Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/323830343a316330343a666466663a3a2f34382d3438203d3e203631363333.roa
File:                     323830343a316330343a666466663a3a2f34382d3438203d3e203631363333.roa (raw, json)
Hash identifier:          CtlHP2nROBDL7O+FqPw/1WViSxA4HmlRU5s3zz382W8=
Subject key identifier:   4F:AC:A4:47:A1:FF:48:B7:1E:90:8C:57:05:F2:7F:F7:1B:54:08:A0
Certificate issuer:       /CN=1D16A29FF5A822EA4EF70D6E05227DB9CFC579EF
Certificate serial:       5A544606B1A461358809E80FE4B7C303F3376E40
Authority key identifier: 1D:16:A2:9F:F5:A8:22:EA:4E:F7:0D:6E:05:22:7D:B9:CF:C5:79:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D16A29FF5A822EA4EF70D6E05227DB9CFC579EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/323830343a316330343a666466663a3a2f34382d3438203d3e203631363333.roa
Signing time:             Fri 23 Aug 2024 19:54:54 +0000
ROA not before:           Fri 23 Aug 2024 19:49:54 +0000
ROA not after:            Fri 22 Aug 2025 19:54:54 +0000
asID:                     61633
IP address blocks:        2804:1c04:fdff::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:54:46:06:b1:a4:61:35:88:09:e8:0f:e4:b7:c3:03:f3:37:6e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D16A29FF5A822EA4EF70D6E05227DB9CFC579EF
        Validity
            Not Before: Aug 23 19:49:54 2024 GMT
            Not After : Aug 22 19:54:54 2025 GMT
        Subject: CN=4FACA447A1FF48B71E908C5705F27FF71B5408A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:97:a9:bc:3c:8d:07:b2:62:58:d2:78:38:a7:
                    b7:f3:3c:2b:de:83:25:c2:53:3a:86:ca:18:8e:4f:
                    4e:5c:7b:a5:a8:10:75:93:3d:13:01:c2:64:04:ab:
                    86:68:44:7e:33:cc:f0:75:de:c7:f5:1d:eb:1c:7c:
                    a6:7e:0c:0a:ed:c1:49:10:22:4a:45:22:be:5d:5e:
                    a3:d9:91:bd:ba:a4:d9:5e:ab:af:d7:23:21:68:09:
                    8f:ca:80:88:c9:a1:fc:58:07:a6:ba:e2:71:2b:e8:
                    b3:6e:0a:2c:8e:3d:36:4a:15:8c:51:47:f3:18:8f:
                    87:49:69:63:e4:39:01:aa:df:dc:15:5d:a8:07:d8:
                    47:fb:6d:b5:ff:65:60:12:80:b2:ca:8a:46:0f:aa:
                    12:ca:6a:05:75:a6:92:69:76:34:0f:3e:17:49:85:
                    e1:90:64:30:e2:89:aa:44:fb:02:c1:d4:b6:5d:7f:
                    2d:49:02:90:75:2a:cd:ff:9d:03:b4:fa:64:62:84:
                    c9:cc:5d:45:5e:68:4a:79:a1:f3:c4:c8:b7:c1:0a:
                    e4:03:63:59:31:0d:6a:65:1b:28:41:1e:2a:1a:fc:
                    6e:86:5c:27:f4:c8:8b:3b:6b:2c:58:d2:18:cb:cf:
                    48:d0:fc:23:88:bc:ef:d8:02:51:f9:a7:0d:aa:c3:
                    65:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:AC:A4:47:A1:FF:48:B7:1E:90:8C:57:05:F2:7F:F7:1B:54:08:A0
            X509v3 Authority Key Identifier:
                keyid:1D:16:A2:9F:F5:A8:22:EA:4E:F7:0D:6E:05:22:7D:B9:CF:C5:79:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/1D16A29FF5A822EA4EF70D6E05227DB9CFC579EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D16A29FF5A822EA4EF70D6E05227DB9CFC579EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/323830343a316330343a666466663a3a2f34382d3438203d3e203631363333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c04:fdff::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:42:df:6a:2c:bc:52:37:50:a4:13:d4:74:02:09:be:a5:04:
         0b:1c:10:0d:71:41:f8:44:5c:1d:bc:30:66:fb:95:a1:82:d1:
         98:7b:27:ee:aa:dd:17:df:46:b7:ab:cc:2a:1a:b7:0f:ac:4c:
         0c:51:51:da:bc:80:78:b5:45:38:d4:3a:1f:75:e1:cb:da:e8:
         53:71:76:3c:c6:0d:fa:d0:af:79:f2:4c:17:0d:26:74:cf:bb:
         ad:3f:11:8f:e0:45:45:4d:10:78:03:19:69:de:1a:df:ae:a6:
         57:8f:55:95:eb:ca:ae:bd:75:60:d3:e3:3e:8c:8c:7e:7d:45:
         13:bf:2f:0a:fb:79:a1:9c:61:f9:9d:1f:02:75:d0:ca:c1:38:
         5a:6a:ee:2a:e5:55:ee:a7:d9:67:01:66:e1:86:f6:3f:a5:9d:
         dd:dd:10:30:b4:c7:bf:74:b4:4a:09:21:09:94:5e:d0:67:be:
         06:8b:d4:c1:2d:9a:74:b2:1f:fd:07:36:5a:1d:50:ab:17:0d:
         4e:1b:b6:01:7b:bb:cd:92:22:f5:98:13:d5:90:09:fe:9b:24:
         c6:b3:22:a2:37:76:70:5b:3f:2f:06:69:5c:93:d8:b1:2a:15:
         da:64:55:d4:ce:b0:f7:40:6c:44:13:ab:c8:1d:50:19:31:10:
         5c:e9:23:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----