Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/1/323830343a363435633a3a2f33322d3332203d3e20323639343233.roa
File:                     323830343a363435633a3a2f33322d3332203d3e20323639343233.roa (raw, json)
Hash identifier:          1EVkG0Oe2b6H/HTEOzh7rPRxUvg5P8gFT5JI7QKKRCk=
Subject key identifier:   08:BC:B7:87:A5:9E:E7:52:7D:AA:3E:31:A2:90:2D:78:84:89:C6:9A
Certificate issuer:       /CN=752DF8A511E583FD16AFDE7868B695CB08BB271E
Certificate serial:       70B11AB57E1FAD2FF8F7CC26E36CF946B316B762
Authority key identifier: 75:2D:F8:A5:11:E5:83:FD:16:AF:DE:78:68:B6:95:CB:08:BB:27:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/752DF8A511E583FD16AFDE7868B695CB08BB271E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/1/323830343a363435633a3a2f33322d3332203d3e20323639343233.roa
Signing time:             Wed 13 Mar 2024 20:19:01 +0000
ROA not before:           Wed 13 Mar 2024 20:14:01 +0000
ROA not after:            Wed 12 Mar 2025 20:19:01 +0000
asID:                     269423
IP address blocks:        2804:645c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:b1:1a:b5:7e:1f:ad:2f:f8:f7:cc:26:e3:6c:f9:46:b3:16:b7:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=752DF8A511E583FD16AFDE7868B695CB08BB271E
        Validity
            Not Before: Mar 13 20:14:01 2024 GMT
            Not After : Mar 12 20:19:01 2025 GMT
        Subject: CN=08BCB787A59EE7527DAA3E31A2902D788489C69A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:13:21:f9:e6:cd:1d:5e:8f:30:97:dd:b8:04:
                    05:d4:43:8a:ed:d4:c1:96:48:ce:41:44:30:b0:44:
                    70:6e:cf:74:c0:f2:7d:01:bd:c3:8c:b4:33:fc:a2:
                    29:5c:71:84:02:6c:01:e3:08:e1:81:07:51:e8:b7:
                    57:1b:b1:c7:81:b1:20:44:b7:63:0f:e1:7d:4e:32:
                    3a:4d:cd:da:11:be:71:9c:38:79:4c:57:37:64:60:
                    46:16:10:a0:ef:85:dd:72:09:c5:55:da:ee:bc:bb:
                    85:14:22:29:ae:93:0b:5a:10:64:a0:a0:bd:34:41:
                    66:16:eb:9d:b0:17:a9:19:e4:14:da:49:96:f1:46:
                    b4:28:7f:30:6f:af:59:0c:c6:6f:80:f1:18:9f:db:
                    77:e9:9e:df:01:65:7e:be:8b:16:b1:67:52:15:33:
                    ab:c3:57:02:54:05:17:d0:94:c6:9a:50:9e:7e:21:
                    76:f8:bc:9a:54:bd:20:36:31:03:e8:4b:2f:05:60:
                    86:b7:6d:52:f4:17:ba:87:ab:92:33:eb:7d:26:96:
                    75:ef:d7:df:39:36:60:2d:41:32:75:16:17:49:bf:
                    d1:70:22:d2:56:97:77:06:c4:83:94:d9:61:70:90:
                    33:d7:8b:03:a7:c5:5e:f6:3e:09:86:54:3b:52:e0:
                    7a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:BC:B7:87:A5:9E:E7:52:7D:AA:3E:31:A2:90:2D:78:84:89:C6:9A
            X509v3 Authority Key Identifier:
                keyid:75:2D:F8:A5:11:E5:83:FD:16:AF:DE:78:68:B6:95:CB:08:BB:27:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/1/752DF8A511E583FD16AFDE7868B695CB08BB271E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/752DF8A511E583FD16AFDE7868B695CB08BB271E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/1/323830343a363435633a3a2f33322d3332203d3e20323639343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:645c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b8:5b:9e:77:0f:c7:ce:fa:0a:5c:76:80:03:79:3d:db:88:5c:
         d0:8f:f1:d6:49:c6:92:4f:57:83:1f:dc:13:12:83:ad:bb:6e:
         80:60:88:e1:5a:37:51:a2:32:59:77:0e:34:88:d6:e1:7d:b2:
         5e:b2:6b:5a:79:fa:ff:30:84:03:5a:2a:fd:ff:78:0c:1f:9d:
         82:00:fa:f8:84:28:2a:68:ef:93:3c:e0:3e:b6:15:60:61:56:
         29:16:ee:0e:e5:25:6a:8e:b1:46:09:c9:35:14:ad:94:40:c7:
         ac:ab:6f:a9:db:fe:05:7a:21:c5:18:7f:dc:ca:4b:aa:9d:40:
         ab:ee:2c:ac:40:0a:c7:58:e3:d9:8b:d8:f1:ce:a7:b4:be:e7:
         5d:bc:dd:4d:37:60:0f:e2:ac:38:4b:83:28:a6:ed:81:fd:47:
         6f:51:27:fa:c1:e0:8a:21:55:e2:a8:f6:f5:f0:7f:37:00:2b:
         30:01:81:2c:4f:9e:0a:6a:b5:1d:59:ea:49:e9:a9:1b:e1:5f:
         90:27:7e:4b:ef:75:b0:05:ca:05:40:33:a0:cb:8a:8b:ba:4d:
         2b:9c:47:cb:f6:aa:71:47:40:4e:9d:e3:ce:6e:a9:d1:f2:de:
         8b:b9:ea:30:51:7f:5d:d4:a6:f5:46:fa:67:bb:51:fd:e1:51:
         a8:2a:27:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----