Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/323830343a376231383a3a2f33322d3332203d3e20323731343130.roa
File:                     323830343a376231383a3a2f33322d3332203d3e20323731343130.roa (raw, json)
Hash identifier:          /FLDy0lhZNRljNOhO3ODj7OuQMeQenlZMvc5YYYDY8Y=
Subject key identifier:   A3:46:29:D4:09:CA:6D:86:89:7F:A1:B6:5D:22:76:85:D5:AD:B7:2E
Certificate issuer:       /CN=50DE48A3BFC137A4D9A1AFB812475E21968193AB
Certificate serial:       3FA24C0BA099CC8130B428C94042224C36B073F3
Authority key identifier: 50:DE:48:A3:BF:C1:37:A4:D9:A1:AF:B8:12:47:5E:21:96:81:93:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/50DE48A3BFC137A4D9A1AFB812475E21968193AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/323830343a376231383a3a2f33322d3332203d3e20323731343130.roa
Signing time:             Mon 11 Mar 2024 16:11:40 +0000
ROA not before:           Mon 11 Mar 2024 16:06:40 +0000
ROA not after:            Mon 10 Mar 2025 16:11:40 +0000
asID:                     271410
IP address blocks:        2804:7b18::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a2:4c:0b:a0:99:cc:81:30:b4:28:c9:40:42:22:4c:36:b0:73:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50DE48A3BFC137A4D9A1AFB812475E21968193AB
        Validity
            Not Before: Mar 11 16:06:40 2024 GMT
            Not After : Mar 10 16:11:40 2025 GMT
        Subject: CN=A34629D409CA6D86897FA1B65D227685D5ADB72E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:82:39:66:f7:51:08:c6:a2:e3:1d:4d:65:79:
                    d4:05:56:fc:20:3b:e1:f4:ba:bd:92:31:99:44:14:
                    c7:3c:3e:8c:ad:51:24:a9:bc:61:25:16:6a:69:5e:
                    ec:b3:e6:45:27:67:a4:5f:3e:5c:b1:07:1d:06:d4:
                    8e:63:74:2f:c2:db:08:5c:4c:30:44:23:e1:e9:1e:
                    bf:24:c0:b7:72:71:f1:ba:66:11:ba:6e:01:a8:10:
                    83:0c:b5:a4:c0:81:58:78:f5:4d:61:3e:b2:82:e3:
                    ca:b5:13:e8:e2:69:9d:86:60:b2:3b:23:01:81:83:
                    37:a5:50:f3:29:67:82:95:62:6b:88:df:99:68:05:
                    3c:59:c8:30:23:29:16:53:32:6a:1c:d8:a7:69:63:
                    89:18:c1:7c:56:81:1a:cb:00:cf:bc:3b:bc:a4:ec:
                    f7:ba:6d:84:56:cd:03:3e:4e:97:4f:ea:b7:2f:c2:
                    1a:c4:6f:4d:79:d0:60:4b:f2:fc:7a:dc:c4:91:4c:
                    dc:97:49:7e:ff:40:8a:3e:95:4e:ec:b8:86:06:31:
                    ed:8d:11:4f:8c:aa:51:dc:28:ab:3f:0b:f6:6c:4a:
                    45:8c:47:21:27:a9:a1:fc:bd:bb:72:29:66:43:4d:
                    52:89:0f:12:5b:04:fb:da:0d:50:6c:f5:c1:09:a5:
                    b7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:46:29:D4:09:CA:6D:86:89:7F:A1:B6:5D:22:76:85:D5:AD:B7:2E
            X509v3 Authority Key Identifier:
                keyid:50:DE:48:A3:BF:C1:37:A4:D9:A1:AF:B8:12:47:5E:21:96:81:93:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/50DE48A3BFC137A4D9A1AFB812475E21968193AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/50DE48A3BFC137A4D9A1AFB812475E21968193AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/323830343a376231383a3a2f33322d3332203d3e20323731343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b18::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:f0:0c:7f:55:ae:a3:a5:25:b2:64:bd:db:5f:20:c2:9d:d4:
         3b:71:d1:b8:44:f2:55:5d:8a:db:19:3a:53:fc:8a:af:93:89:
         1d:87:52:a6:31:c0:29:24:82:78:fc:64:3a:4a:58:34:4f:be:
         4b:37:4a:34:7b:b9:40:2e:25:fa:7c:ff:9e:cf:df:64:50:77:
         1c:ad:b4:bd:3e:4c:d0:40:50:16:cc:18:67:f8:56:ea:70:c1:
         c1:1e:9c:3b:c4:f0:be:fa:c6:70:76:4b:4a:99:3f:5a:f3:e5:
         35:3a:06:a9:6b:d4:9b:f0:b8:6d:48:1f:26:03:17:0e:11:d7:
         8e:86:2d:4e:07:2e:89:f5:19:21:ec:e8:76:f5:62:20:6e:21:
         78:49:48:ff:ca:a3:1b:73:15:2e:39:3b:10:36:53:4b:2f:f0:
         a4:09:61:65:f0:b6:a9:1d:64:4d:d7:4b:0c:b5:e0:0f:6b:3e:
         11:ba:44:a7:de:00:8b:3d:49:69:21:d0:59:78:35:f9:c5:e4:
         7b:e8:92:f5:9a:96:2b:94:33:a8:be:c2:51:8f:ca:38:0e:93:
         e9:3a:95:b5:08:62:13:31:12:0b:8c:03:13:ea:98:37:c2:9a:
         d8:87:51:84:04:dc:b7:40:33:32:3d:e2:a9:23:6c:54:6e:e0:
         94:84:06:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----