Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CrsfgiFyWgRDD9YUMzAFbpPJgsjX2CDxKfXBeTvkezm2/1/323830343a366363343a3a2f33322d3336203d3e20323730343930.roa
File:                     323830343a366363343a3a2f33322d3336203d3e20323730343930.roa (raw, json)
Hash identifier:          IjLRGOt3NQXUAP7zIFhxZkmvkuAvxOqeBwkLdtqleiY=
Subject key identifier:   74:12:A9:AD:7E:17:5C:97:46:3F:86:3E:53:7C:F2:C9:CE:54:F2:AF
Certificate issuer:       /CN=91CF2C28848523B526C03E87C0083EF41A98971D
Certificate serial:       690270E0F3B7A21D18B61F6B491B6472C82B0E33
Authority key identifier: 91:CF:2C:28:84:85:23:B5:26:C0:3E:87:C0:08:3E:F4:1A:98:97:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CF2C28848523B526C03E87C0083EF41A98971D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CrsfgiFyWgRDD9YUMzAFbpPJgsjX2CDxKfXBeTvkezm2/1/323830343a366363343a3a2f33322d3336203d3e20323730343930.roa
Signing time:             Wed 03 Apr 2024 18:30:23 +0000
ROA not before:           Wed 03 Apr 2024 18:25:23 +0000
ROA not after:            Wed 02 Apr 2025 18:30:23 +0000
asID:                     270490
IP address blocks:        2804:6cc4::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:02:70:e0:f3:b7:a2:1d:18:b6:1f:6b:49:1b:64:72:c8:2b:0e:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91CF2C28848523B526C03E87C0083EF41A98971D
        Validity
            Not Before: Apr  3 18:25:23 2024 GMT
            Not After : Apr  2 18:30:23 2025 GMT
        Subject: CN=7412A9AD7E175C97463F863E537CF2C9CE54F2AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f7:71:25:fe:6e:77:0e:68:fb:5b:6b:93:a1:
                    85:5d:18:d4:1f:7b:4f:62:b7:d8:c2:c7:5e:eb:27:
                    fe:30:f0:c2:f5:01:05:de:74:3a:cf:b5:54:bc:8a:
                    db:a3:d1:7e:1b:ae:34:2c:b4:34:0c:3f:ba:da:d5:
                    bd:e3:b3:35:aa:66:b0:41:db:10:58:e5:ec:93:8c:
                    1d:a6:da:24:36:8a:66:eb:26:93:25:63:67:6b:e5:
                    dc:e6:e5:ff:60:e0:cc:01:ec:cf:b5:57:bc:70:88:
                    58:8b:02:f0:db:9d:ed:bd:0f:98:78:3e:8c:a4:80:
                    c0:40:4f:18:60:1d:1c:e5:29:b9:28:44:32:b7:9d:
                    2c:96:cc:65:7e:15:07:74:44:13:31:9c:ea:44:2c:
                    f0:f8:a7:2a:c0:c1:06:e4:7d:ca:bb:70:ff:80:39:
                    98:7b:cf:5c:26:09:48:c2:47:02:ba:06:30:c1:89:
                    d1:b5:18:5e:86:18:fb:65:21:da:7a:64:50:3c:ab:
                    7e:6e:c6:4c:66:b6:a8:b0:67:9d:4d:4c:e9:60:93:
                    52:44:19:e9:ad:7b:d2:ef:4a:65:df:27:3e:5a:72:
                    fb:96:e6:d1:0d:c8:28:17:c4:dc:76:77:92:3d:a1:
                    a0:b8:12:e0:a0:64:b7:27:3f:50:49:46:fa:00:cb:
                    25:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:12:A9:AD:7E:17:5C:97:46:3F:86:3E:53:7C:F2:C9:CE:54:F2:AF
            X509v3 Authority Key Identifier:
                keyid:91:CF:2C:28:84:85:23:B5:26:C0:3E:87:C0:08:3E:F4:1A:98:97:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CrsfgiFyWgRDD9YUMzAFbpPJgsjX2CDxKfXBeTvkezm2/1/91CF2C28848523B526C03E87C0083EF41A98971D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CF2C28848523B526C03E87C0083EF41A98971D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CrsfgiFyWgRDD9YUMzAFbpPJgsjX2CDxKfXBeTvkezm2/1/323830343a366363343a3a2f33322d3336203d3e20323730343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6cc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:5a:1e:9f:75:c8:34:8f:49:5c:8d:e5:18:bf:0d:ec:53:52:
         1e:01:63:f4:61:94:7b:91:10:61:1e:41:e2:a7:f8:81:06:cb:
         e4:d6:2b:c2:4e:b5:77:67:42:cf:23:8b:4e:af:96:64:a8:0d:
         a8:09:94:a5:ef:07:e0:ad:56:a5:73:15:75:73:d0:3d:67:ed:
         1b:16:be:3e:95:dc:fc:e2:83:96:9d:72:a3:b2:13:dc:5c:5b:
         dc:d7:da:a8:f4:57:8c:42:f3:fc:7b:16:93:5c:a9:23:bf:92:
         6a:79:f2:65:c8:a8:5e:63:10:1a:9e:e6:68:17:6a:c6:c5:7d:
         23:c6:dc:55:54:36:91:a3:13:7c:f9:9a:69:13:56:94:07:4f:
         a5:07:99:69:18:70:c1:48:02:c2:8a:c2:a0:32:bf:6b:b0:1d:
         2a:79:bc:41:d7:8a:98:e7:6a:52:9d:c3:72:a2:d7:97:38:20:
         8b:b4:6d:bf:33:87:57:e8:8f:cd:56:63:1d:91:73:35:13:8a:
         65:f7:69:6c:a9:f2:70:02:db:3a:3e:2f:0c:72:57:f5:cf:66:
         75:ef:3f:3a:3b:8b:0a:86:67:17:d2:98:16:a0:86:12:d5:d2:
         ca:c0:2c:6e:71:7b:91:0d:22:e0:5f:98:5c:f4:ae:d6:ab:31:
         09:70:1e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----