Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4qKyFrWr1AeRE6FG9TKBHQhDYZtUT4wGp3iv6Npwe9n/0/323830343a363931343a3a2f33322d3332203d3e20323730323437.roa
File:                     323830343a363931343a3a2f33322d3332203d3e20323730323437.roa (raw, json)
Hash identifier:          Da9I1SEr+3f+wGXjUWh39QW3KPpdRJXfBmqKNaOllhA=
Subject key identifier:   7C:36:96:62:9D:FD:36:9C:D2:49:5E:DB:8E:68:1F:3B:A1:FF:88:31
Certificate issuer:       /CN=A17E1666B400764AAB84BF876124DB6CB1EB0DC3
Certificate serial:       674C33B9F407A61AEC425CACF9FE52E38F61FFB4
Authority key identifier: A1:7E:16:66:B4:00:76:4A:AB:84:BF:87:61:24:DB:6C:B1:EB:0D:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A17E1666B400764AAB84BF876124DB6CB1EB0DC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4qKyFrWr1AeRE6FG9TKBHQhDYZtUT4wGp3iv6Npwe9n/0/323830343a363931343a3a2f33322d3332203d3e20323730323437.roa
Signing time:             Thu 15 Feb 2024 14:57:48 +0000
ROA not before:           Thu 15 Feb 2024 14:52:48 +0000
ROA not after:            Thu 13 Feb 2025 14:57:48 +0000
asID:                     270247
IP address blocks:        2804:6914::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:4c:33:b9:f4:07:a6:1a:ec:42:5c:ac:f9:fe:52:e3:8f:61:ff:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A17E1666B400764AAB84BF876124DB6CB1EB0DC3
        Validity
            Not Before: Feb 15 14:52:48 2024 GMT
            Not After : Feb 13 14:57:48 2025 GMT
        Subject: CN=7C3696629DFD369CD2495EDB8E681F3BA1FF8831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3e:f4:15:65:2c:c5:59:63:39:aa:e2:5f:aa:
                    bb:7d:3d:42:40:45:b4:04:63:fb:51:58:b6:5c:38:
                    92:ec:30:32:3b:fd:43:39:70:39:86:6c:62:92:29:
                    84:96:f6:0b:74:95:a7:4c:18:38:bd:93:83:bd:30:
                    98:2e:9d:4b:f1:1d:63:ec:8e:42:5c:1b:c6:a5:78:
                    95:78:f3:af:5f:30:dc:06:8c:b5:74:d6:66:d3:a6:
                    47:d5:66:c1:f7:3f:f4:5c:fd:6b:e3:3b:c4:a9:9b:
                    5f:8a:5e:55:b9:91:c9:fb:1d:3f:a1:0a:b3:3e:2c:
                    70:16:aa:ea:93:9d:35:b9:c5:05:c6:3d:5d:bd:e1:
                    24:f2:f3:5f:9c:c9:62:96:cb:31:52:2b:f0:7d:27:
                    64:da:e3:cb:6b:19:35:ab:8e:f0:6c:2d:fd:59:db:
                    eb:bf:22:9f:16:ee:ae:1a:33:dc:4f:0b:40:f6:b0:
                    83:54:61:2b:46:af:1b:04:75:bc:9c:de:3d:56:b4:
                    ce:f1:ff:c1:95:1c:e0:96:73:3c:0c:ad:e4:86:60:
                    5b:99:ee:fa:1a:56:5e:7d:a6:ca:e1:7e:1a:71:7a:
                    c8:48:69:9c:30:8b:b8:15:19:7b:ee:85:ae:5a:6c:
                    20:d4:bc:65:22:79:a9:31:5f:0b:d1:7e:f8:39:fc:
                    05:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:36:96:62:9D:FD:36:9C:D2:49:5E:DB:8E:68:1F:3B:A1:FF:88:31
            X509v3 Authority Key Identifier:
                keyid:A1:7E:16:66:B4:00:76:4A:AB:84:BF:87:61:24:DB:6C:B1:EB:0D:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4qKyFrWr1AeRE6FG9TKBHQhDYZtUT4wGp3iv6Npwe9n/0/A17E1666B400764AAB84BF876124DB6CB1EB0DC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A17E1666B400764AAB84BF876124DB6CB1EB0DC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4qKyFrWr1AeRE6FG9TKBHQhDYZtUT4wGp3iv6Npwe9n/0/323830343a363931343a3a2f33322d3332203d3e20323730323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6914::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:20:03:03:47:3a:92:ca:0b:39:8f:6c:07:e8:8b:f4:29:fe:
         e3:cb:8c:f3:31:18:0e:7a:a3:38:99:57:2d:47:60:8f:19:77:
         c9:ff:d2:f1:25:75:a5:5a:d0:b2:56:f9:a3:9e:43:0d:aa:ff:
         56:59:c3:f2:5e:31:61:72:7a:cb:67:b4:74:37:25:87:27:86:
         4d:0d:4b:54:94:25:a3:c5:af:35:b7:66:25:d2:a8:c6:93:2c:
         08:d8:c0:b8:d2:2d:2f:54:1f:58:b3:52:32:c3:69:9c:6e:8f:
         51:5a:c6:59:35:a1:eb:3a:70:2d:85:be:73:a4:be:4b:db:5c:
         17:62:d9:22:bd:77:90:00:b4:d2:97:bd:73:de:03:10:6d:4a:
         11:75:1d:f2:90:26:09:50:d3:dd:ed:40:90:31:b4:12:0c:97:
         f3:ec:cd:89:9d:31:1c:a2:c6:b4:0d:f5:6b:5e:98:4d:b9:49:
         d8:9b:ff:4b:d1:b8:c4:2e:33:65:ac:bb:a5:10:b5:29:21:4f:
         72:9d:84:eb:b4:d8:63:dc:08:14:7e:09:75:2c:8a:64:ae:0b:
         05:82:34:85:80:fe:05:e5:da:3c:46:47:db:cc:8e:55:3c:c3:
         28:98:cb:8a:fa:fd:55:f0:51:17:09:29:e4:8d:bf:53:9f:ab:
         52:4d:0e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----