Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/2/323830343a326430343a3a2f33322d3438203d3e20323635323537.roa
File:                     323830343a326430343a3a2f33322d3438203d3e20323635323537.roa (raw, json)
Hash identifier:          watwaNn0kzkh9OllcH7XXBabkmV7aGQLPciLA+pQ58M=
Subject key identifier:   F4:CB:1C:BA:51:45:1B:31:C6:59:84:DB:B4:24:E9:0E:8A:CB:FA:F5
Certificate issuer:       /CN=E1B1E1BF897FA6B6DA0141C819A170CA5DCF4574
Certificate serial:       2A05D5C2E0B7193B8E8E4DA0AA8C346F49A7FEA7
Authority key identifier: E1:B1:E1:BF:89:7F:A6:B6:DA:01:41:C8:19:A1:70:CA:5D:CF:45:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1B1E1BF897FA6B6DA0141C819A170CA5DCF4574.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/2/323830343a326430343a3a2f33322d3438203d3e20323635323537.roa
Signing time:             Thu 04 Apr 2024 22:31:22 +0000
ROA not before:           Thu 04 Apr 2024 22:26:22 +0000
ROA not after:            Thu 03 Apr 2025 22:31:22 +0000
asID:                     265257
IP address blocks:        2804:2d04::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:05:d5:c2:e0:b7:19:3b:8e:8e:4d:a0:aa:8c:34:6f:49:a7:fe:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1B1E1BF897FA6B6DA0141C819A170CA5DCF4574
        Validity
            Not Before: Apr  4 22:26:22 2024 GMT
            Not After : Apr  3 22:31:22 2025 GMT
        Subject: CN=F4CB1CBA51451B31C65984DBB424E90E8ACBFAF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e9:5d:7a:f4:60:78:2e:b6:f9:45:3a:72:74:
                    54:a8:3b:fc:ad:3c:7f:e6:fb:92:ed:60:3a:21:bf:
                    fe:a7:98:af:8a:c1:f2:27:45:a0:75:90:0a:3f:67:
                    7c:ca:21:01:f4:1c:6f:93:ee:0b:0c:ff:29:92:56:
                    5e:05:76:54:ab:65:77:6a:f2:b0:d3:5f:68:2e:2f:
                    8b:17:53:83:bf:2c:33:cc:5a:be:1c:4f:cb:82:d4:
                    97:50:60:3c:5f:54:3b:ff:ef:d3:ed:61:4b:5f:7a:
                    7f:7e:15:ee:52:d6:29:59:ac:0a:70:b8:a5:6e:7a:
                    33:a4:a8:fc:7e:ea:d4:54:aa:ca:ce:09:97:dd:ef:
                    3d:24:2f:07:3c:57:b9:e3:d9:ae:13:a2:60:32:6f:
                    4f:96:e1:e7:69:46:99:53:40:0a:eb:f4:7e:40:73:
                    63:57:13:33:86:f5:bd:50:de:7c:7c:1d:20:54:b5:
                    6a:6b:23:54:0f:c5:1d:67:14:53:79:c9:a1:3f:9d:
                    50:98:f8:b1:d2:5e:24:28:03:b2:f1:d8:e3:68:82:
                    be:09:f3:24:e7:fd:2b:22:8b:e1:c0:7b:fb:11:5b:
                    9d:e5:7e:2b:56:b8:4e:0e:56:c9:86:4b:89:bc:ab:
                    65:80:c4:f0:4c:e9:94:64:45:db:e6:24:d4:6e:9b:
                    8c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:CB:1C:BA:51:45:1B:31:C6:59:84:DB:B4:24:E9:0E:8A:CB:FA:F5
            X509v3 Authority Key Identifier:
                keyid:E1:B1:E1:BF:89:7F:A6:B6:DA:01:41:C8:19:A1:70:CA:5D:CF:45:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/2/E1B1E1BF897FA6B6DA0141C819A170CA5DCF4574.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1B1E1BF897FA6B6DA0141C819A170CA5DCF4574.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/2/323830343a326430343a3a2f33322d3438203d3e20323635323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d04::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:c1:27:d2:f4:79:78:7e:5e:24:19:26:67:ab:42:73:2c:00:
         b9:39:fc:2d:b5:2d:ff:09:a9:48:3f:9c:8a:fa:0f:84:27:b1:
         48:36:12:01:45:73:86:4a:5f:2e:bb:6a:0d:09:77:72:40:d9:
         8b:1a:c4:fa:1b:1e:aa:83:4a:8d:d9:5b:37:48:b5:a9:c3:c3:
         64:30:e1:11:4a:72:c3:fc:82:94:32:d2:93:62:42:f3:7d:a6:
         43:92:4d:d5:20:c6:e4:1d:ae:b3:31:ed:93:31:66:8b:fc:3f:
         0b:8c:91:ea:d5:10:40:5f:39:aa:ab:19:f2:75:1f:3e:48:90:
         54:45:33:87:be:03:71:7b:55:05:11:ab:8f:3b:33:cb:43:1f:
         65:c4:db:12:09:16:99:91:e4:66:14:8d:6a:78:97:d2:e5:0f:
         fb:a0:b2:13:c5:fe:8a:fa:3f:d1:c7:d1:bc:d0:4c:82:07:27:
         79:f7:e7:1f:84:43:26:71:9a:da:34:a9:d1:81:60:11:db:cb:
         15:c1:8c:88:13:e0:32:a5:41:4f:98:4b:4b:12:db:bd:25:e2:
         07:38:3e:30:18:dd:69:a1:1a:fa:74:e8:12:22:01:a3:80:1f:
         45:28:b5:3f:9e:dd:d0:1f:65:c5:92:cf:cf:fa:2f:af:48:bd:
         98:74:3e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----