Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/323830343a343334383a3a2f33322d3332203d3e20323637353630.roa
File:                     323830343a343334383a3a2f33322d3332203d3e20323637353630.roa (raw, json)
Hash identifier:          lgZvKfDAUMB/u9Cn0PDnEW80myQ0mrufJmS/AjrbsrI=
Subject key identifier:   D9:7D:61:14:C6:A2:37:C8:91:F3:49:7F:1D:F6:52:12:E1:1E:97:E2
Certificate issuer:       /CN=7BD6239E12856936C51835C31766BBA0B4D7B073
Certificate serial:       1CDE568E65929ACADE2DE8ED1063331B45F2A62C
Authority key identifier: 7B:D6:23:9E:12:85:69:36:C5:18:35:C3:17:66:BB:A0:B4:D7:B0:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7BD6239E12856936C51835C31766BBA0B4D7B073.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/323830343a343334383a3a2f33322d3332203d3e20323637353630.roa
Signing time:             Wed 28 Feb 2024 21:31:13 +0000
ROA not before:           Wed 28 Feb 2024 21:26:13 +0000
ROA not after:            Wed 26 Feb 2025 21:31:13 +0000
asID:                     267560
IP address blocks:        2804:4348::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:de:56:8e:65:92:9a:ca:de:2d:e8:ed:10:63:33:1b:45:f2:a6:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BD6239E12856936C51835C31766BBA0B4D7B073
        Validity
            Not Before: Feb 28 21:26:13 2024 GMT
            Not After : Feb 26 21:31:13 2025 GMT
        Subject: CN=D97D6114C6A237C891F3497F1DF65212E11E97E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0c:3f:17:e5:a9:a3:65:32:ee:64:25:ce:c3:
                    fc:15:6b:de:fe:70:02:9f:b8:94:3a:8f:42:3b:a2:
                    c1:c3:23:ac:f6:bb:b5:ae:9f:b8:e9:23:dd:cb:07:
                    a1:c6:ba:4f:3f:63:27:a8:9f:bf:33:7d:7a:ba:e8:
                    e1:c7:16:d4:0e:cb:1a:da:3c:be:24:64:79:ea:de:
                    bd:68:2e:fb:71:18:e6:5d:ad:02:6c:bd:23:03:44:
                    7f:3e:0f:fd:03:35:cc:2a:79:5b:e5:b7:c1:5c:36:
                    5b:9b:1d:33:21:ad:b6:09:71:d0:a9:c4:a4:39:96:
                    19:9b:31:99:0a:6e:b6:cd:a8:48:3d:17:ae:2e:a0:
                    cb:81:bf:00:36:89:f3:ce:a1:76:79:7f:d8:b9:e6:
                    67:3e:8b:35:46:cc:30:03:e2:87:0f:4c:97:c1:e2:
                    4d:94:71:9f:c5:21:cd:b7:9f:d0:0b:f1:e3:df:29:
                    b2:99:a1:50:4a:db:61:ce:49:ee:35:d3:8d:fb:6f:
                    95:9b:c1:92:b0:d3:26:e8:63:59:00:30:a9:17:0a:
                    88:87:58:22:7c:98:77:f4:82:bf:17:ef:be:e5:cf:
                    91:35:05:31:9d:9a:b0:15:09:ea:61:ee:d6:76:d1:
                    dc:b2:11:80:22:66:e4:b1:17:3a:89:9c:bc:4b:33:
                    a9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:7D:61:14:C6:A2:37:C8:91:F3:49:7F:1D:F6:52:12:E1:1E:97:E2
            X509v3 Authority Key Identifier:
                keyid:7B:D6:23:9E:12:85:69:36:C5:18:35:C3:17:66:BB:A0:B4:D7:B0:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/7BD6239E12856936C51835C31766BBA0B4D7B073.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7BD6239E12856936C51835C31766BBA0B4D7B073.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/323830343a343334383a3a2f33322d3332203d3e20323637353630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4348::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:44:2c:55:9f:1f:3d:4e:32:6d:50:b3:75:dc:7f:b3:91:2f:
         87:24:5a:bf:cd:48:95:d5:65:0c:ab:d2:68:e3:33:4d:08:ad:
         71:d3:52:f6:01:82:49:5a:a7:d0:56:88:5c:17:80:74:26:a1:
         43:b9:65:1b:57:37:26:ab:98:64:c9:ae:b3:9c:7f:6f:c4:13:
         6d:fa:4f:29:fb:15:41:b7:40:81:76:e0:aa:1f:7c:db:4a:66:
         77:8c:54:2e:c9:2f:0a:57:4d:84:37:8d:e9:58:d2:4a:f7:c8:
         01:bd:27:55:85:26:89:20:6b:4d:23:ec:07:e8:47:d4:9c:fc:
         df:fc:55:6c:3d:fe:95:d7:72:43:59:8e:03:ff:0a:cc:8d:5a:
         b4:e5:f7:bb:fe:96:90:f6:12:c0:33:5d:9e:70:e2:36:9e:be:
         9c:39:64:95:5f:b2:ae:07:4d:86:2b:24:2b:7b:3a:93:2d:d8:
         1a:11:b3:28:96:33:09:da:41:10:9c:07:43:77:a5:6b:32:0f:
         dd:ad:16:c3:49:26:ef:a3:87:56:fa:43:92:10:22:46:ba:5c:
         4e:ca:83:f8:0e:e0:d9:b5:e7:bd:84:a3:8e:08:14:6e:b5:40:
         35:40:81:8c:ea:f4:60:45:6e:90:a7:13:b9:30:9b:68:9d:26:
         a7:04:3b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----