Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/1/323830343a363435633a383030303a3a2f33332d3333203d3e20323639343233.roa
File:                     323830343a363435633a383030303a3a2f33332d3333203d3e20323639343233.roa (raw, json)
Hash identifier:          +Uq/RrHDT+w/EsO/bUb+Gjb6jEnzMDbUQ1ZlD9BwXcE=
Subject key identifier:   F7:CF:AD:63:0B:BD:8F:3B:2D:38:1F:CD:90:77:83:C0:88:65:BE:23
Certificate issuer:       /CN=752DF8A511E583FD16AFDE7868B695CB08BB271E
Certificate serial:       7BC0F33301CA88BDFD214BBE432C6BF9B6606D53
Authority key identifier: 75:2D:F8:A5:11:E5:83:FD:16:AF:DE:78:68:B6:95:CB:08:BB:27:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/752DF8A511E583FD16AFDE7868B695CB08BB271E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/1/323830343a363435633a383030303a3a2f33332d3333203d3e20323639343233.roa
Signing time:             Wed 13 Mar 2024 20:19:01 +0000
ROA not before:           Wed 13 Mar 2024 20:14:01 +0000
ROA not after:            Wed 12 Mar 2025 20:19:01 +0000
asID:                     269423
IP address blocks:        2804:645c:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:c0:f3:33:01:ca:88:bd:fd:21:4b:be:43:2c:6b:f9:b6:60:6d:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=752DF8A511E583FD16AFDE7868B695CB08BB271E
        Validity
            Not Before: Mar 13 20:14:01 2024 GMT
            Not After : Mar 12 20:19:01 2025 GMT
        Subject: CN=F7CFAD630BBD8F3B2D381FCD907783C08865BE23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cc:41:b6:81:e7:40:28:d1:5f:b5:e2:bc:37:
                    de:aa:f4:92:b0:d6:6c:ce:4a:cc:49:a7:63:6a:61:
                    db:fd:51:4f:8c:b2:b2:76:cd:f3:f7:40:75:b7:c5:
                    0e:7e:01:2e:9a:09:04:93:ba:6f:7c:b2:88:b1:f9:
                    16:8e:5e:4d:a1:0d:da:fc:5d:f6:77:7c:0c:87:f9:
                    64:92:98:69:f7:8d:4a:2f:7d:18:58:dc:c6:63:34:
                    0a:1f:93:d3:fd:f6:28:b1:5c:9b:7b:bc:a4:02:50:
                    7f:c3:50:06:11:5f:f5:4a:53:ff:39:4b:6e:f8:4e:
                    0f:e5:35:87:b3:e9:81:be:28:a5:30:af:b3:21:c4:
                    dd:43:72:6f:b5:66:11:b9:47:2b:9b:c8:6d:1c:a1:
                    75:9f:b8:93:af:2b:d3:33:05:95:37:86:6c:4b:75:
                    ac:f1:48:80:b6:b4:fe:c9:69:4e:33:65:ff:24:de:
                    75:05:47:7f:07:9c:de:d1:89:1c:41:67:ae:5b:fc:
                    d1:2c:af:53:8f:e1:10:ad:a7:24:21:48:d5:f2:3b:
                    86:90:45:09:6b:e3:c7:8c:b7:a0:a1:48:45:3b:db:
                    50:4d:23:ad:fd:24:32:50:12:df:56:95:b1:8d:fd:
                    2c:46:c6:29:3b:b6:8b:a1:39:3b:e0:52:a8:f6:da:
                    0a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:CF:AD:63:0B:BD:8F:3B:2D:38:1F:CD:90:77:83:C0:88:65:BE:23
            X509v3 Authority Key Identifier:
                keyid:75:2D:F8:A5:11:E5:83:FD:16:AF:DE:78:68:B6:95:CB:08:BB:27:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/1/752DF8A511E583FD16AFDE7868B695CB08BB271E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/752DF8A511E583FD16AFDE7868B695CB08BB271E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/1/323830343a363435633a383030303a3a2f33332d3333203d3e20323639343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:645c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         a9:57:6a:cd:4c:1c:e2:87:0c:35:89:cf:0e:76:7a:56:b2:79:
         55:f4:e8:4d:71:5c:e7:ab:e2:4f:ca:53:b2:1e:82:9b:6e:e8:
         8b:2e:af:eb:a4:98:4a:11:c3:fb:f7:09:66:ff:6d:35:7a:21:
         0e:09:ff:b1:34:74:ce:d7:b2:8d:8a:7f:9c:fb:69:18:12:ec:
         0f:f1:a7:2d:0a:fa:c4:0c:31:da:35:bc:09:6b:69:fb:d0:b7:
         b0:9e:bd:a9:55:7e:fa:69:c1:a7:97:a7:34:de:3f:0b:7f:91:
         a2:16:54:5c:12:22:bf:39:57:d1:1c:66:6b:e1:34:27:da:b9:
         7a:ee:76:82:dc:d5:18:48:42:6e:49:23:04:0a:0a:7c:8e:b5:
         e4:a2:fb:3b:f5:42:4b:1b:0b:48:2d:7a:9b:37:b5:e4:56:aa:
         1c:c8:25:a7:ad:dd:40:dc:0b:a4:02:f0:a8:45:22:c0:e6:d0:
         ff:65:80:7f:4d:5c:81:d5:0d:f1:01:86:ae:da:6f:f7:3f:fc:
         69:e3:31:83:9a:d4:0d:4b:38:66:74:c6:b9:92:2c:5e:33:02:
         a3:af:88:83:16:eb:bb:da:f3:a0:e9:d9:64:63:3d:98:7e:93:
         ce:69:dd:74:38:57:8c:de:9f:03:a8:a6:13:5f:ef:f8:81:e3:
         ce:a9:be:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----