Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DGVX5rmpLw9zHR8hC2KkbhDo6gSr9H5KYxwUS7WkjScy/0/323830343a353262343a3a2f33322d3438203d3e20323638353335.roa
File:                     323830343a353262343a3a2f33322d3438203d3e20323638353335.roa (raw, json)
Hash identifier:          euLnaMtx29109JsIJnxfY9DlcInnIhfwD8yKF2Zvv5Y=
Subject key identifier:   46:57:91:07:71:F6:52:F0:A3:8F:6B:7B:5D:7F:66:A5:31:28:24:24
Certificate issuer:       /CN=03B7839EAB56EABD873F350BD6ACC062C9336DAB
Certificate serial:       408EDA3FF3C755D7BB70D1FC8F2849BDF5D03014
Authority key identifier: 03:B7:83:9E:AB:56:EA:BD:87:3F:35:0B:D6:AC:C0:62:C9:33:6D:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03B7839EAB56EABD873F350BD6ACC062C9336DAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DGVX5rmpLw9zHR8hC2KkbhDo6gSr9H5KYxwUS7WkjScy/0/323830343a353262343a3a2f33322d3438203d3e20323638353335.roa
Signing time:             Wed 10 Jan 2024 20:43:49 +0000
ROA not before:           Wed 10 Jan 2024 20:38:49 +0000
ROA not after:            Wed 08 Jan 2025 20:43:49 +0000
asID:                     268535
IP address blocks:        2804:52b4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:8e:da:3f:f3:c7:55:d7:bb:70:d1:fc:8f:28:49:bd:f5:d0:30:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03B7839EAB56EABD873F350BD6ACC062C9336DAB
        Validity
            Not Before: Jan 10 20:38:49 2024 GMT
            Not After : Jan  8 20:43:49 2025 GMT
        Subject: CN=4657910771F652F0A38F6B7B5D7F66A531282424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b7:20:b0:d5:da:5d:42:a2:88:aa:b4:ec:bd:
                    a1:34:18:b4:cc:0d:54:63:53:cc:39:d6:ca:eb:41:
                    f9:31:c0:a1:57:c2:ca:b3:89:0c:da:61:51:ab:ef:
                    c9:99:35:8a:f2:24:8a:24:9e:1d:d2:9b:fd:6c:06:
                    f4:62:22:b2:98:8a:28:e1:db:66:60:8c:4c:fa:72:
                    ee:64:00:69:9a:a2:5a:ab:27:d7:dd:8d:75:43:46:
                    a0:79:d6:a8:82:42:b9:92:bc:5f:92:da:a5:06:d5:
                    80:d0:4d:bc:02:f2:86:3e:7f:ad:3a:db:90:d6:56:
                    ef:99:b2:7b:0f:09:74:43:63:b5:6f:90:c9:73:6f:
                    cf:6d:ba:55:e7:1c:88:83:54:b1:23:e6:c4:bc:2c:
                    ef:50:6b:0f:d5:29:35:02:eb:12:a5:c1:c6:ac:9b:
                    11:ed:ec:ae:f4:71:96:79:de:c7:13:41:90:b3:1c:
                    57:ac:3e:f0:b8:7d:1a:8d:31:b7:81:d4:d0:43:31:
                    c6:c9:2f:dd:12:41:4d:73:46:21:a2:7f:47:b8:f1:
                    63:f2:91:61:0e:09:18:7f:2d:58:f6:bd:63:53:0f:
                    29:5e:0f:81:18:a2:d0:8a:59:d3:fe:d0:c8:27:f0:
                    4c:56:aa:c5:4a:7c:05:2e:48:bb:59:b1:2b:2b:2a:
                    c5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:57:91:07:71:F6:52:F0:A3:8F:6B:7B:5D:7F:66:A5:31:28:24:24
            X509v3 Authority Key Identifier:
                keyid:03:B7:83:9E:AB:56:EA:BD:87:3F:35:0B:D6:AC:C0:62:C9:33:6D:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DGVX5rmpLw9zHR8hC2KkbhDo6gSr9H5KYxwUS7WkjScy/0/03B7839EAB56EABD873F350BD6ACC062C9336DAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03B7839EAB56EABD873F350BD6ACC062C9336DAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DGVX5rmpLw9zHR8hC2KkbhDo6gSr9H5KYxwUS7WkjScy/0/323830343a353262343a3a2f33322d3438203d3e20323638353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:52b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:65:75:b4:d8:31:fb:95:ed:52:5e:74:46:8e:b5:11:b5:ba:
         41:32:4d:cb:ac:ae:78:4c:36:27:76:e3:4f:99:1c:98:eb:7d:
         26:f1:68:24:e4:a1:7b:f7:26:2e:2d:b4:a1:44:09:1b:00:77:
         79:c3:3c:0d:05:e0:20:71:5d:ab:0d:e1:f1:a8:f4:fa:23:8a:
         8f:3c:79:c7:e0:e1:c4:a0:84:e7:d1:ef:59:e3:92:dc:ed:a7:
         14:7a:80:0c:98:a0:c3:64:07:ef:5a:28:25:37:39:55:22:cb:
         5a:8c:b6:f6:56:5c:9e:37:7e:53:1c:76:ec:70:b6:6d:1d:74:
         73:ad:4a:5c:e1:c5:84:d8:c7:52:42:b4:cd:41:d5:6d:0d:61:
         a0:2a:c0:e9:a8:06:3e:6b:b2:dd:09:b1:76:22:58:5f:ed:7b:
         ab:8f:ab:d1:3e:a3:9f:54:5a:4f:af:f4:2a:e1:cd:ea:bc:fe:
         36:04:d7:46:c0:ef:95:e7:39:d9:5d:e9:05:e0:d9:6c:17:39:
         80:cd:c1:a6:02:6e:53:28:82:ad:74:9b:3a:e4:20:84:aa:01:
         a2:90:a5:fb:0e:ae:e2:b2:d5:38:bf:7a:dd:5d:f0:fd:8d:85:
         76:b5:b4:f4:06:4a:7d:2f:de:60:73:60:7c:dc:5a:d8:0e:ad:
         42:8a:d5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----