Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/323830343a346131383a616161613a3a2f34382d3438203d3e20323637323138.roa
File:                     323830343a346131383a616161613a3a2f34382d3438203d3e20323637323138.roa (raw, json)
Hash identifier:          e/6H4NvaRXjU8Sor000tg2aOXpeNb6ouD8RY/sAiyDw=
Subject key identifier:   FB:A8:1F:C3:73:87:95:D4:A3:93:61:9B:0E:63:3F:55:AC:88:84:E7
Certificate issuer:       /CN=8A625A2C7A687327755280A68A944EED49133491
Certificate serial:       6823E1A73F6A9FDA21797C6A8AD1441C239B9B06
Authority key identifier: 8A:62:5A:2C:7A:68:73:27:75:52:80:A6:8A:94:4E:ED:49:13:34:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A625A2C7A687327755280A68A944EED49133491.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/323830343a346131383a616161613a3a2f34382d3438203d3e20323637323138.roa
Signing time:             Sun 18 Feb 2024 03:17:30 +0000
ROA not before:           Sun 18 Feb 2024 03:12:30 +0000
ROA not after:            Sun 16 Feb 2025 03:17:30 +0000
asID:                     267218
IP address blocks:        2804:4a18:aaaa::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:23:e1:a7:3f:6a:9f:da:21:79:7c:6a:8a:d1:44:1c:23:9b:9b:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A625A2C7A687327755280A68A944EED49133491
        Validity
            Not Before: Feb 18 03:12:30 2024 GMT
            Not After : Feb 16 03:17:30 2025 GMT
        Subject: CN=FBA81FC3738795D4A393619B0E633F55AC8884E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fd:6e:a6:18:d1:49:8b:94:15:9e:46:16:8f:
                    b0:c5:7c:f8:a5:15:47:ed:d9:4b:76:89:35:e7:d1:
                    db:fe:f0:f2:99:bc:7e:67:83:fc:3f:26:e7:99:63:
                    f9:60:a3:4c:52:e8:88:d5:58:89:3f:62:b5:66:0c:
                    72:76:c5:4f:90:68:10:db:ed:b6:00:8c:50:c0:5b:
                    2a:e1:5c:aa:0f:a2:cc:d2:30:f8:c3:79:5d:3e:9f:
                    53:65:63:7d:11:bf:9d:a8:78:b2:bd:5a:1c:33:a2:
                    d0:99:e0:56:49:ac:02:c2:6d:7f:4f:ba:f1:fb:a0:
                    80:da:33:af:ec:94:b9:84:80:64:05:f8:95:7c:7e:
                    ce:ba:0c:59:fb:77:ea:d4:f0:40:c9:8d:4b:ac:0f:
                    6a:b4:aa:b1:3c:6a:0c:49:5a:4d:fc:fd:00:fe:38:
                    fc:67:92:09:a2:f2:5e:37:c9:5d:a7:44:62:a1:0a:
                    dd:34:5a:d4:f4:72:4f:8a:7b:33:4a:b0:d0:c0:d8:
                    73:62:3b:08:5d:54:c1:cf:3f:39:37:c9:58:cf:d0:
                    e0:bd:4e:cf:f3:54:d7:de:4b:46:2b:01:14:5e:80:
                    a9:9a:81:4b:74:02:63:87:12:d3:ca:3a:2e:01:c6:
                    3a:e0:7e:3a:3c:d0:a6:3f:36:ac:e4:98:84:63:e5:
                    70:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A8:1F:C3:73:87:95:D4:A3:93:61:9B:0E:63:3F:55:AC:88:84:E7
            X509v3 Authority Key Identifier:
                keyid:8A:62:5A:2C:7A:68:73:27:75:52:80:A6:8A:94:4E:ED:49:13:34:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/8A625A2C7A687327755280A68A944EED49133491.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A625A2C7A687327755280A68A944EED49133491.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/323830343a346131383a616161613a3a2f34382d3438203d3e20323637323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a18:aaaa::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:a2:18:97:b6:bd:07:9a:3c:e4:4d:18:0b:ed:1d:28:d1:53:
         72:01:4e:97:99:0b:31:3e:2d:9c:97:a1:79:23:37:92:3b:d4:
         be:6d:9a:1d:77:da:0e:d5:89:70:8c:60:6f:be:a4:01:48:8f:
         80:08:f3:4e:15:a8:1a:fb:bb:3f:d7:d4:71:28:82:ef:14:f3:
         f8:f3:f7:4e:8e:b6:c3:5f:51:a9:91:03:7f:fa:c5:44:10:3a:
         38:a7:48:36:d4:c2:c0:82:b4:89:f5:a3:dd:9e:2e:98:88:e2:
         5f:ee:67:d8:c4:73:f9:45:cc:ab:01:d1:2b:b0:c4:9b:44:cc:
         2c:c7:04:3d:d4:d2:ac:20:a2:17:ee:95:30:f0:a4:01:4a:4e:
         f8:06:ba:79:e0:0e:d7:bc:ff:0a:70:b6:b5:c2:dc:31:14:b5:
         bb:58:91:db:47:e2:b5:38:5c:8f:0e:18:7f:b4:63:3b:a2:53:
         7e:43:56:1d:60:90:70:30:c8:40:e0:76:12:8c:ee:4f:5f:d2:
         d6:5b:b5:4b:0d:96:9a:fd:fa:9f:8d:2b:21:3e:de:d2:95:0a:
         31:ae:2b:97:32:0e:e2:c5:c5:58:fb:9d:b3:20:25:c3:00:6d:
         d9:50:ba:ed:57:90:01:6d:4c:d4:4c:84:fd:ab:62:64:95:f2:
         0d:e4:02:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----