Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/323830343a313934383a3a2f33322d3332203d3e203631373834.roa
File:                     323830343a313934383a3a2f33322d3332203d3e203631373834.roa (raw, json)
Hash identifier:          UsOM5YQM4pLOjYN3hYvr+WvW+VldArZxs23SpdZlYjI=
Subject key identifier:   F4:33:B7:E4:14:44:DA:5A:0D:18:53:A9:A8:FE:B1:3A:C3:C1:81:71
Certificate issuer:       /CN=1BDBB5DFA9C54F2972A81E74C4904512B468E0F8
Certificate serial:       4624334257B87EE86637640865A503B79028C895
Authority key identifier: 1B:DB:B5:DF:A9:C5:4F:29:72:A8:1E:74:C4:90:45:12:B4:68:E0:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BDBB5DFA9C54F2972A81E74C4904512B468E0F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/323830343a313934383a3a2f33322d3332203d3e203631373834.roa
Signing time:             Wed 20 Dec 2023 18:06:07 +0000
ROA not before:           Wed 20 Dec 2023 18:01:07 +0000
ROA not after:            Wed 18 Dec 2024 18:06:07 +0000
asID:                     61784
IP address blocks:        2804:1948::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:24:33:42:57:b8:7e:e8:66:37:64:08:65:a5:03:b7:90:28:c8:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BDBB5DFA9C54F2972A81E74C4904512B468E0F8
        Validity
            Not Before: Dec 20 18:01:07 2023 GMT
            Not After : Dec 18 18:06:07 2024 GMT
        Subject: CN=F433B7E41444DA5A0D1853A9A8FEB13AC3C18171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:dd:76:2f:f1:d0:4e:32:9a:9a:e8:cb:7c:fb:
                    14:48:2a:50:7a:ad:e2:39:88:47:ab:15:4d:a2:c1:
                    54:bf:d8:57:83:18:51:a8:df:5d:aa:38:70:79:5c:
                    5c:37:62:b7:2f:fd:27:07:4d:49:7e:ef:99:ad:ef:
                    6b:42:4a:c6:9c:e2:ef:c4:93:f7:9c:65:6d:6c:30:
                    5e:a1:27:74:9f:c3:01:3c:92:aa:aa:2c:01:1c:dc:
                    7f:8b:f0:e1:5e:6e:fc:fa:64:97:0e:e5:61:bd:47:
                    92:46:8b:db:a7:b9:71:11:a3:ca:ae:45:e9:94:f2:
                    73:de:c5:cd:81:2f:2d:2e:14:f4:b0:e8:79:b3:99:
                    3f:9a:27:62:46:ce:97:e4:ee:d0:d6:79:a4:f7:5a:
                    bd:21:ae:00:04:48:18:67:fe:0b:ee:24:16:bb:1e:
                    ea:5f:a6:55:87:c8:2f:cb:49:bf:c1:19:81:82:a9:
                    10:75:4b:24:e1:4c:ba:13:80:53:54:96:e7:51:e3:
                    e2:76:29:66:7d:bd:68:2c:2e:33:b3:1a:6c:bf:aa:
                    f8:6e:80:3d:e8:1e:9d:84:b9:a2:42:96:55:98:46:
                    2a:6c:ab:91:2e:37:5c:25:f9:ea:25:5f:e0:4b:d2:
                    0d:2b:55:55:57:0b:73:8e:d8:8e:1d:75:7f:f3:5e:
                    56:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:33:B7:E4:14:44:DA:5A:0D:18:53:A9:A8:FE:B1:3A:C3:C1:81:71
            X509v3 Authority Key Identifier:
                keyid:1B:DB:B5:DF:A9:C5:4F:29:72:A8:1E:74:C4:90:45:12:B4:68:E0:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/1BDBB5DFA9C54F2972A81E74C4904512B468E0F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BDBB5DFA9C54F2972A81E74C4904512B468E0F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/323830343a313934383a3a2f33322d3332203d3e203631373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1948::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:ba:6c:11:86:2b:43:14:76:0e:94:f0:39:3c:a3:e9:d8:3c:
         2c:92:35:0a:55:57:eb:35:30:c4:7b:08:36:58:87:e9:5d:fa:
         55:f2:24:c7:46:03:80:d7:98:c7:85:17:ac:f8:4e:81:db:a4:
         d3:44:a5:09:a0:7d:db:43:4a:c4:bc:fb:80:7b:ea:c2:a2:6f:
         8b:3f:5f:d1:ae:d4:3b:e3:ee:6f:c4:51:09:88:31:b1:10:02:
         2a:3b:51:e5:bc:6f:2e:2b:d9:79:37:9c:9b:3c:00:16:ac:ce:
         b3:2a:6a:8b:78:74:2d:e4:4a:2a:a2:cd:63:90:71:f0:27:6f:
         c2:c8:ce:52:2c:9c:60:89:06:b8:b2:b1:f3:63:d1:a0:dd:77:
         f5:b7:84:be:fc:79:e3:d1:60:c1:6a:33:23:8a:12:8c:15:4a:
         4e:35:1a:ce:6c:4f:9c:8f:94:69:fd:82:b9:e6:e4:7c:54:66:
         62:d8:21:2a:ac:01:27:ff:f3:e2:8c:01:10:a3:d2:7e:6d:b1:
         31:ad:7e:4d:e8:78:b5:a2:cc:be:5f:42:e0:d8:18:3d:6b:4a:
         d6:d1:ba:14:2e:30:13:ea:eb:dc:46:49:dd:d6:44:fd:f4:02:
         93:70:64:b5:dc:74:00:b0:ce:38:c5:76:9f:9e:bf:a0:88:2f:
         c1:21:ae:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----