Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmJHDduXBcFFhvFpH8R68macGTSFZh1c97ndvxpHokGx/1/323830343a323131383a3a2f33322d3438203d3e20323634353333.roa
File:                     323830343a323131383a3a2f33322d3438203d3e20323634353333.roa (raw, json)
Hash identifier:          7AG3wKqtrLlzYT4JKpVgHXrVVdTJ997sh0zVl+mLQn4=
Subject key identifier:   84:B4:0C:E9:71:21:51:4E:21:49:C2:84:BB:69:3B:77:C7:5C:C9:E6
Certificate issuer:       /CN=CCF96E400ADC8CB70637260575081932C55B87B2
Certificate serial:       5C2E49B732555775E590FCD9464E9529702C03E5
Authority key identifier: CC:F9:6E:40:0A:DC:8C:B7:06:37:26:05:75:08:19:32:C5:5B:87:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CCF96E400ADC8CB70637260575081932C55B87B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmJHDduXBcFFhvFpH8R68macGTSFZh1c97ndvxpHokGx/1/323830343a323131383a3a2f33322d3438203d3e20323634353333.roa
Signing time:             Tue 09 Apr 2024 20:29:08 +0000
ROA not before:           Tue 09 Apr 2024 20:24:08 +0000
ROA not after:            Tue 08 Apr 2025 20:29:08 +0000
asID:                     264533
IP address blocks:        2804:2118::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:2e:49:b7:32:55:57:75:e5:90:fc:d9:46:4e:95:29:70:2c:03:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCF96E400ADC8CB70637260575081932C55B87B2
        Validity
            Not Before: Apr  9 20:24:08 2024 GMT
            Not After : Apr  8 20:29:08 2025 GMT
        Subject: CN=84B40CE97121514E2149C284BB693B77C75CC9E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9a:e4:98:71:39:6f:83:a6:e2:54:19:d3:04:
                    91:de:3e:09:df:3b:b5:de:dc:91:1a:d7:9c:b7:d1:
                    36:80:bd:f8:df:aa:43:39:b3:1f:ce:93:3b:44:65:
                    82:ad:24:35:b8:20:00:d3:22:c9:71:06:06:50:c7:
                    ac:3c:d3:36:80:f6:b2:58:b3:ee:3a:be:47:f6:84:
                    5c:eb:dd:23:4b:78:b4:27:03:b2:8a:84:81:27:67:
                    4c:c6:6a:ed:5b:a7:07:5d:11:20:05:c6:d7:79:8f:
                    60:bf:1b:b9:26:7c:94:87:fe:44:e5:2f:6b:8c:64:
                    28:49:09:68:a8:ce:2f:4a:f1:8c:88:70:b1:fd:80:
                    0b:d0:8e:ad:59:1a:07:22:41:d3:53:24:50:fc:90:
                    b1:ce:ad:92:ff:d6:42:da:4a:7c:49:e3:df:9a:28:
                    3b:f2:2f:a8:87:ef:ef:d8:5b:ea:26:ea:a1:b0:27:
                    16:2a:c9:ce:12:c3:9d:ea:e9:1b:b5:31:18:c3:df:
                    68:b3:6c:08:7c:04:75:9e:d7:ab:4b:96:bc:eb:6a:
                    5a:31:8b:47:a4:d2:16:6e:b2:b5:a6:f5:47:ba:38:
                    42:08:da:bb:dc:c8:e8:9c:40:cc:8c:88:69:d1:5a:
                    cb:47:f6:16:ad:16:b6:91:10:94:5c:50:0b:3d:41:
                    66:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B4:0C:E9:71:21:51:4E:21:49:C2:84:BB:69:3B:77:C7:5C:C9:E6
            X509v3 Authority Key Identifier:
                keyid:CC:F9:6E:40:0A:DC:8C:B7:06:37:26:05:75:08:19:32:C5:5B:87:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmJHDduXBcFFhvFpH8R68macGTSFZh1c97ndvxpHokGx/1/CCF96E400ADC8CB70637260575081932C55B87B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CCF96E400ADC8CB70637260575081932C55B87B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmJHDduXBcFFhvFpH8R68macGTSFZh1c97ndvxpHokGx/1/323830343a323131383a3a2f33322d3438203d3e20323634353333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2118::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:bb:d6:81:40:dc:23:4b:1a:79:93:6c:ad:56:e3:77:ac:56:
         e3:dd:80:ec:a5:e1:4a:27:cb:e6:da:b5:14:9a:a4:bf:b4:8a:
         03:28:23:99:d2:d8:08:f9:60:9e:f2:db:14:4d:66:af:65:24:
         75:67:51:e7:b4:d0:f7:32:fa:4c:d4:fb:b6:26:89:27:9a:93:
         a2:e5:52:d4:c6:36:ea:79:c9:78:74:a4:7a:20:6b:b9:9e:48:
         ed:ff:3e:14:05:8b:c5:7e:1c:27:f7:4a:24:ff:4a:a5:a3:aa:
         5e:f8:29:c5:af:1c:5e:c0:51:c4:62:84:a4:91:92:50:51:77:
         b9:c8:25:24:54:83:82:78:2d:11:45:c8:38:9a:fe:e9:75:30:
         af:c7:93:41:bb:ba:87:c2:33:b0:62:ad:39:1a:d1:af:6d:a7:
         4b:f6:59:dc:28:10:56:fe:6c:54:d3:94:c9:ea:d4:c6:e3:77:
         bb:44:92:b0:73:7c:f3:70:3b:4d:3c:4e:fe:05:09:1c:d2:11:
         90:e1:b1:a7:9b:76:0f:bf:49:a9:19:c2:82:79:11:97:37:14:
         da:c4:bd:78:ed:f2:d1:40:27:bd:7d:af:d6:36:d8:13:b6:4b:
         48:4a:be:0c:cb:95:dd:4c:3d:be:66:a1:be:c9:e0:d9:0c:8a:
         f4:53:74:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----