Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/323830343a6433633a383030303a3a2f34382d3438203d3e203532363133.roa
File:                     323830343a6433633a383030303a3a2f34382d3438203d3e203532363133.roa (raw, json)
Hash identifier:          zy4p4/XhsFFWubtyzEyi5GeBvM/6q5gW+teob39jz1I=
Subject key identifier:   88:C3:15:C1:AC:3D:39:C4:2C:76:18:75:3D:69:28:93:66:C6:9B:7D
Certificate issuer:       /CN=EE41996111A070E5D185B28EC741E0A608B24EDC
Certificate serial:       0EAAB9FB5E935CC4CAF4F44B4CA065885664F0C0
Authority key identifier: EE:41:99:61:11:A0:70:E5:D1:85:B2:8E:C7:41:E0:A6:08:B2:4E:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE41996111A070E5D185B28EC741E0A608B24EDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/323830343a6433633a383030303a3a2f34382d3438203d3e203532363133.roa
Signing time:             Wed 06 Mar 2024 14:52:00 +0000
ROA not before:           Wed 06 Mar 2024 14:47:00 +0000
ROA not after:            Wed 05 Mar 2025 14:52:00 +0000
asID:                     52613
IP address blocks:        2804:d3c:8000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:aa:b9:fb:5e:93:5c:c4:ca:f4:f4:4b:4c:a0:65:88:56:64:f0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE41996111A070E5D185B28EC741E0A608B24EDC
        Validity
            Not Before: Mar  6 14:47:00 2024 GMT
            Not After : Mar  5 14:52:00 2025 GMT
        Subject: CN=88C315C1AC3D39C42C7618753D69289366C69B7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:11:fe:cd:26:c4:fc:04:c5:7a:1d:a0:31:87:
                    70:29:50:90:24:fc:6b:4d:1e:29:5a:d2:3a:38:96:
                    ed:7f:11:5c:21:fd:e6:ec:55:fd:f3:b1:dd:19:63:
                    37:d4:86:58:67:22:c2:e0:e9:e2:4e:24:4b:fa:bd:
                    97:e1:c2:23:e0:1e:32:d3:a4:7e:b8:94:fb:65:1f:
                    7d:9f:5d:2a:79:45:c1:26:e5:5e:b9:28:97:e3:8c:
                    36:81:6d:fc:29:6d:8a:d5:9b:d8:27:7d:6e:e8:ba:
                    fc:24:af:9b:73:f9:0b:11:c8:25:b1:c2:e4:a3:72:
                    8f:49:a6:39:0c:22:19:86:11:7d:2b:7f:cb:6a:26:
                    3d:9e:58:8e:6a:ca:6c:82:f5:d0:c4:85:38:8a:e2:
                    38:73:6c:d8:ba:25:ad:24:dc:2b:af:aa:3c:f5:ce:
                    d4:46:a4:23:e8:e8:c7:03:05:e3:ef:59:1c:0b:60:
                    6c:b1:9b:6b:58:6d:da:18:81:d5:7f:f8:f9:39:87:
                    72:a3:6c:08:78:20:ac:e4:e0:7e:b9:41:23:47:6a:
                    80:b5:b4:b1:c9:1b:b3:dd:cc:70:c9:51:68:34:52:
                    bc:70:1d:64:e9:b7:e3:45:fc:53:43:b4:27:f4:61:
                    14:42:33:e4:d8:5b:8b:7e:f6:23:dc:79:d7:48:fe:
                    0f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C3:15:C1:AC:3D:39:C4:2C:76:18:75:3D:69:28:93:66:C6:9B:7D
            X509v3 Authority Key Identifier:
                keyid:EE:41:99:61:11:A0:70:E5:D1:85:B2:8E:C7:41:E0:A6:08:B2:4E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/EE41996111A070E5D185B28EC741E0A608B24EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE41996111A070E5D185B28EC741E0A608B24EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/323830343a6433633a383030303a3a2f34382d3438203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d3c:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:88:6c:72:49:e6:49:47:01:37:f1:a9:9a:7a:92:5c:ae:bb:
         11:31:53:3f:ee:19:2d:5b:ae:a6:33:8d:73:09:44:d4:90:59:
         f3:ba:0d:50:0f:31:73:9f:6b:13:ec:98:12:67:b1:e9:22:e4:
         71:ef:b9:35:db:d5:c1:ad:56:39:99:2a:1c:fc:72:3c:97:33:
         ac:aa:3c:0c:00:f4:30:2a:ac:cb:bd:78:68:5f:c8:cb:93:fa:
         bd:6a:ad:73:42:de:b5:68:0d:9f:b9:22:e3:85:68:33:14:8b:
         23:39:36:eb:2e:e9:36:87:09:75:8d:3d:1b:f7:1c:85:4a:04:
         e3:fb:8d:e0:5f:5a:14:0d:01:d3:d2:84:df:f2:5c:e2:58:98:
         78:a7:75:18:20:8d:b9:59:30:89:61:8b:1a:65:d8:42:17:f2:
         55:07:1b:a8:19:b8:52:01:15:63:7d:24:76:50:ce:85:4f:14:
         62:00:d8:5a:9b:27:f8:d7:f3:9d:dd:f5:60:f4:7c:f2:15:0b:
         ef:6b:63:25:27:02:10:fc:4c:c8:67:87:b0:fe:75:98:aa:bc:
         21:e5:70:36:42:c2:cd:ea:ca:2b:1b:16:ce:90:f5:bd:97:cf:
         2a:b8:68:1a:8c:79:9d:81:80:d5:0c:2a:f2:86:f0:2b:65:62:
         45:7f:e2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----