Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/323830343a323166383a3a2f33322d3438203d3e20323632323732.roa
File:                     323830343a323166383a3a2f33322d3438203d3e20323632323732.roa (raw, json)
Hash identifier:          u6ZhtRCZ84KUlwjvMdhWgZhv8hT38RQYp4CRI5qBPTc=
Subject key identifier:   47:5D:0F:39:0E:73:CC:11:42:B1:65:8F:48:30:0D:32:16:61:15:E5
Certificate issuer:       /CN=0234F91A291644025C2C2460D355272A046B58DD
Certificate serial:       445E900065B70B062A72830BC4106A6A4E5C71FC
Authority key identifier: 02:34:F9:1A:29:16:44:02:5C:2C:24:60:D3:55:27:2A:04:6B:58:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0234F91A291644025C2C2460D355272A046B58DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/323830343a323166383a3a2f33322d3438203d3e20323632323732.roa
Signing time:             Mon 22 Jul 2024 18:02:18 +0000
ROA not before:           Mon 22 Jul 2024 17:57:18 +0000
ROA not after:            Mon 21 Jul 2025 18:02:18 +0000
asID:                     262272
IP address blocks:        2804:21f8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:5e:90:00:65:b7:0b:06:2a:72:83:0b:c4:10:6a:6a:4e:5c:71:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0234F91A291644025C2C2460D355272A046B58DD
        Validity
            Not Before: Jul 22 17:57:18 2024 GMT
            Not After : Jul 21 18:02:18 2025 GMT
        Subject: CN=475D0F390E73CC1142B1658F48300D32166115E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d6:9d:38:ee:9f:af:4a:93:9a:b3:ec:25:0b:
                    e1:a9:67:27:f8:e0:31:c0:af:cc:c3:95:f7:63:dc:
                    37:d9:5b:19:eb:7d:70:7d:31:ab:53:b4:7b:26:83:
                    87:59:a6:28:d6:a8:e2:ec:02:f4:c6:b5:1a:a2:8f:
                    2e:a0:05:4d:13:09:8b:13:64:5e:99:2b:40:5a:96:
                    6a:f0:5d:d1:d8:e6:0e:64:9f:cd:38:25:69:6a:ab:
                    2b:9d:2b:53:d9:c0:53:74:68:6f:b9:68:88:e8:6f:
                    3f:31:36:ca:dc:06:bf:89:a1:4c:9a:be:63:3a:4d:
                    30:af:77:e9:65:96:80:72:eb:86:18:24:44:e7:fb:
                    e8:6a:01:13:54:f7:45:de:ed:c4:f1:42:20:56:bb:
                    8e:b3:9e:5b:cc:2b:90:1c:39:63:0b:70:00:23:c1:
                    6f:86:84:5f:f9:f1:7b:85:9f:14:0c:4a:7c:7f:cc:
                    bb:c2:05:7d:6a:72:d7:b0:ad:7f:2b:68:33:f9:d2:
                    a0:a7:f9:bc:bf:82:73:b5:5a:5d:4a:29:61:b9:7b:
                    b6:b7:f8:73:72:a2:c2:0c:60:7a:7a:f2:83:c7:6b:
                    5f:31:6d:f1:82:6c:c8:dc:ae:0f:4f:88:db:fa:0e:
                    7c:c0:c3:30:a7:85:2b:a0:f8:49:af:3b:48:ff:05:
                    59:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:5D:0F:39:0E:73:CC:11:42:B1:65:8F:48:30:0D:32:16:61:15:E5
            X509v3 Authority Key Identifier:
                keyid:02:34:F9:1A:29:16:44:02:5C:2C:24:60:D3:55:27:2A:04:6B:58:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/0234F91A291644025C2C2460D355272A046B58DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0234F91A291644025C2C2460D355272A046B58DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/323830343a323166383a3a2f33322d3438203d3e20323632323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:21f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:f3:c8:6b:0b:3f:49:42:fc:f0:4d:9d:48:e1:f6:44:17:9f:
         3a:72:19:6a:59:2d:b4:4a:95:1f:6f:12:00:c5:02:26:0a:a4:
         e9:f4:cd:68:8c:ed:1c:64:81:9a:e8:86:78:91:bb:b5:d4:ad:
         c0:66:fe:59:5b:10:16:aa:f9:6a:3d:2e:c3:65:ab:18:8c:53:
         da:e6:58:da:e0:8e:ba:81:48:6e:d3:e7:3b:34:24:fa:03:41:
         5c:db:94:4f:49:5e:06:aa:16:85:b1:4a:2f:89:15:92:c8:5a:
         6e:41:e9:d5:25:8e:b6:ff:55:cb:f0:bb:c7:b8:96:a8:44:6d:
         6c:d6:aa:48:51:07:4a:98:a9:8a:16:10:41:4a:b3:d5:93:e8:
         18:78:4d:e6:6e:e9:54:9f:1b:89:8e:8b:df:26:5b:97:5b:10:
         a4:4f:00:fb:34:d2:f8:04:69:7c:ca:c8:86:5c:1c:de:66:35:
         28:16:f5:cb:60:e6:58:50:1e:d3:c1:a3:42:36:5d:c3:9d:23:
         44:9b:4e:90:78:13:68:50:5c:fe:61:ea:31:18:ee:8b:cb:e7:
         21:5f:3d:d5:63:aa:c2:19:44:d1:bd:07:ed:eb:1d:6c:48:63:
         66:84:72:06:b9:37:f6:64:f4:49:55:7a:d5:15:e7:30:88:04:
         b1:99:a5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----