Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a383a393a3a2f36342d3634203d3e203238323032.roa
File:                     323830343a3837633a383a393a3a2f36342d3634203d3e203238323032.roa (raw, json)
Hash identifier:          lD2Fba3ffc2KSZuURrtV8K8Oh4QGa802elnY222fSUE=
Subject key identifier:   2E:CE:66:7D:AF:5B:C5:53:48:73:F6:A8:2C:F8:7F:65:2A:5F:DB:D1
Certificate issuer:       /CN=BE867134DD576AA44DA77A1C5D714DB384FEC083
Certificate serial:       2A173D353BC816A4157408570E571AACDA885821
Authority key identifier: BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a383a393a3a2f36342d3634203d3e203238323032.roa
Signing time:             Mon 13 Jan 2025 13:32:19 +0000
ROA not before:           Mon 13 Jan 2025 13:27:19 +0000
ROA not after:            Mon 12 Jan 2026 13:32:19 +0000
asID:                     28202
IP address blocks:        2804:87c:8:9::/64 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:17:3d:35:3b:c8:16:a4:15:74:08:57:0e:57:1a:ac:da:88:58:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE867134DD576AA44DA77A1C5D714DB384FEC083
        Validity
            Not Before: Jan 13 13:27:19 2025 GMT
            Not After : Jan 12 13:32:19 2026 GMT
        Subject: CN=2ECE667DAF5BC5534873F6A82CF87F652A5FDBD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f4:a8:cb:cf:bc:77:c1:bd:c8:46:ec:fd:38:
                    25:81:67:cd:d1:e2:f8:86:cd:c0:25:7c:c8:b7:92:
                    dc:33:3d:44:1f:a0:06:a2:b0:9b:24:e5:2f:69:23:
                    d9:b3:92:c7:5f:ef:68:d1:31:0a:85:f8:c1:91:63:
                    d8:11:56:9a:91:f5:38:96:97:35:28:40:34:34:39:
                    f6:16:4f:2a:c7:98:a9:11:84:6d:dc:b2:4a:1e:b8:
                    34:1d:ae:d2:92:3e:d0:19:3c:1c:67:4d:7f:47:a8:
                    cb:da:0a:7a:a1:b3:ad:af:73:7b:d5:62:8e:84:71:
                    a1:a9:f3:60:9a:4d:13:bd:4e:28:bf:13:2d:5b:81:
                    51:44:b7:6a:24:a8:2c:da:8f:19:e4:e1:63:b6:59:
                    3d:c4:88:d3:27:7c:7d:e5:a2:79:90:4f:8a:cd:32:
                    9c:fb:a6:c7:41:9e:f4:7d:12:57:dc:bf:35:38:0e:
                    64:a6:96:92:01:14:63:40:d8:e1:89:db:33:19:c0:
                    cc:74:01:67:6a:d0:79:b4:8d:01:7c:32:60:8f:0c:
                    11:6e:1c:d8:1f:07:bc:eb:2a:84:a4:08:c7:e0:24:
                    34:d3:c5:17:8b:66:c1:f8:c3:f8:6f:76:ca:af:92:
                    f4:76:69:f4:62:89:ad:84:9a:24:47:9f:d3:ec:d4:
                    6c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:CE:66:7D:AF:5B:C5:53:48:73:F6:A8:2C:F8:7F:65:2A:5F:DB:D1
            X509v3 Authority Key Identifier:
                keyid:BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/BE867134DD576AA44DA77A1C5D714DB384FEC083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a383a393a3a2f36342d3634203d3e203238323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:87c:8:9::/64

    Signature Algorithm: sha256WithRSAEncryption
         56:02:15:07:56:78:18:e8:41:3a:81:8c:83:36:6f:8d:96:a8:
         72:24:ab:ac:82:e0:6b:6a:e2:92:77:7b:b9:cb:60:dc:b1:4b:
         4d:df:cb:49:56:11:b7:9e:27:30:0e:06:79:db:91:ba:cb:2d:
         6d:38:02:6f:00:9c:c6:ec:99:a1:b0:cc:2b:e6:34:26:5a:75:
         3a:67:ea:1b:2f:3b:98:15:d7:ba:f7:8c:63:70:1d:5c:8c:7b:
         8c:f9:3a:a5:5a:2c:16:70:4c:0b:62:4c:4c:4f:e1:3a:8e:d4:
         86:48:4a:51:27:8d:18:9e:5d:40:d1:ff:59:2f:2b:a7:f0:da:
         2e:4d:54:a7:58:2c:bf:c3:67:d1:aa:4f:ae:8c:d5:ab:1e:f9:
         ce:62:85:9a:81:31:3c:38:3d:f0:8e:76:e5:11:ca:8c:6e:4c:
         5b:f3:4f:8f:7f:bd:c4:27:52:97:c7:d3:d2:18:73:b6:a3:6e:
         06:30:89:cf:66:58:4f:f3:10:24:25:fc:7d:48:8a:c7:71:2c:
         bb:97:28:0e:7a:2d:a5:99:3a:26:9d:73:37:0c:3d:0c:19:9f:
         d4:f7:fd:50:34:b1:14:4d:f6:d4:63:b8:59:8f:09:44:78:2f:
         cb:d6:44:21:69:6c:46:1f:a8:bc:a9:30:17:2c:b6:d7:43:c7:
         8e:cf:eb:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----