Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a323166343a3a2f33322d3332203d3e20323632373733.roa
File:                     323830343a323166343a3a2f33322d3332203d3e20323632373733.roa (raw, json)
Hash identifier:          paXX9kTtvOg+b+XGcXu2owqKGRqPqe8xEpEgvAaHfkk=
Subject key identifier:   D4:4D:7C:CA:E1:5C:A9:69:67:83:5F:E2:1F:49:D4:33:D3:76:D6:16
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       28C4E377984763D22CD707F4E7F90F315EC946FF
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a323166343a3a2f33322d3332203d3e20323632373733.roa
Signing time:             Tue 19 Mar 2024 21:53:45 +0000
ROA not before:           Tue 19 Mar 2024 21:48:45 +0000
ROA not after:            Tue 18 Mar 2025 21:53:45 +0000
asID:                     262773
IP address blocks:        2804:21f4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:c4:e3:77:98:47:63:d2:2c:d7:07:f4:e7:f9:0f:31:5e:c9:46:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Mar 19 21:48:45 2024 GMT
            Not After : Mar 18 21:53:45 2025 GMT
        Subject: CN=D44D7CCAE15CA96967835FE21F49D433D376D616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:77:ba:8f:4f:60:f7:47:89:de:9f:0c:94:4f:
                    b9:12:6d:26:77:a3:86:68:5e:c4:33:61:06:70:4d:
                    b5:81:83:64:db:93:98:41:ed:de:43:f9:3b:bd:68:
                    8e:9d:bc:92:25:89:4f:32:8b:d8:24:b2:28:57:52:
                    4f:54:20:2d:2a:44:08:f4:5f:6d:bf:f9:55:bc:83:
                    99:fe:c9:49:bd:f2:26:5b:58:13:e2:a3:23:92:16:
                    7b:b1:a9:8e:a2:9a:dc:14:e0:73:84:34:83:44:f6:
                    6e:4e:a8:43:f1:7b:1d:cc:00:67:de:a5:47:4a:61:
                    b4:0e:9f:95:0e:7f:b2:4d:aa:89:6b:83:52:2e:82:
                    5c:66:76:65:38:74:01:1d:60:06:84:0d:ab:40:25:
                    a7:e6:2b:a7:9d:8b:98:3e:fc:f2:8a:23:ce:d1:8f:
                    3c:9c:5c:f7:27:0b:a2:5d:2b:55:89:3c:11:ec:fb:
                    b3:86:70:26:03:b7:ff:aa:27:f6:b0:c2:07:77:4c:
                    62:ae:fd:3b:58:89:a2:7b:09:29:8b:74:74:dc:ec:
                    6d:fb:5c:57:e9:d7:3d:58:53:31:25:8f:95:cd:06:
                    84:46:e8:3d:59:43:70:6b:e0:46:59:6f:34:6c:b1:
                    6d:42:fe:74:71:dd:8f:95:1b:ad:fd:69:ca:21:bf:
                    c9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:4D:7C:CA:E1:5C:A9:69:67:83:5F:E2:1F:49:D4:33:D3:76:D6:16
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a323166343a3a2f33322d3332203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:21f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:43:ad:41:05:c2:c0:47:ca:ea:d9:dd:0b:91:45:dc:b9:02:
         9b:2c:01:c6:ab:97:6d:5b:7e:38:7e:20:82:12:04:cd:72:cf:
         a8:26:c0:0a:78:98:69:df:3f:ab:05:4c:16:3a:10:3f:af:42:
         6b:8b:7d:aa:c3:30:8d:7f:ab:3f:3a:3a:1b:38:a7:a0:52:94:
         6f:9c:c2:b6:11:7e:b1:76:39:65:48:42:e5:0d:dc:18:06:4c:
         d9:5a:c7:90:93:75:ba:5e:95:23:7e:53:2c:d3:fd:d6:6e:47:
         f7:a6:bc:23:7f:a1:bc:b9:0f:f4:bb:49:ca:17:a8:85:9d:9f:
         b8:87:bb:de:38:c0:77:ef:6a:eb:f3:57:ff:3a:03:c8:20:0b:
         d2:2c:50:dd:ed:25:37:e0:25:5a:2a:27:ab:80:a3:63:a7:7d:
         a8:67:53:6c:05:d4:a9:12:d5:a6:1f:33:c9:e2:cc:67:4a:ed:
         43:4c:2b:51:75:0d:08:c5:4d:4a:7d:2c:b8:3d:d5:cf:fc:6a:
         46:99:80:fc:a2:39:79:24:30:78:47:3b:ca:a6:49:d3:63:55:
         e5:91:c9:e6:e0:6b:cd:ba:db:ef:fc:ad:1b:b4:82:af:d0:1e:
         f9:b8:71:de:ae:9a:d1:4b:a8:d7:2a:9b:54:d2:cd:e8:4d:d7:
         64:93:85:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----