Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/323830343a353463303a3a2f33322d313238203d3e20323638363638.roa
File:                     323830343a353463303a3a2f33322d313238203d3e20323638363638.roa (raw, json)
Hash identifier:          p2DTpQ2VxS2yoF6el+bEdtfMRkoloVaM73b7cXDhnRk=
Subject key identifier:   5C:0F:AF:47:D6:2E:D1:9A:CF:E2:8F:4B:B3:B0:E7:87:63:C5:BD:08
Certificate issuer:       /CN=F7E422809108C1661A3F43CB3CECF9CB91247E9E
Certificate serial:       10D7D92E120FA15B1A716F17030087890FBB1279
Authority key identifier: F7:E4:22:80:91:08:C1:66:1A:3F:43:CB:3C:EC:F9:CB:91:24:7E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F7E422809108C1661A3F43CB3CECF9CB91247E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/323830343a353463303a3a2f33322d313238203d3e20323638363638.roa
Signing time:             Tue 26 Mar 2024 19:30:46 +0000
ROA not before:           Tue 26 Mar 2024 19:25:46 +0000
ROA not after:            Tue 25 Mar 2025 19:30:46 +0000
asID:                     268668
IP address blocks:        2804:54c0::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:d7:d9:2e:12:0f:a1:5b:1a:71:6f:17:03:00:87:89:0f:bb:12:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7E422809108C1661A3F43CB3CECF9CB91247E9E
        Validity
            Not Before: Mar 26 19:25:46 2024 GMT
            Not After : Mar 25 19:30:46 2025 GMT
        Subject: CN=5C0FAF47D62ED19ACFE28F4BB3B0E78763C5BD08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:29:16:b4:29:82:10:0b:e4:5b:c3:6f:89:6d:
                    ef:e4:99:f3:bd:e5:bf:a9:05:f2:02:f1:70:f9:a7:
                    38:ef:3f:d5:78:30:94:56:c4:b3:c1:5f:43:aa:7c:
                    bd:a1:85:f0:35:56:6f:c7:53:0b:1a:bd:c4:32:cc:
                    37:00:87:c3:1c:58:91:95:40:29:d1:63:9b:00:a6:
                    4b:7a:8b:63:ab:39:6d:f3:45:c8:4d:4f:88:04:62:
                    69:4f:bb:97:33:1e:93:70:0c:28:16:d5:71:3e:a5:
                    af:d4:87:b8:02:f6:e8:7c:0e:21:08:ca:23:38:64:
                    26:53:fa:99:a7:9d:f7:cd:aa:41:6f:44:9c:12:b6:
                    a9:d1:d3:a7:ae:82:e0:0f:d7:6b:03:5a:db:33:e0:
                    93:00:3e:0f:d5:04:b0:f0:10:97:f6:8b:a0:42:e3:
                    70:8a:e7:59:86:88:c0:b9:8c:3b:bb:f7:51:b0:ce:
                    9a:90:d5:8a:d4:f0:30:66:0d:77:e9:b5:78:72:66:
                    11:a3:dd:85:59:45:4c:80:c7:94:18:69:2a:09:2f:
                    29:dd:33:e0:8a:5c:74:a9:1e:c2:c0:86:7a:e9:7a:
                    9f:26:13:a0:4a:d6:25:82:6e:38:fd:98:a8:04:59:
                    a0:f5:d3:80:93:e1:23:f6:f4:f8:81:35:a4:17:d3:
                    31:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:0F:AF:47:D6:2E:D1:9A:CF:E2:8F:4B:B3:B0:E7:87:63:C5:BD:08
            X509v3 Authority Key Identifier:
                keyid:F7:E4:22:80:91:08:C1:66:1A:3F:43:CB:3C:EC:F9:CB:91:24:7E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/F7E422809108C1661A3F43CB3CECF9CB91247E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F7E422809108C1661A3F43CB3CECF9CB91247E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/323830343a353463303a3a2f33322d313238203d3e20323638363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:61:7c:00:39:9f:6c:37:90:36:43:47:d7:b8:d8:da:ab:5d:
         f4:39:03:e7:80:6b:a9:e9:5c:7f:d0:a5:6a:1c:d0:51:a4:a3:
         5e:ca:84:99:97:57:db:6a:41:1b:8a:f8:86:c6:dc:23:b2:10:
         f8:25:28:0b:de:55:22:70:0e:23:81:20:64:e3:36:b6:11:56:
         da:61:1b:1a:e8:d2:ef:0c:95:f0:c0:bb:f7:90:54:e1:87:ce:
         bc:03:b3:60:e4:8d:a4:f5:b7:1f:a4:dd:17:a1:10:b5:e9:96:
         be:9f:6a:6b:64:1f:fe:42:1e:4a:a8:a7:09:cb:16:c7:c6:15:
         f3:fd:51:22:a9:f9:b8:25:0e:5c:51:60:73:23:af:f0:14:66:
         e9:62:d4:7a:c0:3d:29:28:c9:06:9f:d2:4c:91:07:c7:77:b2:
         14:23:6f:c6:23:91:6f:21:69:76:5d:77:27:33:56:ca:7f:69:
         ee:46:24:7b:c4:4f:e3:a2:ac:8e:2d:d2:c3:79:b5:06:50:cf:
         8e:6c:7d:c7:84:57:be:60:a0:64:78:65:eb:63:ea:1e:d0:d4:
         04:45:82:ff:6a:ff:d1:46:ea:8a:03:93:50:8c:1f:0c:ef:fc:
         ac:75:c9:9b:36:8d:2a:de:88:62:81:2d:d0:8f:f6:ad:0f:a7:
         f1:cb:dd:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----