Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/2/323830343a326437303a3a2f33322d3332203d3e20323635323832.roa
File:                     323830343a326437303a3a2f33322d3332203d3e20323635323832.roa (raw, json)
Hash identifier:          oVSy02Y/fAYxvOYMRUH3yIvDfcvze2Mfc2eZhxxUsmg=
Subject key identifier:   6B:A9:C6:6E:A6:AA:36:92:10:98:1B:16:F3:C5:31:BC:29:BD:AE:18
Certificate issuer:       /CN=07F1FCBDB492E328D675670C0CD8C133C236145B
Certificate serial:       0422BB7CE9A36D45EE057364425016C9727ADFE7
Authority key identifier: 07:F1:FC:BD:B4:92:E3:28:D6:75:67:0C:0C:D8:C1:33:C2:36:14:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07F1FCBDB492E328D675670C0CD8C133C236145B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/2/323830343a326437303a3a2f33322d3332203d3e20323635323832.roa
Signing time:             Fri 07 Jun 2024 20:54:07 +0000
ROA not before:           Fri 07 Jun 2024 20:49:07 +0000
ROA not after:            Fri 06 Jun 2025 20:54:07 +0000
asID:                     265282
IP address blocks:        2804:2d70::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:22:bb:7c:e9:a3:6d:45:ee:05:73:64:42:50:16:c9:72:7a:df:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07F1FCBDB492E328D675670C0CD8C133C236145B
        Validity
            Not Before: Jun  7 20:49:07 2024 GMT
            Not After : Jun  6 20:54:07 2025 GMT
        Subject: CN=6BA9C66EA6AA369210981B16F3C531BC29BDAE18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:88:af:75:8d:50:a6:69:f5:87:61:e5:2d:9d:
                    35:cf:f2:59:f2:c3:08:47:0a:5c:f7:a7:b2:48:ff:
                    20:41:f4:69:98:2a:2a:1f:51:db:a9:47:17:9b:7e:
                    76:18:9a:cb:f2:cb:a1:a7:a4:2e:98:b0:04:b0:69:
                    a6:e5:c8:94:fb:2c:27:07:86:33:a6:2f:89:6e:16:
                    f3:e1:48:75:e3:4f:8c:c1:45:5c:5b:5e:4a:97:e8:
                    f8:70:06:d6:ca:54:8a:d0:c6:86:4e:9b:b7:cf:2b:
                    ec:90:20:98:6c:58:21:74:ff:25:ec:57:4e:41:0a:
                    b2:6d:78:0c:7b:90:e9:0d:42:2e:4d:df:9d:85:f8:
                    b2:05:75:a7:c8:40:f4:85:be:58:eb:d7:b0:57:48:
                    33:95:18:f7:54:ea:e2:f2:dc:44:2b:7c:23:c4:56:
                    be:e0:c2:91:68:88:30:92:ce:2e:33:41:e5:69:31:
                    44:b5:00:79:a4:86:b4:1f:3a:84:11:7d:6f:94:8c:
                    0c:ed:10:39:f8:69:8f:cd:45:93:94:7b:73:9d:0f:
                    af:37:d2:b4:bb:e1:00:73:35:5e:5d:a2:fb:ea:7c:
                    ae:ff:c4:5c:cd:1c:c9:6c:89:d6:37:06:b3:b7:41:
                    fd:45:f9:85:e8:85:f9:6e:2b:b0:ec:f4:56:88:af:
                    1e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A9:C6:6E:A6:AA:36:92:10:98:1B:16:F3:C5:31:BC:29:BD:AE:18
            X509v3 Authority Key Identifier:
                keyid:07:F1:FC:BD:B4:92:E3:28:D6:75:67:0C:0C:D8:C1:33:C2:36:14:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/2/07F1FCBDB492E328D675670C0CD8C133C236145B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07F1FCBDB492E328D675670C0CD8C133C236145B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/2/323830343a326437303a3a2f33322d3332203d3e20323635323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d70::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:1a:1c:0f:ab:6c:98:9e:a2:56:64:7c:bf:58:3c:24:c4:6e:
         0b:70:36:8a:53:1c:71:66:fb:da:84:52:17:70:7c:85:dd:1b:
         63:19:e8:70:6f:26:b1:96:f5:32:7f:51:52:88:ea:ff:49:e6:
         06:b7:71:e2:25:b1:4d:14:a3:3f:10:3a:e9:66:49:b7:28:1e:
         c1:3a:07:01:b6:a5:07:2c:79:8c:08:af:2e:d2:3f:c6:bb:c1:
         3b:dd:3a:26:a9:1e:8e:c1:bc:e4:71:f7:3c:36:26:58:9d:8e:
         b0:7a:ee:a4:a0:cd:ab:71:ec:02:5d:9a:27:02:c1:0f:6f:e3:
         57:af:17:92:26:66:45:55:c1:80:5d:c2:f7:60:4d:53:5a:5a:
         5f:ee:0b:92:c6:15:12:6e:9e:21:ee:68:43:dc:34:b9:92:ea:
         37:09:7a:eb:70:0e:b2:d0:51:ca:88:6f:74:c0:86:4a:56:3a:
         26:87:66:22:6c:1e:19:ef:05:ec:6f:9e:85:ee:8e:49:39:4c:
         a7:0b:52:9e:00:3a:34:68:eb:57:a3:bb:a3:61:5d:a7:fd:ae:
         b9:15:a9:17:44:ac:75:6d:27:13:ae:33:e3:da:b4:ec:f2:32:
         72:e3:19:8e:d6:aa:12:c9:57:bb:86:1f:99:12:d9:81:f5:7d:
         f1:7f:d6:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----