Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FzpF7W4wJTvayV2BuPMUFzqqbq1NojMTFbAXkyLDQcto/0/323830343a376338383a3a2f33322d313238203d3e20323731353032.roa
File:                     323830343a376338383a3a2f33322d313238203d3e20323731353032.roa (raw, json)
Hash identifier:          aixcYb4ivw2ofEoA0E0WEmzWcL8qt9LjI4ISg7uEink=
Subject key identifier:   81:AA:81:6A:E1:8A:57:61:68:4E:06:6B:BE:31:24:9A:02:D8:C0:47
Certificate issuer:       /CN=ADD6043AF5E41B4537D6F4F01EC0903C2DC7B7FB
Certificate serial:       04DC76D6DECBD68A5745B933A8AC07FD61C68925
Authority key identifier: AD:D6:04:3A:F5:E4:1B:45:37:D6:F4:F0:1E:C0:90:3C:2D:C7:B7:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADD6043AF5E41B4537D6F4F01EC0903C2DC7B7FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FzpF7W4wJTvayV2BuPMUFzqqbq1NojMTFbAXkyLDQcto/0/323830343a376338383a3a2f33322d313238203d3e20323731353032.roa
Signing time:             Sun 03 Mar 2024 22:11:33 +0000
ROA not before:           Sun 03 Mar 2024 22:06:33 +0000
ROA not after:            Sun 02 Mar 2025 22:11:33 +0000
asID:                     271502
IP address blocks:        2804:7c88::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:dc:76:d6:de:cb:d6:8a:57:45:b9:33:a8:ac:07:fd:61:c6:89:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADD6043AF5E41B4537D6F4F01EC0903C2DC7B7FB
        Validity
            Not Before: Mar  3 22:06:33 2024 GMT
            Not After : Mar  2 22:11:33 2025 GMT
        Subject: CN=81AA816AE18A5761684E066BBE31249A02D8C047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:79:a3:24:fa:d6:5e:92:3e:b3:5f:91:51:b6:
                    a0:18:aa:66:eb:25:1d:aa:d4:32:7b:da:78:47:02:
                    31:bf:c8:38:e0:1b:a5:2a:2d:8c:fd:bf:ea:89:80:
                    66:fb:ed:d6:1c:24:93:38:c3:8a:8b:bb:d1:3b:d1:
                    42:3d:59:f5:1d:97:09:c2:9e:8a:13:90:13:94:34:
                    ca:11:89:d4:39:d4:6b:d5:eb:41:44:da:ac:6f:49:
                    9d:b2:ee:c6:10:13:30:8c:86:6b:14:1e:45:c8:e9:
                    21:ce:49:82:46:ca:8d:b7:8d:20:8f:52:c2:bb:4d:
                    69:37:76:f4:7a:ed:97:db:6d:2a:7c:71:5b:57:c5:
                    97:61:a2:d2:c4:ef:e4:28:13:49:08:d5:9f:15:44:
                    5a:7e:cd:c5:e5:63:f7:2f:e7:de:4f:46:e7:06:3e:
                    1a:e1:0e:58:be:1f:a8:f6:e9:9e:02:3a:ca:5c:65:
                    a6:13:32:41:1f:1c:fd:33:99:31:77:8b:3a:4b:ce:
                    36:fb:4e:f7:00:09:61:e0:60:bf:87:03:f2:25:e5:
                    a2:f6:39:4c:97:56:96:56:25:48:47:ee:a7:fa:d3:
                    fe:cc:34:51:85:60:74:31:e6:8f:9c:02:f0:2b:65:
                    37:01:11:54:a3:e5:be:b9:60:20:89:64:06:e3:fe:
                    56:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:AA:81:6A:E1:8A:57:61:68:4E:06:6B:BE:31:24:9A:02:D8:C0:47
            X509v3 Authority Key Identifier:
                keyid:AD:D6:04:3A:F5:E4:1B:45:37:D6:F4:F0:1E:C0:90:3C:2D:C7:B7:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FzpF7W4wJTvayV2BuPMUFzqqbq1NojMTFbAXkyLDQcto/0/ADD6043AF5E41B4537D6F4F01EC0903C2DC7B7FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADD6043AF5E41B4537D6F4F01EC0903C2DC7B7FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FzpF7W4wJTvayV2BuPMUFzqqbq1NojMTFbAXkyLDQcto/0/323830343a376338383a3a2f33322d313238203d3e20323731353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c88::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:3c:f3:7b:99:3b:ed:25:ac:93:8b:fa:8b:cf:32:78:a9:1c:
         ad:f9:94:e5:ba:35:bb:5a:00:75:b1:84:5b:7a:01:67:91:cc:
         44:30:52:ea:d3:ea:1d:36:b5:13:77:e7:9a:83:3e:54:8e:87:
         1c:83:b4:11:79:a2:13:23:ba:6e:9c:72:ae:6e:48:13:ac:7b:
         04:f7:9a:71:29:13:67:32:96:82:36:d6:c0:14:c2:7d:4a:91:
         1b:0e:38:cb:a9:f4:2f:fd:08:32:93:f2:fd:17:9c:3e:24:97:
         6b:65:f1:75:8b:d2:e9:df:a3:f5:4d:d7:a1:75:bc:8f:0b:81:
         7e:58:4e:04:44:37:f5:df:25:f6:a8:6b:26:be:c3:c9:c9:c5:
         ca:ab:10:c6:1e:86:5d:d3:6e:9e:aa:78:79:8c:7c:04:b3:c6:
         07:3f:e7:44:f0:b7:f3:b3:34:66:7d:8c:10:29:d6:26:34:4b:
         93:ae:6c:29:9b:c2:ca:6a:03:2b:04:80:26:f2:f1:79:a6:02:
         61:56:0e:46:12:19:51:7b:ba:95:a6:b3:71:5a:bb:69:26:70:
         c6:3c:73:3c:c1:bc:07:c3:5b:13:3f:12:c6:20:bc:7e:e4:5f:
         bb:5a:1e:d4:32:08:12:83:b7:81:88:8c:6e:60:2e:b1:16:05:
         0c:1b:f3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----