Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/323830343a323663343a3a2f33322d313238203d3e20323633383535.roa
File:                     323830343a323663343a3a2f33322d313238203d3e20323633383535.roa (raw, json)
Hash identifier:          0qEPJ0q3JucnpDt2EYz/AgvY0S5hlrL8udJJv9jnt1A=
Subject key identifier:   5F:92:C5:3C:35:7A:98:EF:6E:EA:28:93:84:7C:9D:30:07:35:7C:12
Certificate issuer:       /CN=79BC27222346DEAF66F786FD18DD61E3847EE4CC
Certificate serial:       777FD919CF6C27780F030E970C3D32892C9A50F6
Authority key identifier: 79:BC:27:22:23:46:DE:AF:66:F7:86:FD:18:DD:61:E3:84:7E:E4:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/79BC27222346DEAF66F786FD18DD61E3847EE4CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/323830343a323663343a3a2f33322d313238203d3e20323633383535.roa
Signing time:             Wed 14 Feb 2024 15:47:04 +0000
ROA not before:           Wed 14 Feb 2024 15:42:04 +0000
ROA not after:            Wed 12 Feb 2025 15:47:04 +0000
asID:                     263855
IP address blocks:        2804:26c4::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:7f:d9:19:cf:6c:27:78:0f:03:0e:97:0c:3d:32:89:2c:9a:50:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79BC27222346DEAF66F786FD18DD61E3847EE4CC
        Validity
            Not Before: Feb 14 15:42:04 2024 GMT
            Not After : Feb 12 15:47:04 2025 GMT
        Subject: CN=5F92C53C357A98EF6EEA2893847C9D3007357C12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:02:84:4b:9e:10:af:97:80:ae:0a:f0:97:53:
                    a7:0d:da:fa:0d:49:c6:66:da:c4:ca:25:3d:28:b5:
                    e4:42:4c:b5:fd:78:79:6f:1e:b5:b2:1f:18:c5:21:
                    53:f4:84:0a:d3:c3:79:c4:37:64:5e:17:d0:92:40:
                    71:b7:68:19:3e:f1:bc:bc:d9:4e:3f:a7:de:5f:b6:
                    f7:6d:a7:56:28:87:ff:cb:83:a0:60:38:27:ba:b3:
                    74:8a:ca:a5:e5:b2:41:9c:46:39:bf:b8:11:c7:57:
                    de:95:56:16:16:b9:ea:f3:2d:2e:fa:38:73:9e:0f:
                    03:2e:e0:a2:e2:3e:cc:5e:fd:3f:53:43:e9:48:37:
                    55:c0:d4:e9:97:04:25:c8:fa:dc:42:0e:ab:5f:8a:
                    0a:3a:5a:dd:2b:e5:6f:7f:bf:48:92:f4:f3:9d:61:
                    d6:6b:ae:83:0d:35:b7:6c:bf:61:9e:b4:d5:93:18:
                    07:dc:17:06:0f:01:42:77:bb:93:4a:a0:d5:e6:e6:
                    3e:7d:12:6e:39:11:29:95:d1:87:8d:2b:b1:0c:b2:
                    d6:5b:f0:b0:1f:59:8f:79:44:db:ea:bb:bb:fd:e6:
                    35:7c:50:f8:90:bd:d8:85:b1:6e:76:00:22:4f:f1:
                    cc:75:2d:0c:a2:07:fc:2d:12:25:c2:f8:6b:cf:a8:
                    2d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:92:C5:3C:35:7A:98:EF:6E:EA:28:93:84:7C:9D:30:07:35:7C:12
            X509v3 Authority Key Identifier:
                keyid:79:BC:27:22:23:46:DE:AF:66:F7:86:FD:18:DD:61:E3:84:7E:E4:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/79BC27222346DEAF66F786FD18DD61E3847EE4CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/79BC27222346DEAF66F786FD18DD61E3847EE4CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/323830343a323663343a3a2f33322d313238203d3e20323633383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:26c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:f5:7d:0f:c3:12:1c:6d:c9:4a:4f:ea:fe:39:d7:89:4b:19:
         62:b1:c1:d9:fc:e3:ec:47:1f:41:ae:cd:87:19:a1:ca:4d:ff:
         2a:4a:49:71:89:30:74:aa:6a:a5:7c:53:07:1d:26:a9:54:da:
         5d:16:0c:36:d4:a8:5f:8d:b8:b0:8c:b4:c1:0d:f2:40:6a:19:
         c8:d0:9c:02:61:d8:10:de:42:f3:5e:df:91:6f:4b:9e:84:2c:
         0b:9c:31:8d:1a:b4:ea:65:4e:b1:12:d7:13:90:3d:ae:b8:c8:
         38:d7:8e:02:12:d5:40:03:85:ba:3a:15:4b:0d:88:f9:1c:ed:
         a9:7f:37:dd:88:93:6f:ea:df:60:98:de:cd:38:ee:5e:a5:ff:
         d2:96:be:8b:5f:d6:82:ca:a5:f8:ee:84:96:a7:a0:d6:a7:4d:
         df:58:d6:25:98:61:43:cf:aa:d9:ae:81:f5:5c:d8:d1:ab:b2:
         8b:ce:b1:df:2b:be:d0:67:2d:a8:74:f1:61:75:a8:5b:d0:b6:
         ce:21:b7:65:f4:0d:2b:6f:33:6d:69:0c:0e:86:c3:40:da:9b:
         51:af:99:a3:b0:39:a5:9c:a7:71:03:72:97:17:cb:97:23:d6:
         37:d5:25:9a:c4:78:4f:28:02:7f:c8:c3:b6:e7:3b:42:a5:d7:
         1e:54:4c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----