Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EQhFYczXWdSGT6rw14cKyabwXPwDus8P72nMZrUhyABr/1/323830343a343366343a3a2f33322d3438203d3e20323637363031.roa
File:                     323830343a343366343a3a2f33322d3438203d3e20323637363031.roa (raw, json)
Hash identifier:          Cd1kz7vzzWDWLwWKSZk1sGluNP2LuCjGL/Cz3RtC3xc=
Subject key identifier:   18:D5:E8:46:94:F9:18:74:10:1A:24:90:A1:D1:D5:05:DF:C4:C8:8C
Certificate issuer:       /CN=024F5D8CE415CD2C287E149AA91CFE0FFDEB7C0E
Certificate serial:       69446A6FB83FDDADFE92B0AC525F057BD3E521A1
Authority key identifier: 02:4F:5D:8C:E4:15:CD:2C:28:7E:14:9A:A9:1C:FE:0F:FD:EB:7C:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/024F5D8CE415CD2C287E149AA91CFE0FFDEB7C0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQhFYczXWdSGT6rw14cKyabwXPwDus8P72nMZrUhyABr/1/323830343a343366343a3a2f33322d3438203d3e20323637363031.roa
Signing time:             Thu 04 Apr 2024 12:26:10 +0000
ROA not before:           Thu 04 Apr 2024 12:21:10 +0000
ROA not after:            Thu 03 Apr 2025 12:26:10 +0000
asID:                     267601
IP address blocks:        2804:43f4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:44:6a:6f:b8:3f:dd:ad:fe:92:b0:ac:52:5f:05:7b:d3:e5:21:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=024F5D8CE415CD2C287E149AA91CFE0FFDEB7C0E
        Validity
            Not Before: Apr  4 12:21:10 2024 GMT
            Not After : Apr  3 12:26:10 2025 GMT
        Subject: CN=18D5E84694F91874101A2490A1D1D505DFC4C88C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:02:c8:30:3e:8b:81:7d:33:f4:78:c4:d4:a1:
                    ad:d2:82:f2:66:c4:2f:3a:2d:e1:a9:d7:9b:cc:42:
                    22:1d:91:23:d8:5a:7d:58:9d:f8:5f:7e:b9:e9:1d:
                    5f:7c:31:b7:8a:44:4d:3c:0e:70:1d:21:2b:81:73:
                    9c:bf:f5:33:7a:78:59:8d:db:3a:55:c7:3e:4f:f9:
                    71:90:86:52:8f:59:ea:aa:8d:39:c6:8f:a5:da:d7:
                    df:dd:a2:27:8e:fa:18:4f:8a:7b:20:90:46:ae:f8:
                    6a:9d:71:6d:14:ac:16:b9:2e:53:a9:fc:88:f6:48:
                    6b:d7:50:3c:59:b5:d3:20:be:33:37:52:16:8f:d9:
                    71:c4:3a:b6:68:14:5a:6c:1a:8e:cb:4f:c7:2d:34:
                    16:a9:7f:44:34:b8:8e:5d:b3:84:fc:2a:86:59:ee:
                    85:c8:12:ef:2a:8f:a4:ee:28:1f:3d:b4:79:e3:d0:
                    1f:8d:8e:3a:3e:5a:00:40:f8:f8:ad:9f:cd:92:1b:
                    9d:3c:ba:37:e4:43:df:3f:e3:09:e5:c2:b0:fe:38:
                    66:07:e5:7c:2e:64:ef:0b:13:32:28:69:0f:f4:89:
                    7d:d1:ce:1d:1e:db:49:87:ae:c5:b7:f7:c1:12:1e:
                    f2:f4:93:02:7a:38:fe:cf:8c:13:14:62:54:dc:12:
                    da:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D5:E8:46:94:F9:18:74:10:1A:24:90:A1:D1:D5:05:DF:C4:C8:8C
            X509v3 Authority Key Identifier:
                keyid:02:4F:5D:8C:E4:15:CD:2C:28:7E:14:9A:A9:1C:FE:0F:FD:EB:7C:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQhFYczXWdSGT6rw14cKyabwXPwDus8P72nMZrUhyABr/1/024F5D8CE415CD2C287E149AA91CFE0FFDEB7C0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/024F5D8CE415CD2C287E149AA91CFE0FFDEB7C0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQhFYczXWdSGT6rw14cKyabwXPwDus8P72nMZrUhyABr/1/323830343a343366343a3a2f33322d3438203d3e20323637363031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:6f:b5:07:8f:9a:3a:5a:55:c0:7b:fc:f4:02:97:48:5c:54:
         b5:b4:fa:dd:13:57:38:be:76:1a:4d:1d:c5:07:b8:02:7e:a1:
         0b:f2:dc:4d:6d:af:25:d2:ab:32:39:27:bf:6b:52:b3:78:7b:
         3e:a4:14:2f:2a:b0:ea:7e:ab:40:22:70:4e:31:24:a1:be:a0:
         e0:9b:12:94:64:28:f5:4d:d8:7f:d2:13:cb:81:fc:25:d7:3a:
         3e:5e:41:9f:f8:78:da:55:ac:f5:8d:43:ac:ba:68:7b:46:a7:
         37:36:b1:20:9b:26:e1:2f:00:93:dd:00:90:8f:11:5f:25:20:
         15:71:86:12:4b:2d:80:84:d5:34:fd:d0:6f:13:70:78:df:23:
         61:e0:d4:12:c8:16:82:37:93:8a:42:fe:7f:6e:2f:73:b1:c0:
         1a:3a:74:11:71:48:7d:db:be:5a:79:4a:92:ab:8c:9a:f1:16:
         09:ca:98:57:04:37:af:7b:3f:11:ee:0c:9f:81:6c:3e:d8:ff:
         dd:47:eb:08:e4:9c:8c:95:a7:ef:30:44:36:49:80:68:55:a6:
         9c:32:7b:d9:26:48:dd:fc:8e:82:09:60:4b:a9:e2:55:fc:42:
         4c:2d:e6:b8:9d:cb:07:a0:27:0e:83:1b:50:ca:f4:f3:c6:ed:
         c2:e9:9e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----