Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Cdjj9SkmYUVduuLSdf9QnSWpNdam3tBW6epb3Li2zhf/0/323830343a326231633a3a2f33322d3438203d3e20323635313335.roa
File:                     323830343a326231633a3a2f33322d3438203d3e20323635313335.roa (raw, json)
Hash identifier:          CeI5NPRPz/l5J3+OW6qWiDCPCxN5qYqpH9B/QosECPs=
Subject key identifier:   00:C4:59:E0:07:66:73:DA:AF:A3:38:A0:79:62:08:0B:1E:67:86:F5
Certificate issuer:       /CN=0C80C02362560C5A5AA885E96436A708704E7CB8
Certificate serial:       23D9D751EECB8DA4FDE4F6921B2358A16CB907AE
Authority key identifier: 0C:80:C0:23:62:56:0C:5A:5A:A8:85:E9:64:36:A7:08:70:4E:7C:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C80C02362560C5A5AA885E96436A708704E7CB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Cdjj9SkmYUVduuLSdf9QnSWpNdam3tBW6epb3Li2zhf/0/323830343a326231633a3a2f33322d3438203d3e20323635313335.roa
Signing time:             Tue 12 Mar 2024 13:13:23 +0000
ROA not before:           Tue 12 Mar 2024 13:08:23 +0000
ROA not after:            Tue 11 Mar 2025 13:13:23 +0000
asID:                     265135
IP address blocks:        2804:2b1c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:d9:d7:51:ee:cb:8d:a4:fd:e4:f6:92:1b:23:58:a1:6c:b9:07:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C80C02362560C5A5AA885E96436A708704E7CB8
        Validity
            Not Before: Mar 12 13:08:23 2024 GMT
            Not After : Mar 11 13:13:23 2025 GMT
        Subject: CN=00C459E0076673DAAFA338A07962080B1E6786F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e6:f7:11:52:d5:ee:a7:61:a7:88:17:85:58:
                    a7:60:08:8e:d6:fc:fa:3b:63:cf:e6:06:51:11:b8:
                    fc:0a:cc:db:91:e7:4e:31:2f:44:93:c2:66:0b:ce:
                    0f:00:c5:b3:cc:2b:10:c7:9b:dd:0e:41:6d:7a:b9:
                    a6:10:33:25:40:67:90:b4:ca:3f:02:4c:ca:44:57:
                    db:31:88:b4:d6:3b:6b:f7:1b:54:b2:d0:bc:bc:c9:
                    4a:77:7e:0d:1b:2f:64:fe:f1:06:71:82:dc:dd:83:
                    43:17:33:df:20:1d:76:fa:45:d6:68:f7:0c:31:89:
                    bf:9d:52:6a:0e:aa:c4:ef:82:8e:dc:87:4a:86:96:
                    cb:b1:91:5f:0f:34:3b:95:0a:40:83:be:6f:08:6e:
                    9c:0e:8a:f5:e5:ba:a2:d2:ac:1b:bf:32:8f:1f:26:
                    c4:36:5d:39:e9:da:a7:9d:73:0a:89:b3:15:b1:a6:
                    22:46:d9:f2:93:3c:41:c1:1a:48:00:b1:bb:fe:9e:
                    5a:c2:57:90:f6:be:9f:50:d6:33:45:65:51:8d:38:
                    b0:35:58:ec:7a:e2:50:81:69:90:d1:fa:e4:d9:4a:
                    60:04:75:51:1b:4b:af:6f:c3:69:06:65:d4:f5:c6:
                    f9:c4:7d:d2:f6:e2:d1:ed:f4:47:56:84:b2:c2:9e:
                    fc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C4:59:E0:07:66:73:DA:AF:A3:38:A0:79:62:08:0B:1E:67:86:F5
            X509v3 Authority Key Identifier:
                keyid:0C:80:C0:23:62:56:0C:5A:5A:A8:85:E9:64:36:A7:08:70:4E:7C:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Cdjj9SkmYUVduuLSdf9QnSWpNdam3tBW6epb3Li2zhf/0/0C80C02362560C5A5AA885E96436A708704E7CB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C80C02362560C5A5AA885E96436A708704E7CB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Cdjj9SkmYUVduuLSdf9QnSWpNdam3tBW6epb3Li2zhf/0/323830343a326231633a3a2f33322d3438203d3e20323635313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b1c::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:66:96:5c:e1:b6:68:1a:c2:36:e4:d8:13:f4:f7:a8:fd:c1:
         2c:2c:e0:0b:8e:2a:ac:25:30:96:cd:62:27:97:68:42:d8:49:
         fb:5a:d0:9a:23:05:1d:a3:22:33:f1:4b:9f:d9:4b:09:6e:6a:
         27:65:82:ee:de:11:b5:82:05:eb:df:ae:38:2f:46:e1:46:e3:
         ca:ff:d0:12:ba:b9:98:52:66:eb:86:3e:4e:bc:d0:d6:79:0d:
         9e:15:60:83:a9:2c:01:59:ba:32:1f:ed:81:1c:94:f2:4e:a0:
         84:57:2d:87:e3:b6:b0:e3:ae:7e:fc:6b:6b:f6:62:36:2f:97:
         a5:93:89:ab:c2:1d:b9:58:b2:36:9e:fb:e8:c4:db:b2:26:6e:
         e7:d3:3b:7f:83:89:07:d2:ad:57:7b:51:09:05:51:a9:42:e1:
         50:cf:67:7e:21:fb:b1:0d:e6:57:03:47:73:73:28:ea:23:82:
         0b:c8:ef:96:20:a9:c3:e8:1d:ee:b6:12:57:39:51:bb:61:9d:
         e4:82:56:64:20:49:32:78:19:d6:07:6f:f9:c6:92:56:4f:51:
         5e:49:de:04:92:76:5b:a1:d3:17:34:f6:82:c0:43:e5:f9:30:
         ea:dc:11:fc:8e:ba:11:28:68:1a:e4:2b:91:36:cf:a2:9f:d0:
         f8:3e:b4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----