Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/1/323830343a336333343a3a2f33322d3332203d3e20323636313936.roa
File:                     323830343a336333343a3a2f33322d3332203d3e20323636313936.roa (raw, json)
Hash identifier:          3+dIH2Jmi/fdCRilAHeQMxlpFyUImQYtyQRX9P/JfuY=
Subject key identifier:   ED:50:6C:AC:54:4F:59:F2:AA:39:79:BA:24:D0:15:ED:51:27:9E:52
Certificate issuer:       /CN=540DD83FF1692B2072A8312F529D6865CBB50CCE
Certificate serial:       32E7EA4C1764BD1AD0C962858BBBF359D59A53DA
Authority key identifier: 54:0D:D8:3F:F1:69:2B:20:72:A8:31:2F:52:9D:68:65:CB:B5:0C:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/540DD83FF1692B2072A8312F529D6865CBB50CCE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/1/323830343a336333343a3a2f33322d3332203d3e20323636313936.roa
Signing time:             Sun 07 Apr 2024 22:13:14 +0000
ROA not before:           Sun 07 Apr 2024 22:08:14 +0000
ROA not after:            Sun 06 Apr 2025 22:13:14 +0000
asID:                     266196
IP address blocks:        2804:3c34::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:e7:ea:4c:17:64:bd:1a:d0:c9:62:85:8b:bb:f3:59:d5:9a:53:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=540DD83FF1692B2072A8312F529D6865CBB50CCE
        Validity
            Not Before: Apr  7 22:08:14 2024 GMT
            Not After : Apr  6 22:13:14 2025 GMT
        Subject: CN=ED506CAC544F59F2AA3979BA24D015ED51279E52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:46:04:5f:ee:d6:52:0b:bf:80:42:9c:59:dc:
                    62:ad:12:db:ca:a2:08:1a:1f:d6:c5:a5:1e:48:1e:
                    77:df:78:57:ca:31:07:9a:c0:dc:64:2a:c7:fc:d0:
                    58:0b:e3:af:02:16:eb:ef:c3:47:41:a2:ef:d1:5a:
                    d5:26:8c:ac:c5:11:8a:8e:e0:d3:31:1c:32:1c:88:
                    c9:82:de:77:45:f3:19:c8:82:f5:23:19:29:59:0f:
                    c2:e8:7f:29:42:d5:c6:51:43:62:60:4f:23:27:bf:
                    a0:dc:d4:6b:84:47:c4:20:e8:18:8d:ec:ad:17:40:
                    d6:97:2d:23:2e:64:2b:42:c2:0d:37:1e:75:41:b3:
                    b3:70:98:31:0e:0e:3d:6a:6a:ae:bb:2c:bc:24:aa:
                    9d:00:00:96:af:90:db:0c:ef:1c:a3:4f:d1:0f:97:
                    a5:ee:e2:2d:f1:d7:67:50:9c:36:4f:51:f3:f9:cb:
                    7f:db:43:b9:35:16:19:d0:91:15:e1:26:18:e5:38:
                    c0:99:28:cb:32:ff:38:ce:4d:b7:c9:86:ee:dc:d9:
                    45:8f:c8:fe:42:e8:33:a9:88:cf:cb:66:2e:3f:0b:
                    d2:23:68:e6:b9:96:c0:05:4d:61:cc:92:01:d6:cc:
                    8a:41:b4:ce:a1:19:20:5d:f7:f1:90:51:0c:ca:0a:
                    d7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:50:6C:AC:54:4F:59:F2:AA:39:79:BA:24:D0:15:ED:51:27:9E:52
            X509v3 Authority Key Identifier:
                keyid:54:0D:D8:3F:F1:69:2B:20:72:A8:31:2F:52:9D:68:65:CB:B5:0C:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/1/540DD83FF1692B2072A8312F529D6865CBB50CCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/540DD83FF1692B2072A8312F529D6865CBB50CCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/1/323830343a336333343a3a2f33322d3332203d3e20323636313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c34::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:db:35:08:6a:b4:6f:56:24:87:2d:91:6e:f9:fd:26:5f:98:
         2c:e9:c3:95:3b:d6:b8:c6:b4:20:45:f2:4c:68:f0:bc:69:c2:
         1e:51:1b:bc:ef:3e:d3:c5:5d:15:4b:73:b8:c6:11:cd:4a:c1:
         f6:a6:80:42:17:9f:5b:e2:70:48:23:6a:81:07:d1:82:c1:6a:
         1f:83:5e:79:75:ef:e4:9d:0c:d2:9c:c2:a6:28:b2:cc:5a:23:
         c1:3e:79:ad:61:b1:bd:c8:c8:7c:34:e4:32:a5:b6:b0:21:90:
         9f:6d:41:ee:8c:84:e0:96:2d:38:d3:79:7e:0b:e9:20:13:d8:
         ed:89:f1:ab:3c:c6:64:c8:8e:b0:ae:a3:43:8c:10:b1:f8:79:
         c3:47:6c:a9:9d:d8:68:97:e0:a1:d9:24:76:c2:ca:f5:3f:5c:
         66:35:e3:88:b3:40:62:dc:a8:59:7f:7d:bc:a3:7d:61:ac:f8:
         02:da:39:d7:57:3b:dc:17:64:a5:6f:59:fe:58:db:8c:91:74:
         8d:e4:ae:38:6f:88:86:a1:c7:c4:eb:89:50:22:79:1e:81:97:
         67:d1:6f:ec:b4:84:ff:4e:36:0a:a7:62:c2:6c:fc:c2:9d:19:
         f4:d0:9d:53:f8:32:e5:4b:95:4e:ac:0c:9c:68:6b:9c:4f:ab:
         1f:f5:17:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----