Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/323830343a313765303a3a2f33322d313238203d3e20323633323536.roa
File:                     323830343a313765303a3a2f33322d313238203d3e20323633323536.roa (raw, json)
Hash identifier:          mtMyroDd2+csDfJMOV9VIdN6OYbRINiFiZf/jIufQ/M=
Subject key identifier:   2B:FA:D5:11:EE:B3:5B:10:FB:2F:1B:A2:38:E3:AA:81:F8:83:61:8F
Certificate issuer:       /CN=D55EA18A04848F6E4061B57B8D634048C0C01737
Certificate serial:       11C46891B76564DE44C8F48EFE6A7F7614A4DD72
Authority key identifier: D5:5E:A1:8A:04:84:8F:6E:40:61:B5:7B:8D:63:40:48:C0:C0:17:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D55EA18A04848F6E4061B57B8D634048C0C01737.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/323830343a313765303a3a2f33322d313238203d3e20323633323536.roa
Signing time:             Mon 18 Nov 2024 14:21:39 +0000
ROA not before:           Mon 18 Nov 2024 14:16:39 +0000
ROA not after:            Mon 17 Nov 2025 14:21:39 +0000
asID:                     263256
IP address blocks:        2804:17e0::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:c4:68:91:b7:65:64:de:44:c8:f4:8e:fe:6a:7f:76:14:a4:dd:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D55EA18A04848F6E4061B57B8D634048C0C01737
        Validity
            Not Before: Nov 18 14:16:39 2024 GMT
            Not After : Nov 17 14:21:39 2025 GMT
        Subject: CN=2BFAD511EEB35B10FB2F1BA238E3AA81F883618F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c8:54:fd:b1:0c:2c:fe:ae:eb:97:95:f1:72:
                    c8:1d:78:77:0a:72:b2:36:cf:05:be:ec:d5:ea:05:
                    72:33:56:24:52:fd:9a:c5:6a:94:a4:26:8b:3e:d5:
                    82:db:b6:33:84:df:83:1e:28:ce:2b:da:6f:d7:77:
                    52:18:19:87:1f:57:77:cf:3b:ee:eb:3f:d4:45:cc:
                    f0:9b:cb:98:89:12:01:fc:17:93:ce:17:33:a1:23:
                    53:5c:5f:5f:59:bc:f2:0b:71:34:74:18:49:c3:8f:
                    8a:a6:a8:be:d5:47:ec:21:5a:dd:93:0b:a9:05:6a:
                    9d:18:62:be:e5:4a:0e:38:2c:42:92:91:5e:00:84:
                    62:fa:43:75:27:4d:25:bc:80:dd:42:3e:e5:cc:3c:
                    2c:cb:06:38:ee:5a:04:76:f8:4a:48:6c:c9:66:ad:
                    a0:82:01:72:f3:81:c1:23:5b:2d:8d:26:f9:23:9e:
                    0f:c3:0c:8c:f4:2d:a7:d8:29:f7:c4:e7:4d:73:29:
                    09:f8:58:6b:29:34:31:31:13:f9:33:47:05:90:cc:
                    82:06:10:e2:eb:46:53:84:e1:be:e9:96:d1:51:32:
                    bc:1d:70:d2:fb:8c:29:50:eb:cc:3e:72:fd:11:f8:
                    dc:4f:b3:02:94:c6:fc:d4:a4:65:89:d3:9c:29:ff:
                    6a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:FA:D5:11:EE:B3:5B:10:FB:2F:1B:A2:38:E3:AA:81:F8:83:61:8F
            X509v3 Authority Key Identifier:
                keyid:D5:5E:A1:8A:04:84:8F:6E:40:61:B5:7B:8D:63:40:48:C0:C0:17:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/D55EA18A04848F6E4061B57B8D634048C0C01737.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D55EA18A04848F6E4061B57B8D634048C0C01737.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/323830343a313765303a3a2f33322d313238203d3e20323633323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:17e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:52:5a:88:77:01:32:39:d5:7f:8e:9e:bc:54:b2:d5:82:e3:
         d4:0f:e7:5d:0d:84:e9:68:ac:62:90:15:a9:a6:b6:66:84:41:
         73:72:a4:28:05:38:c7:0f:e9:89:e8:e3:05:b5:b6:5b:e5:cc:
         63:3a:73:20:d3:0b:01:a4:a7:f7:2f:57:34:94:d3:c7:0f:34:
         6d:a6:1d:30:65:1c:b7:1f:55:67:41:53:c7:84:0a:3e:a7:d2:
         ea:a7:32:e2:af:69:59:a5:22:09:60:ef:25:69:ed:4e:0b:be:
         2b:a0:75:b5:a7:ad:af:b9:0f:df:7e:ee:06:62:2e:89:17:5c:
         85:c9:eb:6d:72:2e:f5:a6:79:14:9b:9a:a1:d9:a7:4f:2c:8d:
         ad:6c:f9:9e:f0:f8:3f:f8:1b:1e:59:0e:94:e7:04:65:1e:83:
         ea:44:67:c6:26:50:67:f5:88:6d:2f:bd:67:a1:5c:bd:bc:55:
         e9:98:bd:31:c9:2d:d6:26:6f:4b:08:2d:ee:33:b5:bb:2c:9c:
         ed:ab:1f:cd:d8:6e:c2:db:d6:49:25:00:11:d8:73:75:b1:d2:
         b3:7b:c8:00:e8:a2:36:9a:6f:05:52:f8:ed:8b:94:4c:90:cd:
         5d:23:62:de:fc:be:cf:97:6e:02:8c:0d:a1:42:36:7d:90:8c:
         ab:52:83:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----