Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/323830343a323265383a3a2f33322d3332203d3e20323634313330.roa
File:                     323830343a323265383a3a2f33322d3332203d3e20323634313330.roa (raw, json)
Hash identifier:          f3fq+g1K/j15EipHEi+1rkGN+Z/E/ARyDDLf5t1rH5E=
Subject key identifier:   C9:D4:3C:02:8D:B6:1C:C4:E0:53:6E:F3:C9:F4:D1:20:C4:67:DE:AC
Certificate issuer:       /CN=8B428992A8BAA153B36322A87BD15F596CE8F0CB
Certificate serial:       44B88AF7D6AE05C3003AFED0997ABD3B75DB6F45
Authority key identifier: 8B:42:89:92:A8:BA:A1:53:B3:63:22:A8:7B:D1:5F:59:6C:E8:F0:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B428992A8BAA153B36322A87BD15F596CE8F0CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/323830343a323265383a3a2f33322d3332203d3e20323634313330.roa
Signing time:             Wed 22 Jan 2025 12:59:57 +0000
ROA not before:           Wed 22 Jan 2025 12:54:57 +0000
ROA not after:            Wed 21 Jan 2026 12:59:57 +0000
asID:                     264130
IP address blocks:        2804:22e8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:b8:8a:f7:d6:ae:05:c3:00:3a:fe:d0:99:7a:bd:3b:75:db:6f:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B428992A8BAA153B36322A87BD15F596CE8F0CB
        Validity
            Not Before: Jan 22 12:54:57 2025 GMT
            Not After : Jan 21 12:59:57 2026 GMT
        Subject: CN=C9D43C028DB61CC4E0536EF3C9F4D120C467DEAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a0:c8:6b:62:fa:30:5a:46:0b:04:d5:4d:8a:
                    5d:cc:92:7e:d8:ad:76:a5:6d:1a:56:c6:1f:46:55:
                    32:d3:6f:75:12:5c:2e:eb:8e:91:10:3c:a6:ff:be:
                    17:e3:26:13:d4:26:12:e6:45:12:2f:6b:84:82:60:
                    96:f7:a2:17:ab:c1:7c:e1:9d:a8:da:34:20:1a:a6:
                    65:9e:94:67:fe:ed:fc:3f:13:4b:6f:e0:7d:a2:85:
                    b8:9f:3f:d0:47:9a:ab:03:18:bc:13:12:d9:f2:fb:
                    dd:d5:4f:73:67:d7:50:6a:5e:f4:01:bf:cd:9d:6c:
                    dd:ee:ea:0d:f7:df:22:c9:8e:94:fd:dd:bd:bd:5e:
                    b2:8d:f1:8d:90:ab:4c:ef:bd:e2:37:44:5c:10:3b:
                    3f:7c:1e:f4:36:1a:23:a3:b4:c5:42:70:df:cc:5a:
                    ae:05:4e:4a:0e:af:07:f3:7f:a4:53:fa:37:63:20:
                    93:e0:c0:bf:db:da:aa:b2:04:74:30:49:dc:94:c5:
                    71:80:8c:9a:d9:b3:9f:fd:9e:7a:5e:b4:ff:0a:be:
                    45:75:df:d7:5f:e6:b7:62:f6:f0:43:ec:81:ad:aa:
                    cb:74:18:76:4a:a9:45:38:ac:d1:16:8f:a2:60:2c:
                    5a:7e:da:4d:3c:9a:2e:96:36:61:39:49:af:c6:f8:
                    dd:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:D4:3C:02:8D:B6:1C:C4:E0:53:6E:F3:C9:F4:D1:20:C4:67:DE:AC
            X509v3 Authority Key Identifier:
                keyid:8B:42:89:92:A8:BA:A1:53:B3:63:22:A8:7B:D1:5F:59:6C:E8:F0:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/8B428992A8BAA153B36322A87BD15F596CE8F0CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B428992A8BAA153B36322A87BD15F596CE8F0CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/323830343a323265383a3a2f33322d3332203d3e20323634313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:22e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:54:aa:cb:2a:43:0d:cb:d9:43:4e:e7:f0:81:c5:83:61:af:
         51:f7:5c:5d:a9:d0:4e:0a:60:85:e0:d0:83:80:3c:e2:8d:d7:
         84:6c:ec:dc:38:9f:95:e8:cd:82:5c:b4:f8:ed:43:6d:ca:41:
         f3:05:d2:a3:dd:88:3c:8f:30:22:24:fc:62:ae:d8:aa:ce:d4:
         90:60:43:79:59:f9:36:03:91:3f:76:f4:74:75:37:74:fb:f2:
         3d:88:c0:e1:75:fc:a7:bd:a7:34:f7:76:2f:02:8c:93:5e:52:
         12:f5:4a:a7:b7:29:34:5e:6a:11:23:8b:91:c9:9b:44:53:70:
         d9:79:c9:bd:95:69:91:f2:8e:7e:46:f3:0e:f8:95:c4:85:4c:
         e1:30:25:fd:a1:9f:b9:c6:d5:2d:32:2b:95:0f:ad:33:5d:85:
         fc:d2:cf:4b:d5:c1:d6:3f:56:08:4f:95:71:82:22:13:25:65:
         31:d3:c9:2d:24:34:b3:c9:a7:4b:24:e9:ba:0a:60:3c:54:18:
         5c:3a:b1:61:2f:86:cf:48:0e:c6:fb:e6:39:3c:19:f6:be:a0:
         90:fd:e0:8d:af:e6:95:fe:23:1a:e5:0e:3f:ce:c9:03:76:ca:
         80:a9:69:1f:b3:29:e7:fd:5f:bd:61:92:08:2d:1a:09:c9:ed:
         c5:0a:e4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----