Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/323830343a6233383a3a2f33322d3332203d3e203532373538.roa
File:                     323830343a6233383a3a2f33322d3332203d3e203532373538.roa (raw, json)
Hash identifier:          r9ZenyzCcu/0xHkUUirN1Z53tBB4uJQ6Fy6cGGZqR5s=
Subject key identifier:   31:A0:1C:95:2A:85:E9:97:A8:10:21:C6:C7:E7:53:F4:27:E9:F9:EE
Certificate issuer:       /CN=557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17
Certificate serial:       0639BDC65F37E388AD01F957DAA1B75F53C2CF15
Authority key identifier: 55:7F:D8:C2:3B:8E:6B:CB:6C:59:5C:EE:2B:8A:1A:C1:B1:91:DC:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/323830343a6233383a3a2f33322d3332203d3e203532373538.roa
Signing time:             Fri 08 Mar 2024 13:44:48 +0000
ROA not before:           Fri 08 Mar 2024 13:39:48 +0000
ROA not after:            Fri 07 Mar 2025 13:44:48 +0000
asID:                     52758
IP address blocks:        2804:b38::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:39:bd:c6:5f:37:e3:88:ad:01:f9:57:da:a1:b7:5f:53:c2:cf:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17
        Validity
            Not Before: Mar  8 13:39:48 2024 GMT
            Not After : Mar  7 13:44:48 2025 GMT
        Subject: CN=31A01C952A85E997A81021C6C7E753F427E9F9EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d1:7f:d7:47:e8:37:d0:2b:e7:39:0e:8c:f5:
                    b6:b6:48:a4:d7:79:f2:6a:db:03:16:8a:05:d7:af:
                    c1:f2:1f:45:2c:40:ea:bb:e3:6e:a4:77:32:d9:12:
                    d0:e2:08:02:b1:6e:c8:ff:60:1f:39:dd:3b:84:da:
                    09:bf:5d:ae:48:8b:b9:99:d4:9a:5b:51:a7:eb:25:
                    28:52:b3:ba:fc:ae:b6:1f:ef:8d:1a:d7:c3:cd:91:
                    d7:20:fd:cf:af:99:38:07:37:b5:97:91:e7:e1:74:
                    f9:47:81:92:4e:e5:0d:38:a6:a5:cb:c3:5f:a1:b1:
                    4f:85:e3:4a:fa:1c:c9:60:fd:0c:c3:38:29:f5:f6:
                    2b:2b:63:79:d1:7e:50:03:6a:0f:7f:7e:39:73:90:
                    9e:f3:24:51:53:a2:8e:ec:65:3c:8c:e7:5e:af:c2:
                    eb:87:63:14:be:63:35:f5:60:60:fd:ae:f6:a2:40:
                    db:ba:0d:ed:4a:34:9d:2c:2b:ba:ba:f6:f0:fc:62:
                    9f:17:16:8d:db:3e:a1:5f:4b:62:ce:5d:1e:48:e1:
                    54:a0:49:1c:f2:37:1a:d3:e6:53:ed:11:ba:1f:36:
                    4f:ea:4b:96:fd:36:ed:06:be:16:b2:6e:f7:93:4a:
                    75:20:72:5a:94:9f:42:5b:94:28:75:a0:ef:59:a1:
                    1b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A0:1C:95:2A:85:E9:97:A8:10:21:C6:C7:E7:53:F4:27:E9:F9:EE
            X509v3 Authority Key Identifier:
                keyid:55:7F:D8:C2:3B:8E:6B:CB:6C:59:5C:EE:2B:8A:1A:C1:B1:91:DC:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/323830343a6233383a3a2f33322d3332203d3e203532373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b38::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:01:a7:88:b3:51:89:85:a5:8e:ef:27:fa:70:42:fe:40:22:
         93:d1:97:5c:29:a6:c8:a3:5e:79:e2:b0:b8:81:79:1f:b2:28:
         6e:a6:23:d1:b4:3d:e1:f6:03:4d:42:68:09:f2:3c:e6:ea:cc:
         45:8e:46:50:b9:92:78:40:0a:f7:db:9d:71:a7:0d:e3:74:4a:
         c7:66:28:9e:4e:b7:a1:69:a9:76:66:26:0d:c7:69:94:d2:84:
         79:1b:cb:21:f8:f5:55:81:cd:be:32:f3:c1:53:9e:6e:04:33:
         07:49:c1:c0:ef:46:b4:a3:c2:e4:c6:bb:2a:03:7e:2f:f8:cd:
         7d:68:9c:c3:b1:51:7c:91:d9:89:41:83:5e:11:56:99:3f:8b:
         3d:46:f9:94:25:af:d6:d8:d8:a7:1e:3e:8f:c2:a1:d9:d8:57:
         dd:4c:17:41:5e:b9:57:0d:30:ab:14:a2:ce:b6:38:f6:8f:c8:
         0c:aa:b0:79:04:e9:aa:ff:ad:b4:ba:0d:0f:49:75:d8:f3:b3:
         4a:e7:75:92:22:f0:91:08:1d:61:7a:00:e3:a5:6c:9a:f0:ae:
         61:9d:4e:74:2a:f8:78:ed:0c:d8:9c:a2:fd:57:bc:69:b1:91:
         ce:f8:fc:73:8f:70:87:b5:5b:02:d9:fa:48:5e:51:bf:9c:20:
         87:d0:96:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----