Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0/323830343a336564343a373661613a3a2f34382d3438203d3e20323636363233.roa
File:                     323830343a336564343a373661613a3a2f34382d3438203d3e20323636363233.roa (raw, json)
Hash identifier:          hMwHYRErVJ23K6b3OtTobvcEIzcJum++YWP0S+AdWD4=
Subject key identifier:   87:A8:92:79:75:92:08:91:FB:62:85:E5:7B:E7:EF:6C:35:5E:E5:4A
Certificate issuer:       /CN=3D4374364DEF0A3AD31C3F4544E415B9EC6C7083
Certificate serial:       29518ED9EF9805AB64BCED8B6D95A8A4EE2C7B40
Authority key identifier: 3D:43:74:36:4D:EF:0A:3A:D3:1C:3F:45:44:E4:15:B9:EC:6C:70:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D4374364DEF0A3AD31C3F4544E415B9EC6C7083.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0/323830343a336564343a373661613a3a2f34382d3438203d3e20323636363233.roa
Signing time:             Thu 14 Mar 2024 02:19:03 +0000
ROA not before:           Thu 14 Mar 2024 02:14:03 +0000
ROA not after:            Thu 13 Mar 2025 02:19:03 +0000
asID:                     266623
IP address blocks:        2804:3ed4:76aa::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:51:8e:d9:ef:98:05:ab:64:bc:ed:8b:6d:95:a8:a4:ee:2c:7b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D4374364DEF0A3AD31C3F4544E415B9EC6C7083
        Validity
            Not Before: Mar 14 02:14:03 2024 GMT
            Not After : Mar 13 02:19:03 2025 GMT
        Subject: CN=87A8927975920891FB6285E57BE7EF6C355EE54A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f3:75:d3:f2:2c:a6:04:6d:fd:b2:9a:dd:8c:
                    10:13:bd:95:7f:55:f0:3d:59:ba:b2:36:48:1a:4e:
                    02:1b:5b:4b:2b:7c:e7:3b:cc:6f:64:26:cf:1e:5a:
                    92:1a:80:2f:19:4f:5a:53:88:c2:95:06:06:1e:bf:
                    e9:56:6b:54:f1:07:00:ce:ce:9b:d9:53:ab:c8:01:
                    3f:4d:25:77:1c:d2:d4:99:0b:b0:9a:a6:08:b7:29:
                    bb:5c:3d:65:d8:8d:93:f4:20:57:e8:97:bc:ae:8d:
                    47:18:10:99:41:67:60:db:79:c4:06:d0:4d:c2:9d:
                    06:20:8a:4f:af:40:d7:ad:73:b2:43:47:e7:95:a5:
                    8f:c9:23:ec:37:9b:16:08:79:6f:25:1a:e0:bc:bf:
                    f6:a0:00:1f:93:ec:91:27:8f:21:7f:0e:c1:08:cf:
                    e9:1a:d6:98:2e:e0:78:72:de:b8:f8:7b:93:58:60:
                    90:9c:24:1c:80:2b:90:aa:aa:79:a8:cd:bf:1b:8d:
                    1d:1d:8f:0d:7f:8d:4e:2b:33:41:f9:9f:e6:b4:2c:
                    6d:86:50:a2:c0:e2:90:00:88:02:3f:f8:2f:ef:26:
                    c9:06:e6:fe:ef:8a:75:1a:02:9a:53:bf:0e:72:23:
                    5b:aa:7a:36:d6:3a:c2:93:7c:f4:cd:fe:a9:23:a4:
                    6d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A8:92:79:75:92:08:91:FB:62:85:E5:7B:E7:EF:6C:35:5E:E5:4A
            X509v3 Authority Key Identifier:
                keyid:3D:43:74:36:4D:EF:0A:3A:D3:1C:3F:45:44:E4:15:B9:EC:6C:70:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0/3D4374364DEF0A3AD31C3F4544E415B9EC6C7083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D4374364DEF0A3AD31C3F4544E415B9EC6C7083.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0/323830343a336564343a373661613a3a2f34382d3438203d3e20323636363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ed4:76aa::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:81:e5:cd:c2:09:03:16:60:c9:53:d6:b8:2e:79:f3:b9:8b:
         39:b7:cf:af:fb:09:e8:22:6a:ef:0c:ba:87:db:98:21:d2:42:
         eb:cb:c5:3d:f5:55:10:95:cc:9a:3a:77:33:fc:85:43:d9:68:
         53:55:74:64:c2:18:c5:39:25:ee:bd:88:f2:b8:3e:a8:5f:cd:
         d4:e0:9d:78:56:c5:c7:83:02:74:f3:4a:56:9d:0d:f2:3d:19:
         2c:67:af:b3:84:33:e0:aa:df:41:25:98:a8:7e:1a:f2:ac:ca:
         12:62:2a:bc:36:9d:67:27:ab:37:74:89:07:15:14:1c:b9:14:
         d5:41:b5:04:ee:ab:0c:1f:64:ff:99:92:b7:ab:4f:a0:60:d2:
         94:0c:a8:2f:21:b2:1a:df:30:d3:fd:88:2f:2f:a2:e4:e2:17:
         82:44:53:5e:78:21:1a:09:41:35:15:09:f7:34:c9:8c:f5:e9:
         19:c5:ae:ec:a9:2f:f1:aa:67:2b:01:43:46:51:53:d3:65:3e:
         9c:c5:f6:24:f2:58:dc:e4:4b:eb:f1:90:bd:9b:82:ab:7b:44:
         50:dd:08:e5:26:03:5f:9a:d6:44:4f:34:8a:d7:2b:3c:38:41:
         bb:46:5c:3e:53:4b:09:16:f9:15:2a:7b:92:0c:29:9b:48:60:
         68:a0:c4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----