Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a373033333a3a2f34382d3438203d3e20323638343731.roa
File:                     323830343a353162343a373033333a3a2f34382d3438203d3e20323638343731.roa (raw, json)
Hash identifier:          nCHWyX63c1nThGeR7cL5J8zqVZ/VC0trW+DCo7luL+I=
Subject key identifier:   C4:C5:B0:71:E4:F7:49:A8:7A:8A:F0:4D:59:47:DE:F0:BD:D4:6A:B7
Certificate issuer:       /CN=7F000801D88E7BA8E23FCDDC396CC2FE198D022F
Certificate serial:       1697AF5A85D366663D19B67219D7A9E47D7547E5
Authority key identifier: 7F:00:08:01:D8:8E:7B:A8:E2:3F:CD:DC:39:6C:C2:FE:19:8D:02:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F000801D88E7BA8E23FCDDC396CC2FE198D022F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a373033333a3a2f34382d3438203d3e20323638343731.roa
Signing time:             Sun 05 May 2024 14:22:59 +0000
ROA not before:           Sun 05 May 2024 14:17:59 +0000
ROA not after:            Sun 04 May 2025 14:22:59 +0000
asID:                     268471
IP address blocks:        2804:51b4:7033::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:97:af:5a:85:d3:66:66:3d:19:b6:72:19:d7:a9:e4:7d:75:47:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F000801D88E7BA8E23FCDDC396CC2FE198D022F
        Validity
            Not Before: May  5 14:17:59 2024 GMT
            Not After : May  4 14:22:59 2025 GMT
        Subject: CN=C4C5B071E4F749A87A8AF04D5947DEF0BDD46AB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5e:3c:8c:0b:0c:c3:29:42:e6:05:8c:f9:72:
                    b0:66:c7:fb:36:9c:db:da:cd:c4:5d:c6:ca:ae:3f:
                    a4:8d:1c:e2:52:09:07:69:49:a6:c7:71:c3:58:2c:
                    f8:43:bf:0b:28:b6:84:8b:0a:48:b5:40:93:02:63:
                    41:c6:fd:4d:09:48:00:87:40:da:95:5a:3e:b9:65:
                    94:b8:51:f7:b6:6c:0b:2e:3c:97:95:94:4e:60:6c:
                    61:e5:70:b1:eb:d8:d0:be:ad:3f:2b:c2:96:28:1b:
                    5a:53:8b:01:2e:b4:11:a0:da:5d:ab:7e:89:1f:7f:
                    46:7f:8f:56:bc:bc:80:f3:b9:e0:a3:fd:7e:4c:bd:
                    8e:8a:bb:7d:3a:93:4b:6f:23:7d:1d:31:33:f6:6a:
                    e5:db:c9:b0:9c:a9:b5:30:60:fc:ea:05:5e:6b:f5:
                    be:f9:8c:a5:bd:5d:84:0c:fe:f9:3a:90:dd:d8:d3:
                    82:af:9f:24:97:0c:8e:fd:07:67:68:d4:d0:1c:72:
                    a8:b9:a3:5b:0f:3c:7d:6a:4b:d8:89:63:5f:72:c1:
                    ec:48:80:c2:c5:55:3f:5c:b1:ad:63:ac:47:58:81:
                    14:94:4a:d7:1f:06:8d:3f:2b:47:3b:c6:4d:9c:04:
                    4c:d9:08:f8:af:6b:c9:02:d7:bd:ee:6e:c1:5d:aa:
                    91:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C5:B0:71:E4:F7:49:A8:7A:8A:F0:4D:59:47:DE:F0:BD:D4:6A:B7
            X509v3 Authority Key Identifier:
                keyid:7F:00:08:01:D8:8E:7B:A8:E2:3F:CD:DC:39:6C:C2:FE:19:8D:02:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/7F000801D88E7BA8E23FCDDC396CC2FE198D022F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F000801D88E7BA8E23FCDDC396CC2FE198D022F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a373033333a3a2f34382d3438203d3e20323638343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:51b4:7033::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:5e:70:9b:77:2a:8d:fe:0d:07:b8:bd:d2:32:35:ca:a6:6e:
         74:80:6b:f8:06:e3:0c:de:58:3b:d3:3b:39:63:0d:25:84:5c:
         24:c6:48:0d:be:9b:a1:bb:77:bb:d1:d9:0d:6e:e5:4b:86:0b:
         a9:03:0c:42:e7:60:d4:a3:24:b2:fa:fe:a7:86:18:c7:cc:b6:
         e6:a3:ab:41:53:a7:21:f5:f9:4c:53:8f:98:32:2b:2b:03:6e:
         36:c4:82:af:90:3d:0e:7d:d9:2a:fe:18:46:ab:de:c6:77:0c:
         c9:4e:6d:b5:5b:42:31:57:91:6f:ba:4a:53:de:35:db:9b:ad:
         f1:fc:2f:a4:91:42:1d:2d:c8:bf:32:8a:36:12:70:fe:ef:6a:
         aa:5a:92:ce:94:05:24:c0:b0:66:18:82:f7:58:e9:91:0c:86:
         a5:8a:4a:39:ce:c0:cd:5e:b2:fd:58:ee:7a:8b:70:4a:e9:fc:
         4a:b3:8a:26:af:32:e7:75:06:28:f6:e2:7e:d2:d7:1d:ea:a8:
         b3:8e:71:11:51:a2:4b:3c:53:d0:f3:09:26:0b:4e:12:f4:6b:
         42:fd:0c:86:4f:7f:39:ff:44:e3:0e:c7:18:6b:84:2a:e9:1f:
         cc:d5:aa:cf:92:64:a8:89:92:ce:c0:d8:0d:d4:e1:d8:a5:f9:
         24:6c:48:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----