Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQxZfJWDSUCzj8f37gD3Z7vhvPZFTeEgo2mEGNf9STbi/0/323830343a333065303a3a2f33322d3332203d3e20323634393738.roa
File:                     323830343a333065303a3a2f33322d3332203d3e20323634393738.roa (raw, json)
Hash identifier:          5U83R3tc6xVaq/ique/I0UFeww05wUY1txgS4WEC+rg=
Subject key identifier:   D2:20:D0:1B:D5:56:CC:6C:1D:58:E8:75:C7:98:25:1D:40:9A:0A:67
Certificate issuer:       /CN=AA61E68F00F0FD3C40E25F1F3BF414837491A242
Certificate serial:       318C4030810B021F021CD7F7A17D296CB7EA4343
Authority key identifier: AA:61:E6:8F:00:F0:FD:3C:40:E2:5F:1F:3B:F4:14:83:74:91:A2:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA61E68F00F0FD3C40E25F1F3BF414837491A242.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQxZfJWDSUCzj8f37gD3Z7vhvPZFTeEgo2mEGNf9STbi/0/323830343a333065303a3a2f33322d3332203d3e20323634393738.roa
Signing time:             Sat 17 Feb 2024 16:50:05 +0000
ROA not before:           Sat 17 Feb 2024 16:45:05 +0000
ROA not after:            Sat 15 Feb 2025 16:50:05 +0000
asID:                     264978
IP address blocks:        2804:30e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:8c:40:30:81:0b:02:1f:02:1c:d7:f7:a1:7d:29:6c:b7:ea:43:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA61E68F00F0FD3C40E25F1F3BF414837491A242
        Validity
            Not Before: Feb 17 16:45:05 2024 GMT
            Not After : Feb 15 16:50:05 2025 GMT
        Subject: CN=D220D01BD556CC6C1D58E875C798251D409A0A67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ff:56:95:9d:68:63:61:b3:2e:ca:20:58:58:
                    0f:97:cf:a0:8f:c4:7c:a3:2b:49:ef:f0:5b:8f:55:
                    09:07:2f:88:0c:fa:70:e7:5c:ff:2f:ca:05:f1:e8:
                    1d:0c:50:98:a7:16:b9:a6:26:56:2f:36:44:d5:2b:
                    36:7f:ea:ae:42:f1:33:8b:cf:87:39:5a:7b:dc:00:
                    5d:a8:0a:24:33:57:fd:86:d0:39:cb:5c:b2:92:b4:
                    ea:be:af:b1:4f:c2:d1:05:a3:9f:4a:89:20:16:20:
                    f1:df:cd:7c:52:9d:a8:e7:bf:41:80:b9:62:d0:21:
                    17:3d:50:61:ea:99:96:4a:f5:7e:38:cc:38:61:d6:
                    ff:d8:cf:13:ad:f4:32:64:5d:e4:d0:5f:13:cc:f9:
                    17:33:e9:8d:bc:59:d8:93:04:59:27:b8:bf:00:4c:
                    3d:55:75:01:06:4e:a1:ba:41:cb:af:a1:df:18:92:
                    37:28:e4:df:f3:3a:ea:59:a6:c3:ef:99:c1:13:4b:
                    2c:c7:5a:ad:26:14:2c:4d:6b:66:2e:68:eb:19:f8:
                    af:51:0b:23:e0:d3:aa:1f:b5:c8:12:29:57:75:a4:
                    95:c6:3f:66:1c:ca:a0:27:66:bd:22:2a:a0:00:b6:
                    87:7a:52:fc:71:d8:bf:98:d1:9d:0c:4a:b0:54:92:
                    4e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:20:D0:1B:D5:56:CC:6C:1D:58:E8:75:C7:98:25:1D:40:9A:0A:67
            X509v3 Authority Key Identifier:
                keyid:AA:61:E6:8F:00:F0:FD:3C:40:E2:5F:1F:3B:F4:14:83:74:91:A2:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQxZfJWDSUCzj8f37gD3Z7vhvPZFTeEgo2mEGNf9STbi/0/AA61E68F00F0FD3C40E25F1F3BF414837491A242.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA61E68F00F0FD3C40E25F1F3BF414837491A242.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQxZfJWDSUCzj8f37gD3Z7vhvPZFTeEgo2mEGNf9STbi/0/323830343a333065303a3a2f33322d3332203d3e20323634393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:30e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:d1:e6:96:43:08:21:59:aa:fa:5d:89:d0:b9:9d:8f:ca:7b:
         37:ca:24:90:c5:7d:65:71:7a:84:e4:b7:6f:2d:17:53:a1:f3:
         8a:82:17:76:da:0f:7f:2f:ac:01:1b:98:80:c9:de:af:4f:77:
         58:fc:1b:02:71:a9:29:89:b9:d6:c2:e0:93:ca:2e:e3:ee:ca:
         5d:37:6c:8d:ad:5e:8d:08:6f:b7:a2:bd:8d:19:ce:4d:5f:ba:
         eb:14:8c:5e:d4:96:84:df:4c:3a:6b:bf:69:1d:0e:d1:12:93:
         24:75:1b:a1:85:c0:3c:a6:b9:25:6a:48:59:93:bd:4b:06:27:
         74:c3:dc:e8:f6:4d:bc:dd:23:da:21:8b:e2:17:45:e8:7f:10:
         5d:46:22:00:8d:5b:ad:90:51:1c:a1:f1:2b:5a:b1:e1:62:ea:
         f6:4f:8d:71:a1:d2:58:67:83:d6:2c:a8:a3:9e:3d:f1:26:2c:
         6a:80:38:21:61:bf:76:9d:a5:e3:db:20:e9:ea:6e:99:a9:d8:
         b2:43:fa:d3:28:6c:77:98:df:63:96:34:e5:16:1d:2b:3f:f6:
         2f:3e:93:36:ce:c4:ec:f6:1e:d2:f2:1b:40:8a:5b:7b:bc:77:
         22:69:af:99:c2:76:f6:3b:22:46:c4:14:2f:6f:c8:9d:45:ec:
         b9:8d:47:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----