Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/0/323830343a323531303a3a2f33322d3438203d3e20323634323537.roa
File:                     323830343a323531303a3a2f33322d3438203d3e20323634323537.roa (raw, json)
Hash identifier:          HsYLz/3W6Yw5q+xrhsx5csUpMXokrDQUf0hLdVFfRRM=
Subject key identifier:   06:B8:23:DF:84:64:35:0E:57:2A:7F:F3:59:6D:1D:3C:12:DF:D9:89
Certificate issuer:       /CN=5578365AC7BA35472A6FC6D697540848F8A67D88
Certificate serial:       7371C0F3A0ED391B1EC8D446A2B9DB7956FFA7D2
Authority key identifier: 55:78:36:5A:C7:BA:35:47:2A:6F:C6:D6:97:54:08:48:F8:A6:7D:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5578365AC7BA35472A6FC6D697540848F8A67D88.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/0/323830343a323531303a3a2f33322d3438203d3e20323634323537.roa
Signing time:             Thu 07 Nov 2024 14:33:55 +0000
ROA not before:           Thu 07 Nov 2024 14:28:55 +0000
ROA not after:            Thu 06 Nov 2025 14:33:55 +0000
asID:                     264257
IP address blocks:        2804:2510::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:71:c0:f3:a0:ed:39:1b:1e:c8:d4:46:a2:b9:db:79:56:ff:a7:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5578365AC7BA35472A6FC6D697540848F8A67D88
        Validity
            Not Before: Nov  7 14:28:55 2024 GMT
            Not After : Nov  6 14:33:55 2025 GMT
        Subject: CN=06B823DF8464350E572A7FF3596D1D3C12DFD989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:34:14:c1:53:16:c0:59:5e:19:e3:49:3a:9f:
                    d0:a7:44:0d:2b:f1:13:81:b1:16:82:9a:45:01:49:
                    ba:7b:07:fb:ab:00:60:5a:d9:b2:3f:2a:3b:a9:cc:
                    16:39:83:7b:de:68:29:3a:ba:b3:78:0f:9a:39:e9:
                    3d:3e:3a:f2:b4:e3:86:26:7f:41:d3:6f:55:d5:f4:
                    74:32:ed:c0:aa:c9:ec:14:2d:df:35:bf:a9:c4:12:
                    e6:6f:48:06:a0:97:33:3d:08:3c:e3:af:40:52:e3:
                    d5:c1:0f:74:93:fa:ae:0e:a9:06:23:d7:f8:56:49:
                    98:d2:c1:9a:a6:fd:ce:94:68:45:56:ba:81:1b:2f:
                    44:cf:17:2e:83:05:71:23:20:a1:c2:35:64:d6:c0:
                    92:8b:5f:ac:94:a6:f3:d0:e6:c0:ed:57:b1:73:bc:
                    28:50:f3:17:dd:20:ec:a3:93:8d:5f:8d:27:9c:62:
                    f4:ef:ef:af:5b:be:5f:1c:1e:e3:8d:ac:be:da:59:
                    78:9d:2c:9f:28:59:7b:5b:12:d1:04:0a:a0:7a:9a:
                    ac:9f:d4:af:16:a0:e9:fa:98:a3:68:b4:fd:21:a4:
                    3c:d6:56:de:c8:f9:37:86:79:9b:80:ae:87:27:12:
                    8e:3f:f8:e8:8a:b4:a9:9b:6d:a0:7e:3c:d6:d6:08:
                    3c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B8:23:DF:84:64:35:0E:57:2A:7F:F3:59:6D:1D:3C:12:DF:D9:89
            X509v3 Authority Key Identifier:
                keyid:55:78:36:5A:C7:BA:35:47:2A:6F:C6:D6:97:54:08:48:F8:A6:7D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/0/5578365AC7BA35472A6FC6D697540848F8A67D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5578365AC7BA35472A6FC6D697540848F8A67D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/0/323830343a323531303a3a2f33322d3438203d3e20323634323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2510::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:ff:b9:0f:7f:c0:fe:13:cf:fa:7a:f9:fa:eb:2a:8f:91:ae:
         fd:51:d6:5b:10:cf:b0:cc:1d:4f:8a:c8:62:e8:71:12:88:38:
         03:81:41:90:af:1f:30:84:40:c4:92:c7:95:81:bd:97:c2:05:
         b6:49:0f:51:e4:85:f6:a1:8d:91:54:a9:72:5c:23:8f:21:48:
         7c:01:15:69:ed:d5:98:2e:d8:0a:0c:72:d8:0c:dd:a4:82:d8:
         76:ea:0e:0b:fb:35:52:dd:41:eb:db:75:94:f9:2a:4c:ae:5c:
         66:c2:dc:e7:40:6c:e1:cd:15:da:d0:67:56:58:18:90:55:92:
         78:89:28:a6:97:1a:53:8d:7a:0f:05:a8:b5:ba:c3:34:03:9c:
         5f:82:8b:4d:1f:2e:c2:73:06:81:a3:7f:4f:72:63:1f:c9:63:
         86:f6:eb:96:ec:35:69:ad:dd:11:31:48:f3:be:df:89:89:f6:
         ff:6b:b4:b8:09:83:8d:a3:32:b5:22:12:b3:fb:1d:ec:dc:00:
         e2:93:cf:13:c5:7d:37:52:6d:1d:f0:7e:7f:1e:e3:70:53:c5:
         9c:b0:c8:04:08:a5:70:f1:14:e6:84:77:e6:84:18:f9:0f:27:
         9b:8c:82:4d:e1:4c:7f:25:c4:02:e1:26:3b:5b:9d:7e:1e:43:
         c0:a1:9e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----