Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/2/323830343a313432343a3a2f33322d3438203d3e203532393430.roa
File:                     323830343a313432343a3a2f33322d3438203d3e203532393430.roa (raw, json)
Hash identifier:          imZ5mQuaYNpVMg8ERYcjU+1yFIx/IhtczkCNfoRZ1d8=
Subject key identifier:   11:DE:4B:34:6E:24:67:AC:AA:03:7D:73:62:6E:9D:35:E2:50:44:61
Certificate issuer:       /CN=ACB82B32C9DD83C7E72DB88C0F91326D9FCF01D6
Certificate serial:       053617123F7BD8743C1BB78EC0FDF1FC7CC2F6A7
Authority key identifier: AC:B8:2B:32:C9:DD:83:C7:E7:2D:B8:8C:0F:91:32:6D:9F:CF:01:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACB82B32C9DD83C7E72DB88C0F91326D9FCF01D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/2/323830343a313432343a3a2f33322d3438203d3e203532393430.roa
Signing time:             Tue 23 Jul 2024 12:02:30 +0000
ROA not before:           Tue 23 Jul 2024 11:57:30 +0000
ROA not after:            Tue 22 Jul 2025 12:02:30 +0000
asID:                     52940
IP address blocks:        2804:1424::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:36:17:12:3f:7b:d8:74:3c:1b:b7:8e:c0:fd:f1:fc:7c:c2:f6:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACB82B32C9DD83C7E72DB88C0F91326D9FCF01D6
        Validity
            Not Before: Jul 23 11:57:30 2024 GMT
            Not After : Jul 22 12:02:30 2025 GMT
        Subject: CN=11DE4B346E2467ACAA037D73626E9D35E2504461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:32:fc:4a:b8:36:8c:17:5f:1e:00:37:aa:2c:
                    73:e1:97:11:1e:5e:bb:a3:1e:55:9d:f8:57:45:06:
                    d9:4b:82:7f:b1:92:a1:51:bb:22:d6:59:9d:44:25:
                    65:20:7a:23:12:28:b2:ab:99:37:82:df:83:37:51:
                    6a:25:ef:b1:4c:1b:5f:f2:99:b4:d6:31:85:e0:f5:
                    19:eb:eb:07:d1:8e:30:5f:07:13:81:89:96:42:5f:
                    b5:f9:77:9a:15:a3:70:b3:6d:7e:cc:a0:55:83:fa:
                    09:29:e8:38:04:aa:6f:8a:7d:b1:b5:20:e5:17:80:
                    19:fb:58:0c:3d:0c:df:c1:b3:16:5d:5f:50:0b:5a:
                    c1:c2:2b:e6:4d:eb:f5:fa:e1:cc:83:dd:b2:ad:92:
                    f4:15:13:90:2d:87:db:59:09:8e:7b:76:8f:05:dc:
                    26:c5:35:85:ba:8a:32:c8:c4:63:b6:55:6c:f9:73:
                    16:db:7c:fd:d0:82:22:57:67:b2:04:cb:5e:3e:da:
                    04:f2:81:3d:9b:4f:1c:31:3f:99:f0:0c:24:07:8b:
                    0a:f7:9c:ff:3a:aa:49:ca:40:ee:6c:8c:5a:dc:aa:
                    1e:23:8f:8a:f3:f5:7e:ae:23:0f:e9:23:8f:45:7d:
                    25:da:5b:97:fa:ee:26:5d:07:9a:c5:00:89:4e:16:
                    af:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:DE:4B:34:6E:24:67:AC:AA:03:7D:73:62:6E:9D:35:E2:50:44:61
            X509v3 Authority Key Identifier:
                keyid:AC:B8:2B:32:C9:DD:83:C7:E7:2D:B8:8C:0F:91:32:6D:9F:CF:01:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/2/ACB82B32C9DD83C7E72DB88C0F91326D9FCF01D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACB82B32C9DD83C7E72DB88C0F91326D9FCF01D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/2/323830343a313432343a3a2f33322d3438203d3e203532393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1424::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:f2:4d:79:00:3a:11:02:f1:e2:cf:49:03:b5:3a:9c:0f:30:
         17:90:ae:c7:bd:ed:ec:8b:61:4c:14:60:8d:d2:0b:9f:e0:43:
         82:a2:d7:47:dd:fe:4f:20:fb:6e:cb:98:86:f1:d2:44:8a:fd:
         9f:7e:5b:db:79:93:a9:6b:ae:2c:31:9c:fb:9b:a8:59:6e:18:
         72:23:1f:36:bf:6a:02:6a:51:21:f6:2a:c3:00:9f:4d:22:04:
         63:4f:64:ec:14:80:19:e1:cc:d9:12:f9:06:b9:46:2c:86:92:
         c4:e4:fa:e1:f8:77:c7:b9:d3:c6:9f:63:b6:48:39:c4:75:3b:
         66:c9:ef:44:6d:2f:c9:9e:7b:0e:74:de:fd:28:ac:09:5e:41:
         71:6c:dc:91:c5:39:bb:24:b3:3d:32:38:af:dd:80:1f:a4:48:
         b1:69:54:7f:ad:5d:b8:f2:2b:26:e0:93:e4:3c:72:b7:b3:4a:
         84:24:26:dc:0b:f6:30:69:8a:ea:e5:2f:60:ef:e8:9f:f8:0f:
         1c:34:cf:6e:28:75:22:b2:13:46:cf:79:0d:db:ca:6d:34:5a:
         e9:54:ad:e4:3f:1a:53:c1:99:7b:bd:ec:de:d2:19:79:d7:ef:
         99:6a:ee:3b:2e:ec:51:82:98:9c:40:aa:68:8d:26:31:35:5f:
         1a:e1:5e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----