Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CweHrY7tr7bth5qfdbnDHF7y9yZpGxRY749q7SU16izX/0/323830343a386465383a3a2f33322d3332203d3e20323733333839.roa
File:                     323830343a386465383a3a2f33322d3332203d3e20323733333839.roa (raw, json)
Hash identifier:          TFNOBFPvougM1DIJlUyRe8JobGwnhTQYmcU9lGsW084=
Subject key identifier:   82:0F:92:56:76:DF:44:87:40:DA:66:65:F5:9B:7A:B9:69:DC:AE:E1
Certificate issuer:       /CN=D051E6FFBFAEDFE64282A6CD43D0F3D15074CE29
Certificate serial:       580D827BC0DCC22ACE6A9DB89802FC8D80E5D578
Authority key identifier: D0:51:E6:FF:BF:AE:DF:E6:42:82:A6:CD:43:D0:F3:D1:50:74:CE:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D051E6FFBFAEDFE64282A6CD43D0F3D15074CE29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CweHrY7tr7bth5qfdbnDHF7y9yZpGxRY749q7SU16izX/0/323830343a386465383a3a2f33322d3332203d3e20323733333839.roa
Signing time:             Wed 13 Mar 2024 19:12:31 +0000
ROA not before:           Wed 13 Mar 2024 19:07:31 +0000
ROA not after:            Wed 12 Mar 2025 19:12:31 +0000
asID:                     273389
IP address blocks:        2804:8de8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:0d:82:7b:c0:dc:c2:2a:ce:6a:9d:b8:98:02:fc:8d:80:e5:d5:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D051E6FFBFAEDFE64282A6CD43D0F3D15074CE29
        Validity
            Not Before: Mar 13 19:07:31 2024 GMT
            Not After : Mar 12 19:12:31 2025 GMT
        Subject: CN=820F925676DF448740DA6665F59B7AB969DCAEE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:30:f8:00:70:54:25:6a:83:90:89:ff:b1:97:
                    3e:da:e5:1e:65:e5:5f:94:6d:f8:25:e4:bb:7b:65:
                    df:55:75:4a:03:d9:b1:24:7e:fc:8b:7a:94:5a:29:
                    95:9e:49:f0:b0:63:97:66:99:b1:42:60:96:ba:ac:
                    69:5b:ae:65:de:0e:ac:86:a0:64:ea:9f:1b:7f:5c:
                    b2:ed:cd:f3:7e:de:ce:c2:95:af:28:b3:4d:85:43:
                    e4:21:d5:3d:31:4f:d7:b3:b2:48:49:69:0a:58:60:
                    25:bf:0a:89:3c:51:ea:0b:93:18:6c:e2:ba:e9:d3:
                    3c:d4:fa:94:22:62:13:42:61:c9:49:56:21:83:d8:
                    3d:93:00:02:f5:5b:ab:1e:83:b0:11:3e:30:41:42:
                    c9:d4:a4:cd:47:34:b2:d5:38:8d:b4:d3:f5:ad:5e:
                    a3:32:83:08:7d:cb:1a:cd:1b:0d:dc:21:93:53:ab:
                    73:eb:c2:33:6f:26:ec:7b:98:fa:b6:58:3b:36:41:
                    a4:76:b0:f0:de:67:bb:47:d0:7c:64:9d:36:d7:fc:
                    03:3d:d8:46:19:cd:e8:71:3d:5e:46:be:95:fa:c4:
                    29:ef:99:8b:2e:a9:2e:44:1a:09:ba:46:db:55:82:
                    88:46:c2:c5:9e:ae:37:4c:71:7a:7b:17:6d:8d:fa:
                    32:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:0F:92:56:76:DF:44:87:40:DA:66:65:F5:9B:7A:B9:69:DC:AE:E1
            X509v3 Authority Key Identifier:
                keyid:D0:51:E6:FF:BF:AE:DF:E6:42:82:A6:CD:43:D0:F3:D1:50:74:CE:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CweHrY7tr7bth5qfdbnDHF7y9yZpGxRY749q7SU16izX/0/D051E6FFBFAEDFE64282A6CD43D0F3D15074CE29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D051E6FFBFAEDFE64282A6CD43D0F3D15074CE29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CweHrY7tr7bth5qfdbnDHF7y9yZpGxRY749q7SU16izX/0/323830343a386465383a3a2f33322d3332203d3e20323733333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8de8::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:cc:fd:7f:c2:ed:8d:42:e6:d2:1d:be:e0:88:29:aa:7b:0a:
         48:78:cb:12:6b:ec:e0:0b:12:36:7e:7e:17:3a:19:69:a4:5b:
         2b:fe:5c:28:44:24:70:c3:93:8c:84:8c:48:ae:25:d2:46:0c:
         d6:92:f4:9e:0b:3a:11:a3:3f:30:e3:07:30:6d:df:4a:7c:e1:
         86:ce:ac:d9:d8:35:63:74:47:65:b1:86:07:86:6c:84:c5:18:
         f2:bf:b8:46:62:01:dc:94:92:28:d4:db:3a:ff:db:05:48:91:
         2a:33:a8:69:e0:0e:d5:4c:1a:00:66:cf:c5:c9:7f:77:25:46:
         de:27:85:9c:1b:7a:d1:db:b3:d2:16:a2:db:c5:a8:9d:f5:f6:
         9a:c3:b6:7b:d0:d7:80:fd:48:79:7b:e1:d7:f5:1b:43:f7:8f:
         5f:7b:57:08:48:ba:e2:34:81:0b:e3:76:93:cb:c7:99:33:f6:
         c9:62:ab:ad:39:0e:03:da:d6:83:6f:1c:f5:43:47:c6:e6:9a:
         ed:98:04:ae:83:91:b8:98:c6:c4:62:19:6e:d7:f2:07:4b:2a:
         c5:ef:62:ba:87:30:20:cb:6b:ff:d8:00:d3:bb:90:f5:61:f2:
         6f:6c:d3:e7:ce:38:da:1c:4a:8a:8c:32:5e:62:f7:dc:75:9f:
         74:4b:d1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----