   5F:9B:4A:52:42:D0:9E:6E:B6:AF:38:DD:7D:84:B9:6D:D5:A4:0F:05
Certificate issuer:       /CN=CDE7AD619ADE061F54FC38424291FA04B034E709
Certificate serial:       5096649F30E56FC44AF4DC96769D709D92280AFC
Authority key identifier: CD:E7:AD:61:9A:DE:06:1F:54:FC:38:42:42:91:FA:04:B0:34:E7:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDE7AD619ADE061F54FC38424291FA04B034E709.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/323830343a316330343a3a2f33322d3438203d3e203631363333.roa
Signing time:             Wed 10 Apr 2024 13:32:05 +0000
ROA not before:           Wed 10 Apr 2024 13:27:05 +0000
ROA not after:            Wed 09 Apr 2025 13:32:05 +0000
asID:                     61633
IP address blocks:        2804:1c04::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:96:64:9f:30:e5:6f:c4:4a:f4:dc:96:76:9d:70:9d:92:28:0a:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDE7AD619ADE061F54FC38424291FA04B034E709
        Validity
            Not Before: Apr 10 13:27:05 2024 GMT
            Not After : Apr  9 13:32:05 2025 GMT
        Subject: CN=5F9B4A5242D09E6EB6AF38DD7D84B96DD5A40F05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:87:ff:d8:bd:05:96:b8:56:7e:2f:56:6a:45:
                    ad:36:35:a1:e7:fb:e9:d7:b2:1a:a5:43:25:62:88:
                    77:81:a7:d3:0a:74:49:78:32:94:86:e2:81:c2:aa:
                    d0:bc:14:c5:6c:ce:53:e2:c7:6f:33:5a:35:15:aa:
                    19:39:2a:4f:b1:27:9d:ba:c4:f4:81:99:c6:92:4d:
                    1d:0c:7f:16:db:a5:08:d8:01:86:fc:4c:d3:b8:75:
                    eb:1a:b6:9e:0a:40:e4:bb:41:86:82:9d:c0:67:ab:
                    d5:e3:2c:56:d6:19:b0:6a:de:7e:5e:39:4f:ad:39:
                    98:45:50:99:73:cf:d9:99:16:0d:25:ec:7e:2a:49:
                    12:46:a8:e0:05:bf:cf:60:5e:32:bf:4a:e1:19:30:
                    a1:3c:7c:fe:ef:b8:69:ba:a3:35:59:e5:d9:19:03:
                    91:12:a5:b9:8c:46:6d:0b:77:e0:01:2e:a4:1a:aa:
                    bf:33:36:0f:65:be:57:8d:ce:a6:14:d8:d2:cb:cc:
                    34:9c:80:97:68:38:d9:69:c1:d3:df:6c:ac:5a:5f:
                    38:55:cc:d7:29:a9:e7:52:73:fd:72:2f:b4:16:54:
                    c9:1f:74:a5:2c:23:ea:04:49:4c:4b:7b:59:9b:3c:
                    a1:23:07:22:0d:64:71:8e:a3:66:14:a1:6a:56:0a:
                    93:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:9B:4A:52:42:D0:9E:6E:B6:AF:38:DD:7D:84:B9:6D:D5:A4:0F:05
            X509v3 Authority Key Identifier:
                keyid:CD:E7:AD:61:9A:DE:06:1F:54:FC:38:42:42:91:FA:04:B0:34:E7:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/CDE7AD619ADE061F54FC38424291FA04B034E709.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDE7AD619ADE061F54FC38424291FA04B034E709.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/323830343a316330343a3a2f33322d3438203d3e203631363333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c04::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:68:66:02:25:e2:86:57:95:4f:1c:9f:d6:ea:c5:aa:91:dd:
         8c:ac:c8:7c:60:e0:37:a7:94:f8:0f:4d:59:81:a7:80:6d:19:
         3e:57:5d:69:cd:e2:9e:66:7e:e7:95:6f:d1:b3:05:4b:6b:98:
         48:41:22:9a:51:ac:29:cd:f5:a6:e8:92:7a:b2:17:da:eb:18:
         e4:9c:cc:e5:d1:94:2c:70:8f:09:27:3f:88:3d:42:ae:54:9d:
         f8:6e:c4:5c:c7:43:46:e5:76:57:d3:fc:fe:2e:cf:5a:4e:4e:
         7e:e0:0a:b3:8d:09:cb:64:f0:3b:84:03:17:b3:8f:66:43:bb:
         52:04:b9:03:9f:b8:df:e9:cf:e3:34:73:fd:68:f3:f8:95:f3:
         8b:21:25:6d:5d:4a:2f:8b:8b:bc:eb:91:47:74:6e:41:cb:11:
         d7:ba:b3:0a:06:f4:0f:dd:ea:3c:80:c6:4c:42:4b:08:08:7f:
         fe:48:cd:26:e4:0e:24:bf:2c:46:cc:ee:87:b2:c8:82:ab:bd:
         cc:3f:fd:43:b9:e5:29:a4:71:ea:39:2f:15:06:23:01:e5:e6:
         df:8b:a3:b6:5a:da:09:27:e9:d0:81:f2:b8:09:7a:8a:57:73:
         75:ae:3d:eb:f8:13:e6:d2:a4:51:e3:8d:e6:6f:91:e5:34:f3:
         c3:3b:f1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----