Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDN8FMo6BVUyHYrBriie665rpbonCaBkYafBCtvWNrUu/1/323830343a353364303a3a2f33322d3438203d3e20323638363038.roa
File:                     323830343a353364303a3a2f33322d3438203d3e20323638363038.roa (raw, json)
Hash identifier:          q+jqmGpAE+cyyd46roVeIuDMDad4Cue9HPoq4d/LspI=
Subject key identifier:   CD:76:9C:3E:D9:3F:E6:2E:DB:E8:25:84:F0:05:E1:D0:7F:79:BB:7C
Certificate issuer:       /CN=AD55FF0938210CC75C2967BEE6EB4FE12D059582
Certificate serial:       7E8DB97C077F687DE56494FEAF7D54AA663900F0
Authority key identifier: AD:55:FF:09:38:21:0C:C7:5C:29:67:BE:E6:EB:4F:E1:2D:05:95:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD55FF0938210CC75C2967BEE6EB4FE12D059582.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDN8FMo6BVUyHYrBriie665rpbonCaBkYafBCtvWNrUu/1/323830343a353364303a3a2f33322d3438203d3e20323638363038.roa
Signing time:             Mon 08 Apr 2024 19:23:10 +0000
ROA not before:           Mon 08 Apr 2024 19:18:10 +0000
ROA not after:            Mon 07 Apr 2025 19:23:10 +0000
asID:                     268608
IP address blocks:        2804:53d0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:8d:b9:7c:07:7f:68:7d:e5:64:94:fe:af:7d:54:aa:66:39:00:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD55FF0938210CC75C2967BEE6EB4FE12D059582
        Validity
            Not Before: Apr  8 19:18:10 2024 GMT
            Not After : Apr  7 19:23:10 2025 GMT
        Subject: CN=CD769C3ED93FE62EDBE82584F005E1D07F79BB7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d2:4b:0f:0e:77:25:8b:08:01:a1:a5:4b:47:
                    eb:9f:6e:e7:46:19:6d:8c:13:d4:b7:9e:44:91:8b:
                    a2:7c:35:67:3c:f5:f3:f0:a5:09:94:af:12:d1:36:
                    c3:bb:de:72:3c:bc:47:d6:be:2f:80:6e:07:73:80:
                    a7:7b:6c:b8:ff:36:74:f3:c1:a8:e9:cd:7d:f2:6f:
                    f0:e9:b1:2b:1d:95:07:bc:ee:50:90:31:ed:5b:45:
                    64:22:43:62:c2:99:5b:16:0a:31:c4:3e:5d:82:28:
                    4d:26:25:c8:24:df:c9:4a:80:26:f0:94:9b:68:94:
                    68:5b:c1:3f:8e:fe:8a:fa:ca:2d:4e:58:5a:18:92:
                    b7:14:2b:9e:53:2f:1b:19:e2:3a:4d:da:2f:2b:c8:
                    1b:c8:26:b4:e0:7b:26:09:8e:b7:62:28:b2:ab:62:
                    50:be:e9:ef:3f:97:a7:3d:47:f9:89:50:be:5e:1a:
                    ae:60:c9:5e:4f:bb:97:ce:62:53:70:f0:44:2b:e3:
                    92:41:57:e2:1d:ad:57:b1:6f:5f:85:cc:b8:9b:98:
                    a6:d9:bf:b1:b5:70:c3:aa:54:d7:11:cd:39:0c:7e:
                    ec:29:65:8b:6b:2a:db:31:f8:9b:ec:58:3e:72:75:
                    d4:6b:e0:cf:d4:d5:eb:b5:9f:40:51:d7:7d:f3:b0:
                    ff:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:76:9C:3E:D9:3F:E6:2E:DB:E8:25:84:F0:05:E1:D0:7F:79:BB:7C
            X509v3 Authority Key Identifier:
                keyid:AD:55:FF:09:38:21:0C:C7:5C:29:67:BE:E6:EB:4F:E1:2D:05:95:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDN8FMo6BVUyHYrBriie665rpbonCaBkYafBCtvWNrUu/1/AD55FF0938210CC75C2967BEE6EB4FE12D059582.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD55FF0938210CC75C2967BEE6EB4FE12D059582.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDN8FMo6BVUyHYrBriie665rpbonCaBkYafBCtvWNrUu/1/323830343a353364303a3a2f33322d3438203d3e20323638363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:53d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:64:f2:db:d4:9c:96:7e:59:d8:5c:87:7d:90:22:fb:b4:14:
         f1:67:2d:c4:08:fe:ba:b0:4c:d4:04:94:7e:4e:bd:2c:5b:12:
         fa:f3:83:41:6c:14:89:bc:fb:59:df:f1:c5:fe:c8:8a:af:f8:
         a0:33:4c:d5:7b:d9:ca:9e:ee:16:9d:33:7d:92:c1:e6:37:92:
         f3:e7:f3:e1:87:4e:6c:71:6b:1b:b5:0d:93:7c:b7:4c:c2:02:
         b5:64:a4:7b:f0:e9:e6:d9:51:40:5e:c7:f0:e7:8c:ad:d1:02:
         eb:07:1f:35:bd:81:7d:9d:86:e7:1c:16:e5:b8:cf:9f:8e:15:
         a3:2f:8c:57:b1:7e:17:f7:23:1e:6e:f6:9c:0d:ff:29:24:48:
         7d:37:4a:0b:fe:b7:5e:2f:f5:80:fb:bc:6c:0e:d2:64:f0:34:
         60:8b:58:22:46:de:38:9e:0e:4d:e9:30:67:5e:fc:a5:39:1c:
         1f:5f:f2:b2:2b:1e:b9:88:f4:da:8c:a0:33:91:dc:b1:7b:31:
         72:38:bc:fe:82:e3:2d:24:66:4c:e6:19:47:33:0c:ba:91:27:
         46:bf:a7:be:b6:7c:df:fd:b0:5b:1a:96:24:9b:10:e2:14:49:
         f9:b3:c2:32:01:a9:a9:a2:2a:d7:d7:dc:82:ce:bc:0a:e8:84:
         bf:d2:31:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----