Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/cs7MLsKNVrMsfGhBAeeDuNJmVG6gYi1T58iWyCUzDZX/2/323830343a313062343a3a2f33322d3438203d3e20323633363435.roa
File:                     323830343a313062343a3a2f33322d3438203d3e20323633363435.roa (raw, json)
Hash identifier:          mhAAKbz+sq2oiqCzKzsmK+ot+wMDQuPhCNTR/dXlev4=
Subject key identifier:   1E:65:B0:A6:39:1F:1F:E8:08:32:EF:06:C4:76:B5:FA:3D:F6:9A:14
Certificate issuer:       /CN=1984CC02A5637825AD7FAEC9DD136668D74F5C70
Certificate serial:       0945895B4B6B1C1AC097BCBAADAF3BA14631A635
Authority key identifier: 19:84:CC:02:A5:63:78:25:AD:7F:AE:C9:DD:13:66:68:D7:4F:5C:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1984CC02A5637825AD7FAEC9DD136668D74F5C70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cs7MLsKNVrMsfGhBAeeDuNJmVG6gYi1T58iWyCUzDZX/2/323830343a313062343a3a2f33322d3438203d3e20323633363435.roa
Signing time:             Mon 22 Jul 2024 18:20:39 +0000
ROA not before:           Mon 22 Jul 2024 18:15:39 +0000
ROA not after:            Mon 21 Jul 2025 18:20:39 +0000
asID:                     263645
IP address blocks:        2804:10b4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:45:89:5b:4b:6b:1c:1a:c0:97:bc:ba:ad:af:3b:a1:46:31:a6:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1984CC02A5637825AD7FAEC9DD136668D74F5C70
        Validity
            Not Before: Jul 22 18:15:39 2024 GMT
            Not After : Jul 21 18:20:39 2025 GMT
        Subject: CN=1E65B0A6391F1FE80832EF06C476B5FA3DF69A14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:66:97:76:8f:fe:04:49:cb:03:43:8c:07:41:
                    83:55:0f:f0:51:7f:a5:55:04:dd:f5:df:0d:97:46:
                    86:e5:f7:35:f4:1c:11:a1:b8:06:03:a6:41:d7:8c:
                    a9:ed:1b:42:09:df:b9:9e:f2:c8:26:e5:4f:86:cd:
                    f8:ca:50:0a:38:98:a1:61:fe:33:f5:8e:81:cf:99:
                    b9:72:53:c8:e2:57:4d:2f:66:8f:7f:ce:8e:4e:94:
                    45:a1:01:89:09:52:57:55:bd:ce:10:22:2b:7f:82:
                    9d:d6:15:ba:87:4a:a3:7d:3c:3f:77:40:a7:b0:f0:
                    78:6a:3f:6c:67:6f:2d:d1:5e:09:d1:45:40:0b:f6:
                    ba:74:54:36:98:27:d0:c2:43:7b:cf:0e:dd:54:09:
                    8b:c6:7e:c4:13:56:44:ee:9c:76:54:8d:aa:6e:65:
                    82:59:82:5f:c3:57:18:65:1c:84:ad:93:ee:24:a4:
                    a8:81:55:4a:a3:26:e9:d3:49:2a:d0:3d:bc:e5:fe:
                    41:4b:76:94:e2:61:c0:50:cf:86:89:12:2c:fe:1b:
                    c9:be:1a:70:78:95:3f:7d:0f:56:aa:a4:3b:bc:9b:
                    76:df:1c:9b:1e:75:79:ad:86:38:a0:40:76:51:e2:
                    c4:0f:ca:0b:37:1b:5f:66:52:f7:ca:e9:39:15:9d:
                    94:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:65:B0:A6:39:1F:1F:E8:08:32:EF:06:C4:76:B5:FA:3D:F6:9A:14
            X509v3 Authority Key Identifier:
                keyid:19:84:CC:02:A5:63:78:25:AD:7F:AE:C9:DD:13:66:68:D7:4F:5C:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cs7MLsKNVrMsfGhBAeeDuNJmVG6gYi1T58iWyCUzDZX/2/1984CC02A5637825AD7FAEC9DD136668D74F5C70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1984CC02A5637825AD7FAEC9DD136668D74F5C70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cs7MLsKNVrMsfGhBAeeDuNJmVG6gYi1T58iWyCUzDZX/2/323830343a313062343a3a2f33322d3438203d3e20323633363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:10b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:89:52:ce:a6:3d:df:a8:30:ee:10:2d:a2:d4:45:13:47:de:
         2e:e4:40:ec:66:2c:19:09:52:96:e9:fd:42:d2:b9:21:41:a2:
         b1:b5:79:7f:76:c0:17:eb:0f:1e:bb:04:2b:b8:51:d9:e4:34:
         d0:44:31:55:ab:6b:97:96:62:fe:e3:51:6a:74:4d:9b:c9:b9:
         57:25:e1:0b:f3:1d:4b:74:ac:7e:b9:53:11:d4:cd:ae:9e:df:
         98:00:01:da:d8:46:35:65:af:2c:f7:b7:9e:4f:67:99:01:e7:
         09:14:75:5b:ba:42:61:7d:97:f1:ba:7e:f0:db:16:8e:37:8e:
         d5:ee:67:d0:ed:34:3c:b7:9a:f7:c3:3b:1d:d0:70:30:ee:7c:
         20:bd:01:5c:16:44:6a:bb:d9:4d:06:db:c1:0e:e8:2d:c8:ff:
         48:a7:5c:a3:cb:52:f4:8d:e4:51:91:49:52:18:d9:95:fd:1c:
         fe:79:f3:fc:06:c0:97:97:23:e9:9f:6a:5c:c6:65:9e:f2:68:
         24:80:dd:25:52:17:16:09:68:29:39:3a:09:69:39:71:d1:3e:
         7a:2e:eb:c6:48:27:df:30:97:dd:fa:cc:51:5d:8e:48:b7:2d:
         93:e5:89:9f:90:04:e0:6a:b4:c1:90:f5:00:dd:86:22:cf:a0:
         16:b9:09:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----