Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/323830343a3838303a3130303a65643a3a2f36342d3634203d3e203236353036.roa
File:                     323830343a3838303a3130303a65643a3a2f36342d3634203d3e203236353036.roa (raw, json)
Hash identifier:          +WEZ1vwxmvMP8WAfahxFUjI1mmWnQP/41E9vVT9IlYE=
Subject key identifier:   F3:26:3C:02:FB:5A:29:E8:07:28:2C:F8:B5:DA:8E:44:F7:F4:83:E4
Certificate issuer:       /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial:       701271E7F712C8EB46BEAC37E33C740563FAC54A
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/323830343a3838303a3130303a65643a3a2f36342d3634203d3e203236353036.roa
Signing time:             Mon 14 Oct 2024 01:49:49 +0000
ROA not before:           Mon 14 Oct 2024 01:44:49 +0000
ROA not after:            Mon 13 Oct 2025 01:49:49 +0000
asID:                     26506
IP address blocks:        2804:880:100:ed::/64 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:12:71:e7:f7:12:c8:eb:46:be:ac:37:e3:3c:74:05:63:fa:c5:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
        Validity
            Not Before: Oct 14 01:44:49 2024 GMT
            Not After : Oct 13 01:49:49 2025 GMT
        Subject: CN=F3263C02FB5A29E807282CF8B5DA8E44F7F483E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:af:b3:61:0b:4e:ad:5e:cb:b7:2e:ce:fe:fb:
                    36:6a:e6:7c:0f:bf:96:0a:7b:b8:08:52:98:a5:82:
                    c6:ce:cd:90:d0:92:20:fb:36:de:cf:d7:f4:93:df:
                    2a:37:f9:07:ab:e0:10:7e:52:73:bc:01:f7:94:4a:
                    45:e0:b8:db:df:9f:00:5c:d8:89:f6:a3:ab:5f:81:
                    77:7f:4a:e8:5b:f3:8b:86:de:4b:7f:f4:f9:bf:a3:
                    fe:8c:40:44:72:ee:27:93:64:62:1e:a8:f9:51:ea:
                    9e:f3:10:06:53:c9:27:f8:f4:e5:64:c6:f2:8b:de:
                    a0:4e:42:6a:b8:4a:9c:1f:eb:56:5f:36:35:5b:8c:
                    96:ac:9c:7d:8a:2f:f0:ba:49:1d:67:93:6b:e6:f3:
                    10:b0:2c:2c:3d:e9:f9:3d:d9:7f:b3:94:61:55:f8:
                    b5:65:90:4c:3b:82:e0:47:74:dc:ea:c2:97:e2:57:
                    f4:33:30:62:0a:5d:1f:16:c3:9c:c8:75:a7:d3:7d:
                    e8:e4:8a:db:79:89:48:ce:4d:ba:01:5f:13:60:07:
                    3b:61:ad:e4:3b:3a:b8:47:92:2c:90:27:eb:58:cb:
                    42:8c:c3:0f:49:ce:4f:9a:de:f5:fd:c8:b3:0b:69:
                    08:98:28:b3:bd:e2:35:ea:c3:ff:7b:8f:10:22:bd:
                    b1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:26:3C:02:FB:5A:29:E8:07:28:2C:F8:B5:DA:8E:44:F7:F4:83:E4
            X509v3 Authority Key Identifier:
                keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/323830343a3838303a3130303a65643a3a2f36342d3634203d3e203236353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:880:100:ed::/64

    Signature Algorithm: sha256WithRSAEncryption
         2e:77:17:4b:18:89:a8:f1:54:f0:a7:00:1c:0d:6f:ba:7c:72:
         2b:21:48:11:d0:ef:35:89:07:77:ca:72:58:3f:e2:0a:e4:f8:
         76:58:67:75:cd:34:f7:72:28:8d:81:bc:ac:b8:8f:ed:8c:f1:
         bb:fa:ec:4a:09:d8:84:d4:74:53:bd:54:ee:f9:a9:0b:0f:2c:
         2e:1a:bb:7d:86:1f:ec:a5:0c:a7:94:90:3b:d9:49:70:4d:db:
         37:0b:ac:34:18:75:06:90:91:23:f1:4e:3a:16:89:60:a1:cd:
         a5:65:24:ee:93:a5:0b:d0:45:93:36:fa:54:fe:3c:df:f2:f1:
         ce:80:66:e2:51:53:b4:f3:07:e9:28:4d:02:82:c1:2e:64:2e:
         38:6f:8b:0a:58:5d:b2:7e:21:20:6f:88:55:00:e6:18:f1:53:
         74:c0:14:e8:6b:c4:c6:d3:b1:a2:46:46:70:8a:7b:63:85:53:
         42:85:e7:30:50:a4:cd:79:7f:40:eb:f9:96:05:00:2d:c7:c9:
         f3:f2:66:f9:02:dc:7a:ad:32:37:dd:8a:73:25:9f:fd:a2:53:
         2f:38:6a:5b:20:6e:3f:98:94:84:a6:52:d9:94:5a:f5:69:77:
         85:ff:7e:35:62:d9:ea:f1:1b:10:36:0a:5d:b4:97:e6:84:f6:
         f2:4c:87:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----