Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3bPnUivH3Ap3T8TEoidSQmXuLUNFUPWLRpFiM6CQCwU/0/323830343a333432383a3a2f33322d3332203d3e20323635343339.roa
File:                     323830343a333432383a3a2f33322d3332203d3e20323635343339.roa (raw, json)
Hash identifier:          8zbHLYF2HK2fZ++pTcDrecEvI3LGkNJEpmlY3HRZCU8=
Subject key identifier:   99:0E:79:D1:47:D8:52:35:4C:AB:2A:88:1B:6C:06:EA:B9:82:C5:85
Certificate issuer:       /CN=D51A679483A81F432A557B026F36D9650FD61E78
Certificate serial:       3EE9455A13754D621A6E904886F657532BF96B50
Authority key identifier: D5:1A:67:94:83:A8:1F:43:2A:55:7B:02:6F:36:D9:65:0F:D6:1E:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D51A679483A81F432A557B026F36D9650FD61E78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3bPnUivH3Ap3T8TEoidSQmXuLUNFUPWLRpFiM6CQCwU/0/323830343a333432383a3a2f33322d3332203d3e20323635343339.roa
Signing time:             Sun 28 Jan 2024 00:14:17 +0000
ROA not before:           Sun 28 Jan 2024 00:09:17 +0000
ROA not after:            Sun 26 Jan 2025 00:14:17 +0000
asID:                     265439
IP address blocks:        2804:3428::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:e9:45:5a:13:75:4d:62:1a:6e:90:48:86:f6:57:53:2b:f9:6b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D51A679483A81F432A557B026F36D9650FD61E78
        Validity
            Not Before: Jan 28 00:09:17 2024 GMT
            Not After : Jan 26 00:14:17 2025 GMT
        Subject: CN=990E79D147D852354CAB2A881B6C06EAB982C585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bf:c3:d3:7d:b2:9b:fa:4a:2d:5b:a2:5d:aa:
                    81:fd:95:48:04:71:cf:8d:63:df:d6:ab:9a:be:74:
                    2b:32:0f:36:74:73:ec:ef:76:be:b4:01:8f:99:ce:
                    e5:d6:96:e1:af:d5:c8:9a:5a:b7:c2:b9:83:a9:3b:
                    46:b9:5e:fd:eb:f3:27:84:2c:be:91:b2:bc:c1:62:
                    25:04:e4:d1:d3:c7:fa:89:5e:3d:06:88:f0:c8:49:
                    af:2a:9d:69:ef:10:93:b5:87:73:97:f5:ca:6c:69:
                    bb:50:7f:0f:a2:24:b9:53:fe:b0:67:f5:53:9e:6c:
                    8e:fe:82:d3:03:d5:25:1d:fa:34:ed:74:1f:ed:a1:
                    8e:bb:66:b4:a9:be:3d:f5:ea:8e:94:84:e0:0a:02:
                    eb:4e:5b:48:22:a2:3d:36:b5:6a:d7:81:35:b3:70:
                    ab:69:17:c4:9b:69:80:3a:45:79:d4:66:17:01:b8:
                    a2:07:ec:4a:6b:58:cb:6c:87:b0:95:0e:3e:bc:24:
                    0a:a8:20:58:62:32:fe:86:33:c4:aa:d0:68:8e:b5:
                    f1:ae:65:64:fd:b9:16:4b:80:02:d5:f8:ef:d9:85:
                    1c:da:18:4f:4f:34:13:a9:f4:11:5f:4f:f7:72:c6:
                    4d:ec:79:4d:10:45:5c:62:80:83:2e:40:43:af:41:
                    e1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:0E:79:D1:47:D8:52:35:4C:AB:2A:88:1B:6C:06:EA:B9:82:C5:85
            X509v3 Authority Key Identifier:
                keyid:D5:1A:67:94:83:A8:1F:43:2A:55:7B:02:6F:36:D9:65:0F:D6:1E:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3bPnUivH3Ap3T8TEoidSQmXuLUNFUPWLRpFiM6CQCwU/0/D51A679483A81F432A557B026F36D9650FD61E78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D51A679483A81F432A557B026F36D9650FD61E78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3bPnUivH3Ap3T8TEoidSQmXuLUNFUPWLRpFiM6CQCwU/0/323830343a333432383a3a2f33322d3332203d3e20323635343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3428::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:5c:46:5a:82:a9:37:19:78:6e:a2:3d:02:0c:49:03:93:0a:
         72:4e:b3:f3:cf:5e:ce:4f:54:43:86:e8:93:6b:a6:bd:33:70:
         52:d4:42:c6:1c:3f:dd:8c:2f:a0:f3:28:aa:fe:04:6d:72:7d:
         e5:75:00:0a:38:eb:29:97:3e:f6:8d:d4:0c:77:91:d4:39:0e:
         e4:3c:c1:57:e9:34:cd:01:2c:3a:d1:4f:9c:63:48:c0:3f:0a:
         50:ba:48:f4:af:2b:eb:70:26:07:ed:52:1e:18:61:06:92:43:
         c3:ea:f9:99:54:08:36:dc:2a:b6:9b:74:64:17:24:79:83:9d:
         83:fd:ac:29:c5:b6:71:66:cc:a2:b1:41:a8:95:31:50:42:f8:
         65:2e:1d:78:f4:da:65:13:a0:63:7f:10:91:91:f9:9a:85:bb:
         0d:35:2d:73:50:07:3a:11:23:31:c3:6f:02:4c:29:3a:6f:77:
         7d:8d:c9:d5:cf:32:d6:67:6b:3b:fa:11:bb:a9:74:b8:5c:ff:
         e9:ed:56:df:53:d8:12:51:a4:07:9c:28:77:91:59:00:03:a3:
         34:27:4d:32:9b:09:bc:0b:75:22:25:d6:ec:eb:aa:bb:18:cd:
         81:e0:94:0d:e3:81:61:73:8d:e9:67:e5:19:82:12:7d:d6:e4:
         18:14:df:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----