Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/1/323830343a316262383a3a2f33322d3438203d3e203631373435.roa
File:                     323830343a316262383a3a2f33322d3438203d3e203631373435.roa (raw, json)
Hash identifier:          DKP70DohOTt6EWu/NrzCwN04QFOM227bJ5iEZlR1BBE=
Subject key identifier:   D9:A5:B1:7C:5A:4F:1D:E2:AC:5B:FC:5A:BA:1F:4F:F7:C3:A5:92:A0
Certificate issuer:       /CN=CECEE953A375AC085E59078AAB4DC678DA6D7A20
Certificate serial:       6488DB30E32FC768F29886858E5ABCA14D83A8D0
Authority key identifier: CE:CE:E9:53:A3:75:AC:08:5E:59:07:8A:AB:4D:C6:78:DA:6D:7A:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CECEE953A375AC085E59078AAB4DC678DA6D7A20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/1/323830343a316262383a3a2f33322d3438203d3e203631373435.roa
Signing time:             Mon 25 Nov 2024 13:58:00 +0000
ROA not before:           Mon 25 Nov 2024 13:53:00 +0000
ROA not after:            Mon 24 Nov 2025 13:58:00 +0000
asID:                     61745
IP address blocks:        2804:1bb8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:88:db:30:e3:2f:c7:68:f2:98:86:85:8e:5a:bc:a1:4d:83:a8:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CECEE953A375AC085E59078AAB4DC678DA6D7A20
        Validity
            Not Before: Nov 25 13:53:00 2024 GMT
            Not After : Nov 24 13:58:00 2025 GMT
        Subject: CN=D9A5B17C5A4F1DE2AC5BFC5ABA1F4FF7C3A592A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4b:77:90:37:0e:35:a4:b5:1c:cc:e2:a4:ba:
                    0c:72:6b:60:0b:d5:e7:95:5d:c2:59:e3:cd:16:91:
                    f7:5e:12:4e:48:74:bc:53:29:68:10:20:89:d1:69:
                    98:ae:9b:15:86:ef:19:e1:7d:9e:5d:19:1c:f5:86:
                    6f:a7:fe:69:5f:ae:73:1c:27:8a:b7:fa:ef:e2:e6:
                    9c:6a:8b:8a:14:14:1f:7a:66:bc:a3:9a:76:67:51:
                    28:1a:16:b4:9b:f0:f0:9d:bb:1c:1a:cf:bb:c5:1b:
                    4a:c3:02:91:a5:23:29:6c:78:39:a9:ff:f8:e5:22:
                    1e:07:6a:54:7f:00:4c:40:5d:92:f1:76:cb:e2:d3:
                    56:db:80:5f:fe:36:8b:a4:32:7b:d1:ed:88:64:12:
                    95:86:10:19:61:51:d7:34:cf:61:8b:3f:49:1e:e8:
                    33:f4:ef:c9:3f:60:0e:81:bf:53:a0:7c:86:c0:ef:
                    a3:b4:a0:5f:ff:98:3b:fa:e8:27:6c:25:17:b7:07:
                    93:68:d7:2a:9f:23:ec:63:7a:8d:69:28:e2:1b:2b:
                    e9:d8:3b:28:dc:5b:b7:c3:c7:9f:f6:3d:9e:65:3c:
                    e1:96:13:89:48:e4:ed:78:e1:77:b9:e0:3d:57:c2:
                    ef:07:75:f4:4c:2e:a0:00:70:30:fa:34:f5:f5:a4:
                    3c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:A5:B1:7C:5A:4F:1D:E2:AC:5B:FC:5A:BA:1F:4F:F7:C3:A5:92:A0
            X509v3 Authority Key Identifier:
                keyid:CE:CE:E9:53:A3:75:AC:08:5E:59:07:8A:AB:4D:C6:78:DA:6D:7A:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/1/CECEE953A375AC085E59078AAB4DC678DA6D7A20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CECEE953A375AC085E59078AAB4DC678DA6D7A20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/1/323830343a316262383a3a2f33322d3438203d3e203631373435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1bb8::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:5e:98:3f:ed:9e:3c:bc:a4:48:18:fa:7a:49:83:49:76:10:
         21:85:27:c2:47:33:1e:31:fa:49:d9:32:6c:29:d3:90:17:0f:
         4c:02:ac:12:53:cb:4a:b9:c3:5e:dd:01:bb:2f:78:ef:7a:3f:
         7b:0c:f5:95:50:0a:6f:8b:c3:08:3e:55:62:ac:ad:52:89:a5:
         9c:41:d5:b4:e7:c9:c5:00:f8:13:ba:08:37:cd:58:bb:a2:1a:
         17:43:7e:53:1a:4e:d8:92:88:2e:c5:f9:52:9a:ad:c4:da:7a:
         73:ea:ff:cd:23:56:20:8b:80:80:cf:1c:da:85:04:16:48:1f:
         df:3e:d0:fa:0e:eb:d3:ed:73:92:e1:bb:f3:16:3e:5d:d7:a8:
         2c:45:9a:a6:71:80:28:8c:b6:62:a0:76:34:a6:3f:05:4e:5e:
         c2:e3:bd:a1:68:1d:8d:bb:7b:7d:5a:5e:8f:51:8b:4b:2b:42:
         74:4f:ae:d2:cb:ae:7c:10:7e:3b:f9:e2:38:d3:da:f1:01:20:
         a3:b4:46:dd:fd:d5:2c:ec:72:3f:43:b5:23:45:a7:0a:47:c9:
         df:19:68:a0:cc:55:51:9f:92:50:e6:d4:35:d4:fc:5f:64:3a:
         ac:ef:ee:d8:d5:f3:ef:13:55:4e:85:e9:77:c2:71:4b:69:d2:
         1b:8f:c2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----