Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/323830343a353661343a3a2f33322d3438203d3e203238323736.roa
File:                     323830343a353661343a3a2f33322d3438203d3e203238323736.roa (raw, json)
Hash identifier:          UKifh74Sb6UBmPTQGP5sHxl+2+0T4+pcb1DzzIYD4Kg=
Subject key identifier:   4E:C6:16:2B:15:D7:34:5B:7D:5B:FD:B9:58:33:E1:1D:41:DC:4E:91
Certificate issuer:       /CN=FEE7200761D50CB7C046DEEA62DEB684FDFF3FC0
Certificate serial:       78F8BB3D05E3402D21F6B51952E0087AF44DF66F
Authority key identifier: FE:E7:20:07:61:D5:0C:B7:C0:46:DE:EA:62:DE:B6:84:FD:FF:3F:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEE7200761D50CB7C046DEEA62DEB684FDFF3FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/323830343a353661343a3a2f33322d3438203d3e203238323736.roa
Signing time:             Thu 15 Feb 2024 13:18:59 +0000
ROA not before:           Thu 15 Feb 2024 13:13:59 +0000
ROA not after:            Thu 13 Feb 2025 13:18:59 +0000
asID:                     28276
IP address blocks:        2804:56a4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f8:bb:3d:05:e3:40:2d:21:f6:b5:19:52:e0:08:7a:f4:4d:f6:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEE7200761D50CB7C046DEEA62DEB684FDFF3FC0
        Validity
            Not Before: Feb 15 13:13:59 2024 GMT
            Not After : Feb 13 13:18:59 2025 GMT
        Subject: CN=3082010A0282010100CDB9622D7D901717ADDDFDC5281C3E28839D3E320F5F3CFA87BC8B4C90CC03A8216B19A849DA2BF9B49F631F36BDA8E83933F507465CCF14D6A984108E5C3645B81BF2064616079FFC284F6E5D61A95A8F83295CC84BC6DB3754F8B44CC8415F43BA576F5ACF6617550F1B262362282A03BF1CC4400259F0789F3E09D7E4E67DB3B3BA82E264F65E00DE95E060BA6325F041D511DD3468C2F7EEA035A37E81DC0CFE4C9763372C79A63628274AAAF3D77BD15A450FFBFD6FD8ED469A8B37ACE50A5FF265A1435C15F0A82E024C82CF800875B1F44BF7EA272D161E9275D1BAC4F63FE20AA2A5681988199E8DC4C65C5A65E960DC7FB969AC2D0588D1BB209F890203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b9:62:2d:7d:90:17:17:ad:dd:fd:c5:28:1c:
                    3e:28:83:9d:3e:32:0f:5f:3c:fa:87:bc:8b:4c:90:
                    cc:03:a8:21:6b:19:a8:49:da:2b:f9:b4:9f:63:1f:
                    36:bd:a8:e8:39:33:f5:07:46:5c:cf:14:d6:a9:84:
                    10:8e:5c:36:45:b8:1b:f2:06:46:16:07:9f:fc:28:
                    4f:6e:5d:61:a9:5a:8f:83:29:5c:c8:4b:c6:db:37:
                    54:f8:b4:4c:c8:41:5f:43:ba:57:6f:5a:cf:66:17:
                    55:0f:1b:26:23:62:28:2a:03:bf:1c:c4:40:02:59:
                    f0:78:9f:3e:09:d7:e4:e6:7d:b3:b3:ba:82:e2:64:
                    f6:5e:00:de:95:e0:60:ba:63:25:f0:41:d5:11:dd:
                    34:68:c2:f7:ee:a0:35:a3:7e:81:dc:0c:fe:4c:97:
                    63:37:2c:79:a6:36:28:27:4a:aa:f3:d7:7b:d1:5a:
                    45:0f:fb:fd:6f:d8:ed:46:9a:8b:37:ac:e5:0a:5f:
                    f2:65:a1:43:5c:15:f0:a8:2e:02:4c:82:cf:80:08:
                    75:b1:f4:4b:f7:ea:27:2d:16:1e:92:75:d1:ba:c4:
                    f6:3f:e2:0a:a2:a5:68:19:88:19:9e:8d:c4:c6:5c:
                    5a:65:e9:60:dc:7f:b9:69:ac:2d:05:88:d1:bb:20:
                    9f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C6:16:2B:15:D7:34:5B:7D:5B:FD:B9:58:33:E1:1D:41:DC:4E:91
            X509v3 Authority Key Identifier:
                keyid:FE:E7:20:07:61:D5:0C:B7:C0:46:DE:EA:62:DE:B6:84:FD:FF:3F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/FEE7200761D50CB7C046DEEA62DEB684FDFF3FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEE7200761D50CB7C046DEEA62DEB684FDFF3FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/323830343a353661343a3a2f33322d3438203d3e203238323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:35:5a:d3:91:b7:54:f6:26:1c:06:84:d7:0a:c5:39:0e:e8:
         bc:cb:f8:20:84:db:8c:2a:52:f8:15:50:42:44:b4:0f:1e:a3:
         74:a4:35:d6:eb:0d:c8:c6:e4:2f:cc:76:2f:9b:5e:6e:c0:6e:
         18:ce:78:a5:40:50:29:5c:7a:1b:7c:d2:f1:48:1c:d0:16:b8:
         55:b2:b5:ce:65:48:cc:9b:e7:9b:2a:cc:f5:f1:ff:8f:d9:82:
         4f:3e:4c:6c:fa:08:cc:39:9c:c8:a9:4f:fa:a2:44:24:79:4c:
         88:9b:82:4e:3f:82:7f:3b:e6:81:14:6d:b9:1f:5f:48:b2:ef:
         19:23:d8:65:a1:a0:61:32:be:32:33:64:be:13:4c:e7:6f:f1:
         ad:20:26:70:72:56:44:d5:5e:ec:31:4d:ec:c4:f8:48:44:bb:
         c6:a5:76:21:d3:98:28:37:4f:16:89:f6:c4:8f:ad:14:22:f1:
         2c:44:f3:de:f5:72:2e:ac:23:a4:b2:cd:84:dd:fa:2a:84:0b:
         cc:68:8a:25:50:d3:46:e7:1e:13:1a:d3:f2:31:73:eb:f0:84:
         bd:55:69:f5:df:f8:2d:8f:bd:df:5c:93:97:b6:94:30:d5:08:
         2a:b2:fb:0e:31:db:c8:c5:74:19:26:c9:02:81:07:4c:7c:26:
         e9:39:8a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----