Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/323830343a3632633a3a2f33322d3332203d3e20323632353639.roa
File:                     323830343a3632633a3a2f33322d3332203d3e20323632353639.roa (raw, json)
Hash identifier:          qutFhIzA/OwZPpd99WnqfpW13CdgdARjvyBGsVRp5ME=
Subject key identifier:   D5:0F:07:81:CE:9B:9E:47:96:84:A4:74:2D:44:52:7F:80:91:03:B4
Certificate issuer:       /CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
Certificate serial:       47AEB0DAC5A35627EC1182000CAD042A3BB6BD57
Authority key identifier: 46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/323830343a3632633a3a2f33322d3332203d3e20323632353639.roa
Signing time:             Sat 30 Mar 2024 01:01:39 +0000
ROA not before:           Sat 30 Mar 2024 00:56:39 +0000
ROA not after:            Sat 29 Mar 2025 01:01:39 +0000
asID:                     262569
IP address blocks:        2804:62c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:ae:b0:da:c5:a3:56:27:ec:11:82:00:0c:ad:04:2a:3b:b6:bd:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
        Validity
            Not Before: Mar 30 00:56:39 2024 GMT
            Not After : Mar 29 01:01:39 2025 GMT
        Subject: CN=D50F0781CE9B9E479684A4742D44527F809103B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ce:95:96:c9:44:c2:e3:8e:8f:c3:93:c5:38:
                    04:f6:7b:13:b7:e8:5a:0c:e3:1e:af:3c:22:db:ef:
                    51:ba:83:02:65:8f:f4:ab:12:6d:e6:e8:42:66:d8:
                    11:50:79:eb:a2:c0:26:ac:ac:d5:40:ba:11:d7:ca:
                    9b:b3:eb:43:77:4d:56:af:38:dd:3e:9d:19:77:21:
                    20:f8:07:bb:a8:11:3e:f1:11:47:22:a6:26:c6:10:
                    fc:04:6f:36:3e:68:ba:48:0f:11:6e:f3:0f:03:3b:
                    d0:53:48:ed:cf:d2:84:b2:8e:5d:c3:09:63:cc:09:
                    9c:0e:9f:1a:20:03:a0:04:85:91:dc:05:cc:c4:41:
                    19:9c:91:89:bf:28:f0:00:87:14:21:97:c7:b7:df:
                    5c:8b:8c:06:01:a1:a8:f5:39:29:46:85:26:0f:cb:
                    36:78:e2:94:dc:38:78:8d:52:5f:55:a2:12:35:4c:
                    b0:03:2e:65:a9:79:09:df:cf:d6:20:d9:e4:24:d1:
                    0f:34:7a:53:0b:41:14:dd:bd:1f:fa:67:37:13:bf:
                    48:9c:23:c2:b2:ff:76:0d:bb:3b:e9:37:da:65:45:
                    62:6f:7a:51:6a:05:2f:eb:96:2b:f5:a0:ba:d3:dd:
                    6c:63:7c:56:74:f9:ef:62:81:10:66:b2:d0:13:39:
                    8e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:0F:07:81:CE:9B:9E:47:96:84:A4:74:2D:44:52:7F:80:91:03:B4
            X509v3 Authority Key Identifier:
                keyid:46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/323830343a3632633a3a2f33322d3332203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:62c::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:b7:95:7b:79:07:36:7d:03:b7:c0:f1:83:5d:07:34:72:be:
         34:2d:ee:c4:89:5b:2c:7f:29:1c:ff:bb:ab:e3:a3:36:be:34:
         2b:42:cb:47:56:58:12:46:f8:b7:00:63:48:72:b3:78:82:df:
         08:86:62:e1:7c:59:0a:1d:fe:93:21:44:1d:69:1b:6b:69:4c:
         12:90:58:2c:35:d6:b9:7b:b8:2f:e3:7c:9c:21:fb:6d:64:5b:
         45:0d:32:c8:76:96:3f:e9:59:97:d3:72:fb:04:9b:aa:b3:64:
         74:5a:d4:d7:30:d1:0d:93:52:0f:72:6e:76:48:24:c1:f2:e4:
         4c:b1:de:f0:d7:4e:51:08:f2:65:21:78:5e:83:cd:93:d1:e9:
         34:8e:66:8c:92:68:8c:9e:03:3d:45:96:2c:42:5a:0f:7b:bf:
         4a:03:e1:47:f8:24:6a:4a:c4:23:a6:33:c4:89:b3:3f:4b:3a:
         fb:e3:ae:2f:d6:f9:56:c8:c5:df:3f:d0:3a:43:e5:9f:d1:87:
         34:78:13:91:b7:b1:f0:9a:69:4f:ca:fb:c1:13:80:89:54:82:
         7c:a1:54:fd:a2:6c:4c:66:2d:1c:b2:87:d9:8b:ad:8c:64:b4:
         9f:1e:cf:27:db:a8:d1:06:38:65:12:ff:41:8d:a4:e0:72:4b:
         98:a1:72:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----