Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DLZXpu5mfvVCDExjb7LPV5ref5HFUPot8ZArPTvD8xKn/0/323830343a386561303a3a2f33322d3332203d3e20323733343338.roa
File:                     323830343a386561303a3a2f33322d3332203d3e20323733343338.roa (raw, json)
Hash identifier:          f5db6srh1hEvRKFtyo0sj0LUZ2XR0/rTEWKHFR8MFjU=
Subject key identifier:   41:C5:B2:26:65:7C:8D:76:31:35:CD:A2:3C:9C:8D:C6:5F:9A:64:59
Certificate issuer:       /CN=897EF702A89CA6A995605BBAAD69AECA2154C41C
Certificate serial:       1CCC60390FE6BF3001E80F0FC0E28B65F7EEFA36
Authority key identifier: 89:7E:F7:02:A8:9C:A6:A9:95:60:5B:BA:AD:69:AE:CA:21:54:C4:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/897EF702A89CA6A995605BBAAD69AECA2154C41C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DLZXpu5mfvVCDExjb7LPV5ref5HFUPot8ZArPTvD8xKn/0/323830343a386561303a3a2f33322d3332203d3e20323733343338.roa
Signing time:             Mon 25 Mar 2024 14:29:38 +0000
ROA not before:           Mon 25 Mar 2024 14:24:38 +0000
ROA not after:            Mon 24 Mar 2025 14:29:38 +0000
asID:                     273438
IP address blocks:        2804:8ea0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:cc:60:39:0f:e6:bf:30:01:e8:0f:0f:c0:e2:8b:65:f7:ee:fa:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=897EF702A89CA6A995605BBAAD69AECA2154C41C
        Validity
            Not Before: Mar 25 14:24:38 2024 GMT
            Not After : Mar 24 14:29:38 2025 GMT
        Subject: CN=41C5B226657C8D763135CDA23C9C8DC65F9A6459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ec:fc:7b:ef:3a:bf:4c:b2:62:72:0f:4a:3c:
                    78:18:94:99:af:56:fc:b1:87:43:d4:96:54:52:8b:
                    a7:4e:b0:5c:f6:e4:5c:a4:79:be:62:9a:29:ee:41:
                    c0:97:ac:ea:8f:49:33:b7:97:85:08:87:e9:d3:ce:
                    30:a2:a1:36:65:62:53:9f:ea:3b:f5:e5:da:45:66:
                    22:0a:f7:fd:cd:db:f1:c7:ff:23:01:93:a7:a7:47:
                    01:de:7d:bf:7e:20:f0:c8:31:c9:d0:1b:07:f5:ad:
                    03:83:2d:06:b2:76:9a:2f:93:39:df:4b:82:c3:f1:
                    d1:09:bb:7c:35:82:6a:53:d7:76:f9:7c:15:4f:2f:
                    ec:1a:10:36:d0:aa:fa:45:2f:fb:fa:8e:57:dc:ab:
                    bc:98:7d:33:e7:89:78:d2:0c:68:60:8f:f9:50:e9:
                    fa:98:1c:81:93:bf:44:a3:69:34:4d:df:6e:e0:ba:
                    63:2a:82:cb:2e:33:0e:91:9d:75:f5:21:c9:41:1d:
                    1c:50:e8:60:80:5e:3d:07:84:78:1f:31:d5:9c:26:
                    85:64:1e:37:94:a6:f0:6f:ba:db:54:41:0d:b1:47:
                    a8:ed:58:02:6c:35:c5:52:32:8a:ce:d3:07:08:ff:
                    c1:74:6f:49:f3:72:b9:84:81:2d:37:15:c9:ff:7f:
                    bf:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C5:B2:26:65:7C:8D:76:31:35:CD:A2:3C:9C:8D:C6:5F:9A:64:59
            X509v3 Authority Key Identifier:
                keyid:89:7E:F7:02:A8:9C:A6:A9:95:60:5B:BA:AD:69:AE:CA:21:54:C4:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DLZXpu5mfvVCDExjb7LPV5ref5HFUPot8ZArPTvD8xKn/0/897EF702A89CA6A995605BBAAD69AECA2154C41C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/897EF702A89CA6A995605BBAAD69AECA2154C41C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DLZXpu5mfvVCDExjb7LPV5ref5HFUPot8ZArPTvD8xKn/0/323830343a386561303a3a2f33322d3332203d3e20323733343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ea0::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:95:71:a3:56:a7:55:48:47:a0:0a:46:e8:42:10:5d:b5:61:
         df:2a:49:5a:11:39:44:0f:19:07:12:31:aa:cd:ef:ae:88:3f:
         7d:16:9c:fa:e6:54:cf:9c:58:f2:f8:42:65:13:4c:e1:63:a6:
         27:ce:6e:75:33:59:d0:1a:eb:4f:35:a8:b8:ee:33:bd:94:2d:
         f6:aa:d9:e7:13:4a:0d:fc:03:9c:48:c5:3b:18:d2:b2:35:ec:
         67:39:3c:c7:f5:ec:90:f9:8b:f2:2a:e7:aa:99:8e:a4:5e:0a:
         2d:37:6f:38:9e:cc:9b:54:ce:01:96:b0:ee:03:b9:f4:48:72:
         5a:26:57:44:55:28:73:6e:c0:58:21:55:e9:94:9b:ca:cc:ba:
         0b:95:c9:f9:fe:4c:8a:b8:1b:9f:e2:3c:d3:3c:53:9e:82:cf:
         40:88:8c:fa:eb:85:b8:1e:16:20:c3:15:45:aa:d2:ec:7c:7d:
         5d:c5:36:56:17:34:c7:1c:45:08:24:81:4d:f7:06:df:20:2e:
         84:37:bd:15:35:0d:17:a1:3e:ab:35:f6:d7:ae:00:15:66:01:
         2b:4c:27:5f:4c:a2:ef:51:5e:42:95:07:87:5e:0b:0f:2e:29:
         3b:4d:a8:40:aa:71:ea:ee:eb:78:44:fb:ba:72:2f:b0:54:4b:
         b0:e7:eb:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----