Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/1/323830343a346637383a3a2f33322d3438203d3e20323638333239.roa
File:                     323830343a346637383a3a2f33322d3438203d3e20323638333239.roa (raw, json)
Hash identifier:          9Q1aq41uUOedMuCwWRSnwhWEYIujNhq5kWi0uFnE8oA=
Subject key identifier:   DE:D9:A5:C4:5E:B8:73:8C:B5:26:65:5F:4D:0E:A3:F6:96:17:23:E5
Certificate issuer:       /CN=488761C1E9B493D5AD03511976F475CA3FB5705D
Certificate serial:       41B8167DD93A5A77A33CFC3A816294C8BA3271CE
Authority key identifier: 48:87:61:C1:E9:B4:93:D5:AD:03:51:19:76:F4:75:CA:3F:B5:70:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/488761C1E9B493D5AD03511976F475CA3FB5705D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/1/323830343a346637383a3a2f33322d3438203d3e20323638333239.roa
Signing time:             Thu 04 Apr 2024 20:00:45 +0000
ROA not before:           Thu 04 Apr 2024 19:55:45 +0000
ROA not after:            Thu 03 Apr 2025 20:00:45 +0000
asID:                     268329
IP address blocks:        2804:4f78::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:b8:16:7d:d9:3a:5a:77:a3:3c:fc:3a:81:62:94:c8:ba:32:71:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=488761C1E9B493D5AD03511976F475CA3FB5705D
        Validity
            Not Before: Apr  4 19:55:45 2024 GMT
            Not After : Apr  3 20:00:45 2025 GMT
        Subject: CN=DED9A5C45EB8738CB526655F4D0EA3F6961723E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ed:78:c4:bc:f1:61:96:90:3c:c4:d5:11:c4:
                    4f:f1:f0:ac:f6:2e:cf:56:4e:2a:35:98:f6:e8:3f:
                    09:aa:d5:37:32:c1:91:34:42:f8:6a:1f:d0:c2:5e:
                    3e:8e:f9:ab:a2:7a:fe:0d:32:13:22:a5:80:10:97:
                    29:8a:05:8a:f1:76:4c:f4:07:85:bc:0e:97:ec:8e:
                    6f:66:2c:a9:d3:bb:60:cb:31:a6:ab:7f:01:03:8b:
                    11:93:ed:3a:3b:b6:08:cf:55:39:ad:5d:fc:05:61:
                    48:4e:cb:e3:a4:79:4c:55:80:92:c9:2b:4f:b2:8e:
                    c6:4d:e2:df:9a:e4:4c:0b:21:7f:44:9e:39:61:05:
                    53:10:01:a0:0a:7f:2d:05:39:f0:d3:fa:69:f8:86:
                    dc:6f:73:16:2b:2f:18:a0:52:29:c0:fb:8c:f0:dd:
                    88:d3:62:00:89:95:45:98:3b:69:f6:c0:95:6c:0d:
                    e4:86:99:65:e0:76:b5:0e:5c:c4:17:af:80:d8:66:
                    b5:07:ab:83:c0:90:37:bf:10:23:69:c9:04:83:3c:
                    3e:5f:13:3c:9e:c7:0f:c7:c0:f9:43:5c:f2:70:9d:
                    95:74:53:46:77:f7:19:e1:d6:c4:27:30:10:60:22:
                    81:a6:fa:c8:11:14:aa:68:69:b5:00:bd:6c:4f:2e:
                    df:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D9:A5:C4:5E:B8:73:8C:B5:26:65:5F:4D:0E:A3:F6:96:17:23:E5
            X509v3 Authority Key Identifier:
                keyid:48:87:61:C1:E9:B4:93:D5:AD:03:51:19:76:F4:75:CA:3F:B5:70:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/1/488761C1E9B493D5AD03511976F475CA3FB5705D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/488761C1E9B493D5AD03511976F475CA3FB5705D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/1/323830343a346637383a3a2f33322d3438203d3e20323638333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f78::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:4b:b0:b1:61:31:56:13:07:11:11:fd:20:72:04:43:3b:15:
         8e:86:5f:03:36:e8:5d:a7:bf:45:f9:52:37:22:2e:df:62:e3:
         48:b1:3d:6d:7a:9b:f7:db:f5:12:47:b7:79:b7:0a:17:d1:41:
         44:6e:6a:a6:7d:4f:34:44:7d:7d:89:23:70:45:64:0d:b2:0c:
         d5:65:e9:a6:38:d7:c7:c4:97:a2:0b:30:23:c9:8a:ef:d4:23:
         07:68:22:4e:e9:8f:88:8b:06:05:39:b4:56:ca:47:a4:88:ec:
         a7:8a:f5:2a:c4:71:be:19:fc:36:a5:e1:44:9d:36:5d:8c:92:
         9e:2b:4e:1f:a6:2f:5a:09:8c:33:b4:9d:33:b7:1d:3f:98:a0:
         81:40:2a:5e:63:b9:93:bc:d1:49:85:91:34:aa:bc:29:a1:cd:
         8d:d0:26:64:3d:bc:d0:5c:44:79:df:fd:49:06:3a:c4:3d:01:
         53:c0:bb:8c:cd:22:b6:f7:10:ea:86:ff:f1:54:17:f4:8c:43:
         70:78:b7:8a:f2:3d:93:29:52:7f:b0:da:b2:2a:69:df:00:0f:
         5e:db:e5:fe:0d:51:8b:09:d5:dd:51:d1:60:7a:b2:00:19:f3:
         ec:56:b3:b8:25:4f:20:f3:91:68:3d:d9:e6:02:3d:fb:fb:ef:
         a4:68:36:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----