Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/0/323830343a333561383a3a2f33322d313238203d3e20323636323939.roa
File:                     323830343a333561383a3a2f33322d313238203d3e20323636323939.roa (raw, json)
Hash identifier:          Qxc78DQxDfYziQs7C29wmUHownResSPX6pFLYPGHSNM=
Subject key identifier:   73:3C:8F:E8:D0:4D:DE:EE:72:B0:04:1B:3C:E8:FC:28:D7:C6:60:C9
Certificate issuer:       /CN=4B24C412F27C6B22447FF7BEB656C9DAD7D27678
Certificate serial:       689DE5FE2F65AD3962753D64D24B09CA63A1ACC2
Authority key identifier: 4B:24:C4:12:F2:7C:6B:22:44:7F:F7:BE:B6:56:C9:DA:D7:D2:76:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4B24C412F27C6B22447FF7BEB656C9DAD7D27678.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/0/323830343a333561383a3a2f33322d313238203d3e20323636323939.roa
Signing time:             Fri 29 Mar 2024 15:48:06 +0000
ROA not before:           Fri 29 Mar 2024 15:43:06 +0000
ROA not after:            Fri 28 Mar 2025 15:48:06 +0000
asID:                     266299
IP address blocks:        2804:35a8::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:9d:e5:fe:2f:65:ad:39:62:75:3d:64:d2:4b:09:ca:63:a1:ac:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B24C412F27C6B22447FF7BEB656C9DAD7D27678
        Validity
            Not Before: Mar 29 15:43:06 2024 GMT
            Not After : Mar 28 15:48:06 2025 GMT
        Subject: CN=733C8FE8D04DDEEE72B0041B3CE8FC28D7C660C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e8:7b:fc:35:51:17:c6:27:a6:91:3a:81:72:
                    61:74:8e:cc:21:84:b1:a8:8f:07:5e:8d:3c:55:86:
                    98:44:e3:51:62:74:83:d6:e1:b1:e7:7b:fd:0d:01:
                    da:5e:64:d0:b8:0a:be:f8:fd:45:39:55:9b:f8:ac:
                    8a:cf:c3:75:3f:30:da:f9:1d:2a:5d:4e:6d:55:8c:
                    8c:f7:3f:38:e9:04:2f:f7:7e:55:32:17:2a:38:2f:
                    9e:36:88:00:d4:e1:46:f4:ad:49:2a:a5:54:ea:b2:
                    ca:50:a3:a0:e0:5c:44:f1:ad:ff:5a:ac:61:fb:12:
                    9c:11:f1:1e:3d:ac:35:fe:38:4a:35:b0:49:3c:c6:
                    00:d6:65:54:73:d8:0a:98:f2:3b:95:38:b0:e5:ca:
                    4e:b6:8e:2b:99:8e:81:d2:cc:e8:4f:da:08:6a:f9:
                    15:81:71:68:e6:95:70:87:51:af:f4:e6:a4:9d:0d:
                    b4:e7:43:9e:e3:0a:b1:90:dc:9d:9e:83:09:50:e8:
                    67:dc:17:5e:ee:58:72:a4:29:7d:ea:ac:b3:ff:74:
                    18:f2:3e:93:a7:ed:3f:bb:53:9d:51:50:b0:1b:d5:
                    81:6a:49:a1:e6:51:a9:73:cb:85:6d:7d:03:c5:44:
                    21:01:25:6a:97:4c:45:b8:79:d1:89:ba:6b:42:e5:
                    01:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:3C:8F:E8:D0:4D:DE:EE:72:B0:04:1B:3C:E8:FC:28:D7:C6:60:C9
            X509v3 Authority Key Identifier:
                keyid:4B:24:C4:12:F2:7C:6B:22:44:7F:F7:BE:B6:56:C9:DA:D7:D2:76:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/0/4B24C412F27C6B22447FF7BEB656C9DAD7D27678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4B24C412F27C6B22447FF7BEB656C9DAD7D27678.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/0/323830343a333561383a3a2f33322d313238203d3e20323636323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:35a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:df:ca:65:e5:2c:56:57:bb:90:8b:c0:57:a7:b1:d4:fe:8d:
         22:48:e5:4b:24:3b:d4:0d:33:85:7d:36:5f:11:c9:0b:ca:09:
         62:19:6b:a6:8d:3f:99:39:09:94:aa:fb:e3:6a:54:04:1d:41:
         8b:48:bd:8f:64:00:de:6a:b5:41:03:f8:d6:30:75:19:ad:7f:
         f2:35:3a:e8:0a:6c:db:6b:79:a8:64:ab:54:da:95:d1:78:66:
         c9:db:f1:cb:8a:6a:96:83:3b:a3:b0:95:54:15:8c:7a:73:81:
         e6:d4:28:dc:58:51:06:d8:e5:fc:42:fc:68:99:33:0b:81:b2:
         b9:a1:70:fe:bb:29:71:ec:2d:ba:ef:a6:56:66:52:9a:52:fb:
         b5:eb:27:f6:fb:cc:e6:04:5a:af:39:19:4b:de:7a:d9:2e:b6:
         ce:c3:f5:2a:18:94:28:2b:67:8c:b2:43:23:52:8a:03:d2:18:
         5d:3a:73:44:62:41:fb:fe:1c:91:65:4b:f8:3b:2a:08:6a:78:
         e0:ef:62:5f:b0:11:d0:1c:ab:16:96:c2:da:81:a4:b3:27:d2:
         84:64:82:3a:df:9c:c5:97:2b:5d:23:d5:21:b0:61:0c:aa:82:
         4a:6d:cd:af:8d:72:46:af:18:7f:7b:fc:bd:08:02:14:93:ae:
         ea:75:73:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----