Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/1/323830343a373734633a3a2f33322d313238203d3e20323731313639.roa
File:                     323830343a373734633a3a2f33322d313238203d3e20323731313639.roa (raw, json)
Hash identifier:          q7ovtsfmazIyUCNHUamDNkUp4EnndJwP0s5sbuyOleY=
Subject key identifier:   42:71:BF:42:DD:0F:10:38:4C:9A:2D:3D:22:E5:2B:09:EE:93:E0:A0
Certificate issuer:       /CN=7FBEA60114E93180DF0AD8726842AAD2B761AAAB
Certificate serial:       7DC9ADFB365E880338195B1063CDDAFF80D5B622
Authority key identifier: 7F:BE:A6:01:14:E9:31:80:DF:0A:D8:72:68:42:AA:D2:B7:61:AA:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FBEA60114E93180DF0AD8726842AAD2B761AAAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/1/323830343a373734633a3a2f33322d313238203d3e20323731313639.roa
Signing time:             Fri 05 Apr 2024 02:12:49 +0000
ROA not before:           Fri 05 Apr 2024 02:07:49 +0000
ROA not after:            Fri 04 Apr 2025 02:12:49 +0000
asID:                     271169
IP address blocks:        2804:774c::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:c9:ad:fb:36:5e:88:03:38:19:5b:10:63:cd:da:ff:80:d5:b6:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FBEA60114E93180DF0AD8726842AAD2B761AAAB
        Validity
            Not Before: Apr  5 02:07:49 2024 GMT
            Not After : Apr  4 02:12:49 2025 GMT
        Subject: CN=4271BF42DD0F10384C9A2D3D22E52B09EE93E0A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d7:7d:fd:e7:55:01:e0:13:5e:79:35:8b:b8:
                    2a:fe:84:3f:7a:ff:2d:a4:fa:88:35:e4:0c:85:e6:
                    4e:23:a0:33:fc:6c:89:0c:64:b6:c4:4b:98:08:4e:
                    98:06:c5:11:da:b2:46:77:4a:c6:d8:34:41:b6:f4:
                    14:9f:a2:cc:b7:af:62:72:57:58:4a:81:69:33:98:
                    54:09:63:18:54:37:f1:5b:79:c3:34:99:25:53:88:
                    df:2c:79:b0:13:6c:b4:9b:62:3c:60:42:00:9c:29:
                    11:a1:9c:3c:ce:6d:be:f1:d4:98:32:dc:d8:61:51:
                    2c:55:fe:20:3b:7e:18:ef:9e:c5:70:a9:6d:14:c0:
                    2f:f7:91:87:1f:93:0b:6a:23:a2:a5:bb:21:ad:85:
                    c1:39:3f:c4:f0:e4:74:f1:f6:89:3d:2e:fe:11:69:
                    d3:0f:cb:7a:71:b5:74:34:70:f7:00:ad:76:6e:54:
                    d3:0d:60:4a:94:0d:0c:99:1b:bf:ce:eb:77:53:96:
                    c6:ca:6a:f2:c2:42:80:41:6d:0b:1d:35:27:8f:a8:
                    b4:90:c3:5c:74:4d:83:ad:7a:54:8c:be:06:95:57:
                    aa:23:7c:ff:60:ff:db:8e:84:61:37:99:bd:97:65:
                    e2:51:4f:61:d7:17:81:fd:c9:bc:7a:1e:8a:fd:d5:
                    82:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:71:BF:42:DD:0F:10:38:4C:9A:2D:3D:22:E5:2B:09:EE:93:E0:A0
            X509v3 Authority Key Identifier:
                keyid:7F:BE:A6:01:14:E9:31:80:DF:0A:D8:72:68:42:AA:D2:B7:61:AA:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/1/7FBEA60114E93180DF0AD8726842AAD2B761AAAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FBEA60114E93180DF0AD8726842AAD2B761AAAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/1/323830343a373734633a3a2f33322d313238203d3e20323731313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:774c::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:50:39:d9:a1:48:11:3a:79:0a:74:f0:46:35:5d:1b:19:84:
         58:24:1c:b1:44:f6:57:fb:1a:ac:2c:8b:9c:10:ed:32:bf:68:
         f0:57:e5:66:50:ad:91:f1:a1:39:97:04:95:be:2e:90:c4:82:
         25:ef:08:17:58:f8:fe:c8:41:77:02:59:c8:ad:70:d5:58:98:
         69:6d:31:27:bb:1c:32:58:9c:e3:6f:1b:3b:59:f3:ea:ce:98:
         b6:3b:8e:15:0a:89:b7:a9:d4:cf:63:fb:ce:55:4b:ba:18:e9:
         e4:79:f1:e1:c1:5f:fa:98:6a:b3:67:5e:3b:d7:34:06:69:6d:
         de:0f:9d:51:45:de:51:67:ea:33:b3:82:77:e4:bf:a1:8e:4d:
         3b:89:dd:86:05:e5:c7:c9:ea:3f:52:ba:2a:be:f0:ce:13:cb:
         1b:a6:26:41:93:01:5c:27:68:77:50:1a:d8:c7:ad:d7:d1:14:
         3e:ed:08:0f:0f:19:93:0d:81:47:a5:ac:c5:e3:66:62:7d:17:
         73:74:9e:69:ea:65:14:c6:bf:f5:43:c3:28:2c:3a:d7:3d:c1:
         29:4d:b2:f1:66:0f:87:4f:52:69:c6:24:8d:c1:f8:7c:e3:1c:
         a0:9c:5c:fe:91:88:18:28:02:f7:d6:54:29:30:5e:20:f3:bf:
         84:68:2d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----