Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/323830343a376332343a383030303a3a2f33342d3334203d3e20323731343738.roa
File:                     323830343a376332343a383030303a3a2f33342d3334203d3e20323731343738.roa (raw, json)
Hash identifier:          Gop1ldol0F0KFKyQ1ExIPWN1qym+YAb1Iz4PSO57RNM=
Subject key identifier:   1E:D8:32:B9:57:E0:90:F9:EF:47:32:AE:57:9A:60:BB:D5:C6:62:EE
Certificate issuer:       /CN=5AC857044932470260E44A2750076A9293F37835
Certificate serial:       57FFE9FBE00696858607DDD92D8AB85B656128B3
Authority key identifier: 5A:C8:57:04:49:32:47:02:60:E4:4A:27:50:07:6A:92:93:F3:78:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AC857044932470260E44A2750076A9293F37835.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/323830343a376332343a383030303a3a2f33342d3334203d3e20323731343738.roa
Signing time:             Wed 31 Jan 2024 00:50:25 +0000
ROA not before:           Wed 31 Jan 2024 00:45:25 +0000
ROA not after:            Wed 29 Jan 2025 00:50:25 +0000
asID:                     271478
IP address blocks:        2804:7c24:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ff:e9:fb:e0:06:96:85:86:07:dd:d9:2d:8a:b8:5b:65:61:28:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AC857044932470260E44A2750076A9293F37835
        Validity
            Not Before: Jan 31 00:45:25 2024 GMT
            Not After : Jan 29 00:50:25 2025 GMT
        Subject: CN=1ED832B957E090F9EF4732AE579A60BBD5C662EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:18:d9:ba:82:e5:68:8d:6e:eb:db:9f:c2:a3:
                    67:1a:74:43:92:51:02:72:45:e8:31:ef:56:70:21:
                    46:78:76:a9:6c:66:59:08:72:47:98:7d:9d:f5:80:
                    1a:95:48:c6:50:ce:c1:2e:9c:f3:74:4e:f0:19:36:
                    57:49:8d:48:c7:6f:2e:78:4a:28:a8:f1:95:dd:20:
                    ec:4a:7a:53:d0:15:d9:c2:97:b7:fb:9b:86:0b:29:
                    10:68:e7:5d:9e:ab:b5:b4:4f:40:53:79:d9:e2:76:
                    6c:28:22:15:bb:c1:7e:74:b8:7d:ad:13:fc:dc:4c:
                    a9:bf:85:cc:8c:58:d5:72:fc:f8:02:2e:94:4f:d1:
                    d0:4f:c1:ab:ad:75:3a:62:be:39:81:e4:21:7b:ef:
                    3f:37:40:76:5d:91:7b:3a:14:ad:e8:de:bd:d7:78:
                    0c:31:7e:8c:32:ea:47:8a:5c:3d:cb:c8:b0:d6:85:
                    0f:d9:b7:2a:0b:7f:84:ce:bf:16:ae:27:be:57:ca:
                    6e:bb:67:e6:c4:cc:e8:5e:33:93:bf:4e:c3:e7:65:
                    2e:db:aa:4a:d8:33:cf:f3:4f:2f:1c:b9:7c:3c:b0:
                    25:57:8e:ed:72:9c:9d:7c:9f:d3:7d:20:c6:52:4f:
                    91:25:34:1c:cd:2e:f4:e2:27:63:41:e8:73:1c:c7:
                    e3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:D8:32:B9:57:E0:90:F9:EF:47:32:AE:57:9A:60:BB:D5:C6:62:EE
            X509v3 Authority Key Identifier:
                keyid:5A:C8:57:04:49:32:47:02:60:E4:4A:27:50:07:6A:92:93:F3:78:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/5AC857044932470260E44A2750076A9293F37835.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AC857044932470260E44A2750076A9293F37835.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/323830343a376332343a383030303a3a2f33342d3334203d3e20323731343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c24:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b1:c4:8a:46:a2:36:7d:1a:83:90:9d:d1:39:c0:e8:74:3d:2c:
         89:c3:50:ab:a7:d5:a4:4f:93:2c:9a:aa:de:6c:68:cb:b5:e8:
         6f:99:1e:e3:9f:11:48:70:22:f2:b2:a6:74:5b:56:f4:83:3a:
         e5:2f:16:da:ef:5d:96:42:48:09:f9:89:e7:69:5c:a7:a9:cb:
         f6:12:14:7a:48:44:28:17:be:ad:a3:14:31:7e:b0:2c:7a:51:
         44:20:52:49:f7:e3:9e:67:2e:21:62:6f:c6:c3:9c:5b:e3:c8:
         5d:45:f7:3e:78:69:b6:22:1c:6c:38:4a:d2:6e:33:51:ab:b3:
         b8:f5:d7:15:aa:59:cf:fd:e5:44:81:bf:c5:0a:34:3e:77:9b:
         0f:e9:09:0d:ba:18:1d:b3:ee:e8:d0:54:7a:10:cb:0e:76:f0:
         c0:fd:9b:52:5a:e7:2e:c7:49:0f:73:a9:78:f3:2e:43:0e:91:
         89:8a:60:d0:85:b6:2a:54:fe:39:50:00:0a:ee:e4:d2:0c:79:
         ef:07:05:3d:6a:58:8a:db:e6:fb:9b:1c:80:56:cd:74:02:7e:
         80:fe:86:2d:b6:3c:ae:7a:41:ff:e4:9e:58:2c:73:b2:f8:fd:
         50:ab:bf:e1:04:bf:00:86:fd:70:34:cb:73:e4:37:ee:d6:9e:
         80:95:0a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----