Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/323830343a333133303a3a2f33322d313238203d3e20323634393939.roa
File:                     323830343a333133303a3a2f33322d313238203d3e20323634393939.roa (raw, json)
Hash identifier:          9WBFL6zXRmVhgBzKR+fxo5V7swOl9FGlnrb5JC+rG74=
Subject key identifier:   2C:74:83:7F:39:45:79:87:27:E8:7A:63:03:57:83:87:67:DC:97:A6
Certificate issuer:       /CN=8ABCB3C4EC219B8E85923BB54651F450DE6CAE55
Certificate serial:       37B949BD0168281AAB15AAB082CED7D3433EEEB7
Authority key identifier: 8A:BC:B3:C4:EC:21:9B:8E:85:92:3B:B5:46:51:F4:50:DE:6C:AE:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABCB3C4EC219B8E85923BB54651F450DE6CAE55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/323830343a333133303a3a2f33322d313238203d3e20323634393939.roa
Signing time:             Fri 09 Aug 2024 20:48:04 +0000
ROA not before:           Fri 09 Aug 2024 20:43:04 +0000
ROA not after:            Fri 08 Aug 2025 20:48:04 +0000
asID:                     264999
IP address blocks:        2804:3130::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:b9:49:bd:01:68:28:1a:ab:15:aa:b0:82:ce:d7:d3:43:3e:ee:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ABCB3C4EC219B8E85923BB54651F450DE6CAE55
        Validity
            Not Before: Aug  9 20:43:04 2024 GMT
            Not After : Aug  8 20:48:04 2025 GMT
        Subject: CN=2C74837F3945798727E87A630357838767DC97A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b3:a8:50:e1:5a:24:ae:8a:ee:67:57:31:19:
                    e8:64:13:e8:bf:49:a3:cc:00:5b:20:e8:fe:39:63:
                    cb:b3:10:68:0f:88:92:4f:c7:d7:ca:7e:f6:5b:9d:
                    c2:4c:c3:3b:46:d6:13:84:d9:44:3e:4e:7e:ff:2e:
                    ed:ed:4a:09:98:92:de:b1:2b:46:e9:08:15:b2:9b:
                    a7:d3:3d:28:a8:7f:78:09:68:2d:09:49:47:dd:6d:
                    55:ac:2c:4a:8d:3c:53:5f:dd:11:48:e9:47:c9:73:
                    59:7d:40:2a:29:e0:d6:75:45:fb:88:ab:62:eb:1c:
                    09:b5:8f:1a:7f:61:a7:19:86:ee:a2:e5:59:79:06:
                    98:de:c4:6e:a7:73:26:c7:01:c5:3d:56:f5:e8:e6:
                    6f:60:7a:28:d4:10:d3:d9:eb:99:4c:32:7c:83:6f:
                    cc:03:10:5a:1e:5b:ea:e2:d4:da:27:ed:a1:80:8f:
                    23:49:36:04:04:5a:21:48:20:83:3a:38:59:c1:62:
                    39:72:ca:fe:ee:49:52:bf:52:78:a2:1b:2d:0e:80:
                    3f:c3:94:62:f2:b4:14:6f:86:03:77:4a:58:f7:a0:
                    79:a2:9d:cd:7f:d9:b2:41:cb:25:52:11:e6:bf:4e:
                    5a:5e:8f:1e:10:e6:49:16:58:34:b8:0e:81:fa:10:
                    6a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:74:83:7F:39:45:79:87:27:E8:7A:63:03:57:83:87:67:DC:97:A6
            X509v3 Authority Key Identifier:
                keyid:8A:BC:B3:C4:EC:21:9B:8E:85:92:3B:B5:46:51:F4:50:DE:6C:AE:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/8ABCB3C4EC219B8E85923BB54651F450DE6CAE55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABCB3C4EC219B8E85923BB54651F450DE6CAE55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/323830343a333133303a3a2f33322d313238203d3e20323634393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3130::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:27:b8:e7:5f:06:13:3a:95:ea:ff:d3:59:2d:3d:7b:fc:fc:
         4e:fa:56:b7:d9:19:83:4a:4e:f5:68:28:88:02:75:b1:c3:94:
         ac:ce:e8:9b:38:8f:1a:a5:7e:ca:b7:44:3f:29:8f:62:93:d5:
         c6:30:9c:85:46:99:7d:46:a3:df:92:ef:99:6a:27:10:62:54:
         2d:fe:84:2e:28:1b:07:49:d8:16:b1:bb:6f:a8:b2:58:9d:35:
         d6:e2:2a:ca:e2:b7:03:21:f8:e9:f6:72:5e:95:a6:0c:9c:0e:
         e4:08:12:ff:ca:54:1e:2d:43:71:4c:b8:85:39:bc:18:a9:75:
         13:18:cc:65:cd:c1:9e:6d:ad:13:f0:22:6e:99:8f:80:86:95:
         72:b1:13:ad:83:c2:5a:be:49:55:71:dc:db:c2:07:61:56:87:
         5a:9b:e5:8e:fa:aa:5a:52:df:74:11:4e:d3:85:9e:70:52:d6:
         e7:73:1f:a4:0a:b9:af:a5:31:cf:9e:cc:64:8a:8b:4a:ce:36:
         e9:85:8a:15:6d:8f:df:fc:eb:d1:fb:39:6a:53:da:dc:20:7e:
         7c:7f:6b:c2:73:db:fa:89:fd:84:73:2f:06:88:e2:39:a1:b6:
         d9:e8:d3:fb:12:23:28:3a:fa:df:89:35:ca:ea:95:24:47:17:
         f0:35:b7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----