Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/323830343a323539633a3a2f33322d3332203d3e203532373732.roa
File:                     323830343a323539633a3a2f33322d3332203d3e203532373732.roa (raw, json)
Hash identifier:          dmTe2N2Bni826teL6n6Bfl9LrsJ5NVq7PKa8t+EGZBo=
Subject key identifier:   40:97:C5:6A:3B:41:A9:42:7A:86:B2:74:DA:C9:D4:E7:FF:90:AF:13
Certificate issuer:       /CN=2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F
Certificate serial:       1A958A6142681DC73AECBD008444FCE0B7A09D80
Authority key identifier: 2B:0E:37:CE:5F:21:EE:8A:D5:F2:86:A8:2A:5B:F9:E4:5B:30:BE:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/323830343a323539633a3a2f33322d3332203d3e203532373732.roa
Signing time:             Wed 03 Apr 2024 21:54:19 +0000
ROA not before:           Wed 03 Apr 2024 21:49:19 +0000
ROA not after:            Wed 02 Apr 2025 21:54:19 +0000
asID:                     52772
IP address blocks:        2804:259c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:95:8a:61:42:68:1d:c7:3a:ec:bd:00:84:44:fc:e0:b7:a0:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F
        Validity
            Not Before: Apr  3 21:49:19 2024 GMT
            Not After : Apr  2 21:54:19 2025 GMT
        Subject: CN=4097C56A3B41A9427A86B274DAC9D4E7FF90AF13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:33:68:50:72:56:00:bf:9c:f2:a1:c1:a2:a8:
                    32:cd:92:f1:cf:f9:24:63:24:8e:61:eb:a2:c2:9b:
                    ae:78:45:e3:58:6d:62:da:11:69:7a:2b:87:93:b6:
                    2b:c7:83:8d:15:47:7e:94:61:e4:4e:cf:b3:be:f4:
                    7d:9d:44:a2:07:b3:db:65:12:d0:6c:55:21:a0:bd:
                    be:0e:99:a9:8a:e0:6a:89:02:d0:8d:fb:65:e2:2d:
                    e4:91:e4:91:5c:9b:70:94:d8:e6:d5:49:05:e6:a9:
                    d9:1a:e3:cf:3c:18:b4:57:d0:c9:9b:43:e2:c4:c2:
                    e2:06:26:d1:29:2c:4d:ad:a9:6d:7d:09:11:d4:4a:
                    8f:5a:e7:1e:bb:da:44:20:4e:59:e0:c3:c7:9a:da:
                    56:65:66:42:3a:2f:a0:4a:2c:3d:1a:4c:c0:eb:ab:
                    11:19:a3:fa:f9:bc:e1:3d:b2:78:c7:06:b9:3e:48:
                    e2:2a:2f:ff:95:3e:48:d0:38:91:39:37:5c:71:0b:
                    44:b7:ed:a3:7d:33:9f:23:08:50:8b:55:c4:6c:9e:
                    94:76:2a:1d:55:78:03:9c:d1:1f:95:1b:19:c6:67:
                    b3:fd:67:d0:d3:d0:aa:f4:29:1f:70:12:83:6a:91:
                    08:8d:65:a4:36:04:5c:3d:8e:36:0c:4b:f0:dc:1d:
                    e1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:97:C5:6A:3B:41:A9:42:7A:86:B2:74:DA:C9:D4:E7:FF:90:AF:13
            X509v3 Authority Key Identifier:
                keyid:2B:0E:37:CE:5F:21:EE:8A:D5:F2:86:A8:2A:5B:F9:E4:5B:30:BE:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/323830343a323539633a3a2f33322d3332203d3e203532373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:259c::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:75:cd:50:14:d7:f2:16:fb:a2:00:9c:98:cc:00:fb:7f:e0:
         29:6a:2b:d0:d6:74:83:2c:24:61:47:d8:a2:48:db:72:b5:df:
         8f:40:0c:10:fb:98:c2:8b:ee:00:68:34:d4:eb:17:73:2c:ea:
         09:ed:d8:2a:1e:82:74:53:79:ad:c0:27:ac:8e:7a:c6:4c:65:
         1a:2e:3d:43:0b:ea:8a:60:bd:e9:fb:42:d0:3e:75:0a:75:be:
         7a:40:be:cc:6d:3d:f6:78:36:92:de:da:18:8c:34:e3:4f:95:
         d6:ba:f0:0c:fb:15:00:42:89:12:64:c3:cc:07:f3:7b:ff:03:
         a2:25:04:53:ce:92:4b:ba:e7:0c:42:35:2e:1a:de:ef:9c:26:
         d0:59:14:8c:6d:80:34:f4:15:f0:11:4d:83:15:98:ae:69:e3:
         f8:10:13:ff:b4:ea:c4:b1:d3:fb:0a:44:8d:bf:9b:09:69:10:
         7d:1c:a9:2c:9a:f6:1d:96:91:85:57:8d:74:02:c2:77:65:18:
         f7:cf:ac:cc:90:15:4f:52:91:5d:5b:d1:30:b1:21:41:ed:82:
         6d:dd:b4:f5:de:1c:76:77:a1:84:4a:f0:64:5a:f1:36:06:6c:
         ad:ee:e0:a4:f0:bd:19:b4:01:8b:f5:f1:5e:a3:a1:a9:58:8e:
         d0:ee:68:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----