Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/3/323830343a3963343a3a2f33322d3332203d3e203533303535.roa
File:                     323830343a3963343a3a2f33322d3332203d3e203533303535.roa (raw, json)
Hash identifier:          o/zGIcn0rLDEfQJytMO+zRTUC6z9PPZ4eLHc4hdYPrA=
Subject key identifier:   ED:85:2E:EB:74:04:58:43:3C:5A:1F:D2:9B:B1:65:8E:07:5A:28:3A
Certificate issuer:       /CN=D0F5CFED47B5D992A24E45C4DA19047052992A15
Certificate serial:       4263ABDE5C8B526420D31768DEB834E3AC7597F8
Authority key identifier: D0:F5:CF:ED:47:B5:D9:92:A2:4E:45:C4:DA:19:04:70:52:99:2A:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0F5CFED47B5D992A24E45C4DA19047052992A15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/3/323830343a3963343a3a2f33322d3332203d3e203533303535.roa
Signing time:             Wed 03 Apr 2024 20:20:28 +0000
ROA not before:           Wed 03 Apr 2024 20:15:28 +0000
ROA not after:            Wed 02 Apr 2025 20:20:28 +0000
asID:                     53055
IP address blocks:        2804:9c4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:63:ab:de:5c:8b:52:64:20:d3:17:68:de:b8:34:e3:ac:75:97:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0F5CFED47B5D992A24E45C4DA19047052992A15
        Validity
            Not Before: Apr  3 20:15:28 2024 GMT
            Not After : Apr  2 20:20:28 2025 GMT
        Subject: CN=ED852EEB740458433C5A1FD29BB1658E075A283A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:48:77:1a:af:3d:31:9c:d2:09:3f:f6:44:75:
                    6a:22:af:97:72:ee:be:73:f3:90:3d:c7:78:0f:fb:
                    fd:7c:c0:14:2e:f2:d9:dd:c9:12:76:5f:ac:7e:97:
                    47:5f:e2:27:c9:3e:15:79:45:d7:aa:00:b3:56:0e:
                    0a:84:f1:27:95:9d:20:3a:aa:0f:a5:ee:43:9f:39:
                    00:2e:fd:6d:7f:8c:00:c6:33:83:d6:ab:b6:71:fc:
                    91:97:35:f4:c8:18:a9:4c:b8:83:2c:fc:8c:78:cc:
                    de:5e:d0:31:d4:38:c2:df:13:14:46:73:c8:66:69:
                    7a:70:1a:56:34:f8:23:9d:20:cc:b5:0b:f4:9b:47:
                    7d:12:60:e1:2d:02:c3:bd:e3:c5:f4:7f:66:69:90:
                    80:3a:7a:54:a6:d9:59:54:f2:2f:52:26:36:f8:38:
                    a5:ea:64:bc:f4:38:2d:76:07:05:8c:55:47:70:4d:
                    03:98:ac:9c:27:ff:12:7a:bb:4f:e9:cf:04:8f:66:
                    a9:e4:b4:0b:a7:40:9e:cf:d7:ae:0f:2b:5c:e1:c2:
                    1c:08:a7:e1:bf:72:7a:23:b4:2d:f7:93:8b:a6:6e:
                    28:d7:9a:e8:33:0f:26:97:df:c0:52:61:5d:f4:69:
                    c8:c9:fb:ee:ba:e2:e2:d7:34:96:05:72:30:e6:c1:
                    ff:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:85:2E:EB:74:04:58:43:3C:5A:1F:D2:9B:B1:65:8E:07:5A:28:3A
            X509v3 Authority Key Identifier:
                keyid:D0:F5:CF:ED:47:B5:D9:92:A2:4E:45:C4:DA:19:04:70:52:99:2A:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/3/D0F5CFED47B5D992A24E45C4DA19047052992A15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0F5CFED47B5D992A24E45C4DA19047052992A15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/3/323830343a3963343a3a2f33322d3332203d3e203533303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:0b:c8:4d:81:61:4f:12:f5:1f:94:8b:e5:c9:11:48:7d:73:
         1f:c2:ac:ca:0f:ac:6b:af:40:2d:2c:9d:52:77:5a:b3:4e:b8:
         4d:48:1b:0b:a3:a6:00:1a:3c:0c:92:19:c4:c3:a8:bc:13:a3:
         6b:cd:2e:17:62:50:8b:81:80:24:fb:86:1f:c0:01:97:c2:83:
         30:1b:2e:d4:3c:1e:bb:5c:e2:82:f9:94:69:77:ae:b6:9d:c1:
         fa:da:05:4b:1b:dd:ef:d5:98:a0:0d:4a:47:00:f2:d5:d5:15:
         ff:9a:d2:d8:be:c0:01:d6:39:c5:84:38:cc:d3:5b:84:3a:f8:
         45:6b:ef:b2:39:ac:9a:e1:3e:a0:da:9e:cb:7d:f9:45:07:4f:
         fd:bb:63:28:6a:c4:3f:a3:80:bb:66:86:3f:ca:8e:4c:a4:bd:
         dd:d3:ab:3f:9a:f1:af:2c:a4:b7:b6:30:14:70:a7:f6:26:79:
         68:d5:6e:18:77:f7:31:63:26:4b:ac:6e:24:ce:0e:a2:e6:f4:
         87:c8:61:f0:27:e0:e7:8c:52:7c:82:8c:e4:ee:be:98:51:c1:
         89:34:e8:a7:23:01:4a:5d:8d:cf:aa:a0:3e:b3:1e:a9:c5:83:
         2c:e8:51:23:2f:58:f9:76:61:1c:6a:39:17:56:bf:88:c5:91:
         71:fa:dd:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----