Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiAbg2SBTKsqSw9qoCgPCaF9yvKfAMahxNNvVh55hNAh/0/323830343a383634343a3a2f33322d3332203d3e20323732363332.roa
File:                     323830343a383634343a3a2f33322d3332203d3e20323732363332.roa (raw, json)
Hash identifier:          Bgy9BR+A1LmPh/gtddqOPKEUoZntzoc1bitVaZcf46E=
Subject key identifier:   45:53:11:7A:FA:18:EE:51:36:B1:1E:68:5A:61:C5:A5:D8:EF:86:09
Certificate issuer:       /CN=5B76901CD0446E8100BF112A95C02C9FEB07B634
Certificate serial:       0C7EA034DFC1651F819CC5D1F3DEEFA6A1CC02DB
Authority key identifier: 5B:76:90:1C:D0:44:6E:81:00:BF:11:2A:95:C0:2C:9F:EB:07:B6:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B76901CD0446E8100BF112A95C02C9FEB07B634.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiAbg2SBTKsqSw9qoCgPCaF9yvKfAMahxNNvVh55hNAh/0/323830343a383634343a3a2f33322d3332203d3e20323732363332.roa
Signing time:             Sat 15 Jun 2024 12:32:29 +0000
ROA not before:           Sat 15 Jun 2024 12:27:29 +0000
ROA not after:            Sat 14 Jun 2025 12:32:29 +0000
asID:                     272632
IP address blocks:        2804:8644::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:7e:a0:34:df:c1:65:1f:81:9c:c5:d1:f3:de:ef:a6:a1:cc:02:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B76901CD0446E8100BF112A95C02C9FEB07B634
        Validity
            Not Before: Jun 15 12:27:29 2024 GMT
            Not After : Jun 14 12:32:29 2025 GMT
        Subject: CN=4553117AFA18EE5136B11E685A61C5A5D8EF8609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:03:56:fd:b6:33:14:21:72:b3:5e:48:5e:13:
                    19:28:ff:bc:65:af:5e:12:42:d2:1a:a4:a3:a1:26:
                    71:79:32:61:27:da:e7:38:70:e8:50:6b:5a:53:34:
                    02:0f:fa:b7:b8:5f:92:c0:ae:5b:bf:f7:79:89:a6:
                    40:c5:b4:ac:16:f5:d8:3c:43:37:e6:dc:a0:1c:8d:
                    a3:5e:16:b5:46:e9:62:0a:2b:d4:e4:00:72:22:1e:
                    d6:fb:1f:82:a3:f0:ed:a2:b6:16:7f:5a:db:f3:d3:
                    b3:e1:0b:18:88:a3:e6:1a:5d:ba:1c:4f:75:0a:0e:
                    68:aa:a0:7f:80:ff:b6:39:e0:bc:23:0b:34:cc:03:
                    3f:70:25:d4:4c:36:44:38:04:ac:b7:91:94:13:fe:
                    8b:8f:28:a7:0f:80:8c:89:c4:9a:6d:ce:0c:38:d5:
                    2a:75:73:ad:f3:89:ed:00:ca:2a:bc:71:0e:5d:70:
                    9a:15:9e:08:2d:cb:ce:b8:6f:41:a3:54:df:1c:41:
                    ba:e1:89:bc:ad:79:f3:91:c3:4a:63:12:60:2a:94:
                    6e:57:59:0e:d0:80:59:ca:31:b1:27:12:dc:4b:13:
                    83:be:07:75:d4:dc:c3:09:49:61:6e:05:7b:51:be:
                    ab:b8:44:f4:50:9e:31:21:3f:28:43:a0:f8:69:b7:
                    10:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:53:11:7A:FA:18:EE:51:36:B1:1E:68:5A:61:C5:A5:D8:EF:86:09
            X509v3 Authority Key Identifier:
                keyid:5B:76:90:1C:D0:44:6E:81:00:BF:11:2A:95:C0:2C:9F:EB:07:B6:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiAbg2SBTKsqSw9qoCgPCaF9yvKfAMahxNNvVh55hNAh/0/5B76901CD0446E8100BF112A95C02C9FEB07B634.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B76901CD0446E8100BF112A95C02C9FEB07B634.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiAbg2SBTKsqSw9qoCgPCaF9yvKfAMahxNNvVh55hNAh/0/323830343a383634343a3a2f33322d3332203d3e20323732363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8644::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:e7:bb:10:03:9d:c3:68:43:da:0b:b9:01:7d:54:e2:ea:3f:
         63:34:c0:b4:96:02:3b:7a:1e:6a:3c:20:84:91:cd:ad:ea:4a:
         0c:54:8f:cd:72:e1:6b:74:11:60:59:af:ba:d4:bd:c9:a9:74:
         98:3a:ed:6b:ab:3b:65:1e:bb:07:77:47:ac:d5:11:05:8c:c4:
         fd:a1:13:58:1e:0d:4b:09:01:94:0c:9f:93:b2:ed:b5:9b:28:
         94:b2:7d:8a:0c:27:7a:c0:10:bb:23:49:35:43:8c:0e:fc:ea:
         d0:45:2f:85:94:4d:5b:c9:2c:d4:04:9a:8b:51:d7:c9:f3:c6:
         5f:8f:50:61:71:1e:a5:2c:c4:39:e2:3b:d9:87:9a:a7:57:a2:
         ca:19:01:3e:0d:04:c3:aa:21:f8:c5:37:3a:e6:53:ef:6a:d3:
         41:af:e8:9f:e1:7c:5a:08:ed:12:de:62:cb:a6:48:e5:1e:e0:
         41:ac:5a:5b:d5:b3:7d:65:43:a1:a2:df:e8:d3:17:95:8b:bc:
         a0:72:89:4c:90:27:8f:e9:8f:45:74:2f:01:27:6b:cf:ff:a3:
         f3:da:13:f0:b3:5b:dc:4e:dd:7c:d5:a1:e3:77:94:26:80:4f:
         b6:ff:31:6f:ff:13:ce:66:0c:20:e6:ec:5a:24:ca:01:ce:9f:
         a2:25:f2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----