Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/1/323030313a313239633a3a2f33322d3438203d3e203232333536.roa
File:                     323030313a313239633a3a2f33322d3438203d3e203232333536.roa (raw, json)
Hash identifier:          AeLWQvv91fGsEZlV5s7lmCLVkwaCNwsbzdfE02ErsnM=
Subject key identifier:   11:B7:57:F4:67:D1:2D:30:D9:1B:33:DB:DA:35:76:8A:9B:28:F7:76
Certificate issuer:       /CN=CF5DDC6846F108B3778C38774DB09DDC03C92903
Certificate serial:       217FAB6171922B0CD7B642C9D0C7422754F0967C
Authority key identifier: CF:5D:DC:68:46:F1:08:B3:77:8C:38:77:4D:B0:9D:DC:03:C9:29:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF5DDC6846F108B3778C38774DB09DDC03C92903.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/1/323030313a313239633a3a2f33322d3438203d3e203232333536.roa
Signing time:             Wed 03 Apr 2024 18:31:39 +0000
ROA not before:           Wed 03 Apr 2024 18:26:39 +0000
ROA not after:            Wed 02 Apr 2025 18:31:39 +0000
asID:                     22356
IP address blocks:        2001:129c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:7f:ab:61:71:92:2b:0c:d7:b6:42:c9:d0:c7:42:27:54:f0:96:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF5DDC6846F108B3778C38774DB09DDC03C92903
        Validity
            Not Before: Apr  3 18:26:39 2024 GMT
            Not After : Apr  2 18:31:39 2025 GMT
        Subject: CN=11B757F467D12D30D91B33DBDA35768A9B28F776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:69:08:b6:f2:6e:45:a8:91:cb:4a:39:6b:3e:
                    9c:11:11:72:da:d2:fc:98:27:3e:69:dd:a8:37:3b:
                    d5:56:69:d8:3b:69:e1:7d:b8:9f:bb:02:1f:d5:f5:
                    b1:dd:a7:17:a3:06:46:5e:6c:b9:2a:ca:f3:9c:d0:
                    2e:05:4d:77:a4:c9:e4:23:d9:0f:f3:ba:63:9b:b8:
                    56:43:2a:fa:1e:dc:30:85:6b:96:ea:c0:52:74:1c:
                    c8:3d:ac:f8:94:74:e8:24:e2:6a:24:15:6c:4b:38:
                    1a:10:5a:f7:bb:e4:f8:8d:02:04:69:2a:75:b3:bb:
                    fe:20:b2:7f:9e:15:d7:8c:c5:c3:7e:ef:87:95:da:
                    7f:52:c0:2d:77:1b:36:46:d0:d2:5b:fc:3a:eb:7f:
                    e2:5c:c4:ce:76:60:c8:ad:7e:c3:74:d1:8b:b2:93:
                    d3:9b:82:f0:97:dc:13:9c:0d:26:c7:b1:2e:90:ff:
                    0c:bc:e9:5c:b0:d1:f0:38:47:75:2d:43:0b:86:d2:
                    89:3c:21:21:50:17:9a:e1:cc:01:ac:38:74:84:3b:
                    fa:64:c0:41:23:ff:03:ee:08:8e:cd:f4:8e:de:03:
                    9b:2a:40:75:b6:77:df:d1:70:a4:17:4b:cc:95:6d:
                    38:52:bd:f6:2d:60:4c:5e:85:49:cb:b2:67:d9:46:
                    08:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B7:57:F4:67:D1:2D:30:D9:1B:33:DB:DA:35:76:8A:9B:28:F7:76
            X509v3 Authority Key Identifier:
                keyid:CF:5D:DC:68:46:F1:08:B3:77:8C:38:77:4D:B0:9D:DC:03:C9:29:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/1/CF5DDC6846F108B3778C38774DB09DDC03C92903.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF5DDC6846F108B3778C38774DB09DDC03C92903.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/1/323030313a313239633a3a2f33322d3438203d3e203232333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:129c::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:c8:78:80:1e:a8:fa:01:79:91:4a:4b:ea:f7:68:2c:6f:37:
         74:43:bc:c1:df:12:56:1d:5b:c3:99:da:06:e1:40:75:c9:c0:
         fc:33:13:51:79:1c:00:ab:93:4f:c9:ca:ff:1e:82:f8:eb:31:
         1b:6f:0e:03:04:ba:6d:84:4a:a2:6c:d5:51:fb:ff:d5:b8:c8:
         33:98:36:c8:1e:17:e8:cc:c9:f3:72:63:2c:67:42:7b:62:d2:
         45:1e:0d:74:22:42:fd:23:3c:9f:99:56:ee:ad:2e:f1:b7:f8:
         dc:33:da:91:91:46:a9:b8:9d:b7:f2:4e:f3:1c:59:48:06:71:
         45:de:a3:67:b0:c1:3a:e7:44:cf:ec:de:a8:4f:52:a0:3b:d5:
         4e:5b:f2:3f:bd:20:12:d6:8b:03:1f:84:24:65:e9:0a:ae:b7:
         cc:83:c6:a6:3f:9b:71:ac:9d:9b:ef:7b:5b:fe:b9:82:91:d7:
         36:ff:79:5f:77:9c:95:aa:d3:95:9e:19:74:ba:d6:d7:54:62:
         49:24:c2:dd:0d:ed:11:0d:be:d5:d2:b9:f6:e1:13:2f:66:32:
         b2:b5:ae:38:0e:c1:33:3b:ee:b0:00:1b:3a:26:e0:61:22:32:
         e4:da:5f:a5:06:64:4f:b5:ee:48:ed:08:06:27:8e:12:ab:07:
         98:a4:78:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----