Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FETsttnPrcgQ217w2S8g1SiDadaeLoRrp5cJWpE7xQMv/1/323830343a383937343a3a2f33322d3332203d3e20323733363035.roa
File:                     323830343a383937343a3a2f33322d3332203d3e20323733363035.roa (raw, json)
Hash identifier:          sIf7DX/BaArcvVhEOUWHgJlTG77h56tqREEFMj5FbYI=
Subject key identifier:   44:0F:08:B4:17:B7:77:06:50:E8:6B:18:7B:E3:3C:D4:FE:1C:32:62
Certificate issuer:       /CN=BB8336FA8D2F74320B8B415DB07D600CFA4EDD21
Certificate serial:       62937D96BB6C5777BED005B756C8F7F18D9E3FC9
Authority key identifier: BB:83:36:FA:8D:2F:74:32:0B:8B:41:5D:B0:7D:60:0C:FA:4E:DD:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB8336FA8D2F74320B8B415DB07D600CFA4EDD21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FETsttnPrcgQ217w2S8g1SiDadaeLoRrp5cJWpE7xQMv/1/323830343a383937343a3a2f33322d3332203d3e20323733363035.roa
Signing time:             Wed 03 Apr 2024 18:32:37 +0000
ROA not before:           Wed 03 Apr 2024 18:27:37 +0000
ROA not after:            Wed 02 Apr 2025 18:32:37 +0000
asID:                     273605
IP address blocks:        2804:8974::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:93:7d:96:bb:6c:57:77:be:d0:05:b7:56:c8:f7:f1:8d:9e:3f:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB8336FA8D2F74320B8B415DB07D600CFA4EDD21
        Validity
            Not Before: Apr  3 18:27:37 2024 GMT
            Not After : Apr  2 18:32:37 2025 GMT
        Subject: CN=440F08B417B7770650E86B187BE33CD4FE1C3262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c7:29:5c:1b:f5:f8:2b:53:39:15:45:b2:89:
                    5f:3a:27:e0:03:89:7b:60:ff:64:0e:19:be:7c:55:
                    55:9c:1a:e2:4b:e1:64:81:4a:92:30:92:ca:d1:af:
                    06:6f:ec:7a:4c:e7:bf:27:ab:84:33:55:0c:7a:fa:
                    76:be:aa:2f:7c:97:a1:94:8f:5d:73:67:62:e6:33:
                    72:df:96:c0:46:9f:bf:5a:ad:e0:b3:60:45:ef:e2:
                    8c:ed:0e:af:30:e4:35:74:09:06:71:6b:88:c6:ec:
                    53:db:ec:6c:3a:b2:d3:b0:01:84:4d:30:05:0f:62:
                    e2:be:59:63:7b:6d:3a:8a:bd:2a:62:58:20:7a:0c:
                    22:9f:1a:dc:cf:77:f7:ce:4d:d5:11:a8:f7:0f:8e:
                    22:34:fa:56:91:ba:ee:10:d4:ff:2c:c2:b5:2b:5f:
                    82:47:ae:2c:64:24:12:13:fb:73:80:c9:0e:b4:d4:
                    f5:f3:0b:22:a2:5e:a0:4f:76:ee:94:1b:4e:ff:b4:
                    fd:a5:00:c1:f1:6d:8b:d6:2e:bc:60:db:44:7a:49:
                    d8:d6:4b:4f:5b:bd:e2:e4:88:1f:46:01:e0:16:41:
                    56:52:92:7b:36:cb:59:c4:a2:52:c8:af:db:ae:bb:
                    c5:73:07:e8:c4:2c:9f:0e:ef:f8:94:69:21:52:c0:
                    b6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:0F:08:B4:17:B7:77:06:50:E8:6B:18:7B:E3:3C:D4:FE:1C:32:62
            X509v3 Authority Key Identifier:
                keyid:BB:83:36:FA:8D:2F:74:32:0B:8B:41:5D:B0:7D:60:0C:FA:4E:DD:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FETsttnPrcgQ217w2S8g1SiDadaeLoRrp5cJWpE7xQMv/1/BB8336FA8D2F74320B8B415DB07D600CFA4EDD21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB8336FA8D2F74320B8B415DB07D600CFA4EDD21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FETsttnPrcgQ217w2S8g1SiDadaeLoRrp5cJWpE7xQMv/1/323830343a383937343a3a2f33322d3332203d3e20323733363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8974::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:18:21:b1:3f:19:b5:04:e3:37:3e:36:bc:28:81:63:e4:a1:
         41:8e:77:b7:a7:40:39:77:33:58:72:72:d9:7c:4e:fc:53:06:
         90:d5:dd:e5:a2:d8:00:43:52:b0:1f:7b:5e:53:ae:de:cd:de:
         10:d2:ed:18:8a:d0:a0:9d:50:45:a8:43:e8:03:87:2d:95:bb:
         df:95:3e:f6:5a:54:15:09:12:6d:6b:d8:0f:1d:96:41:8d:0a:
         53:4e:e7:62:9f:32:3b:c2:67:e2:98:c9:1f:ae:fb:34:28:df:
         49:c7:91:08:6c:65:cd:88:89:5d:b7:f2:f3:6d:99:8a:92:d7:
         2c:a5:74:5e:06:81:d6:9b:2d:c3:66:86:e7:db:3e:c6:38:9b:
         d7:1a:a1:bd:48:7a:8d:89:0a:4b:df:1d:80:f8:9c:61:1d:7d:
         0a:b6:0b:33:38:5f:19:5f:06:7d:bc:4c:6c:fb:ca:1f:25:78:
         d0:ec:e8:10:b7:b2:be:01:58:0f:88:94:5f:7b:80:f3:42:52:
         fa:b9:ac:c3:2d:32:23:5f:4c:0f:e8:71:8c:84:83:9a:c5:ee:
         43:ce:d2:04:44:28:9c:9c:5f:f9:16:e1:6f:a2:6e:da:3e:0c:
         0d:13:07:c0:e6:4c:ef:c0:74:44:9d:fb:f0:0b:6f:37:f8:ec:
         0d:8f:5b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----