Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fsnu97xsy8dojFcnRPqdwEKYwFjPAtgcBJkuUt5tjjAi/0/323830343a326631633a3a2f33322d3438203d3e20323634383732.roa
File:                     323830343a326631633a3a2f33322d3438203d3e20323634383732.roa (raw, json)
Hash identifier:          diBRAw2Vm8ED2WrSh4am72MyYeYN89URqHatF3RFvbE=
Subject key identifier:   44:F5:20:3F:8A:5F:08:07:F2:4F:90:89:8F:C7:45:19:65:7F:22:1B
Certificate issuer:       /CN=1855CDFB9B5C6DF6137EDDF7CDF465C30A23F9B5
Certificate serial:       59E272C9414132B0EFA3E2D76416272E159631CA
Authority key identifier: 18:55:CD:FB:9B:5C:6D:F6:13:7E:DD:F7:CD:F4:65:C3:0A:23:F9:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1855CDFB9B5C6DF6137EDDF7CDF465C30A23F9B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fsnu97xsy8dojFcnRPqdwEKYwFjPAtgcBJkuUt5tjjAi/0/323830343a326631633a3a2f33322d3438203d3e20323634383732.roa
Signing time:             Tue 12 Mar 2024 12:48:35 +0000
ROA not before:           Tue 12 Mar 2024 12:43:35 +0000
ROA not after:            Tue 11 Mar 2025 12:48:35 +0000
asID:                     264872
IP address blocks:        2804:2f1c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:e2:72:c9:41:41:32:b0:ef:a3:e2:d7:64:16:27:2e:15:96:31:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1855CDFB9B5C6DF6137EDDF7CDF465C30A23F9B5
        Validity
            Not Before: Mar 12 12:43:35 2024 GMT
            Not After : Mar 11 12:48:35 2025 GMT
        Subject: CN=44F5203F8A5F0807F24F90898FC74519657F221B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7e:f8:8f:e3:d5:4a:a1:28:cb:35:14:d8:90:
                    e2:92:37:20:0e:21:fd:cd:7f:b9:07:62:5c:a3:12:
                    20:26:c8:23:69:97:0b:fa:f9:8e:4a:a6:5c:a6:7e:
                    71:5d:4e:20:46:f1:b5:6a:b4:66:7e:0a:6d:5f:62:
                    b8:03:61:a0:c9:9d:59:c8:b3:9c:de:fd:26:fb:ee:
                    b1:fb:a8:d6:16:af:5c:02:b1:cb:bd:a3:90:d4:c7:
                    a2:91:92:d4:62:72:76:df:78:fa:ba:dd:0f:5d:7d:
                    92:a8:98:77:a6:a7:2b:de:7f:1b:ef:3c:f9:3d:d8:
                    c4:f7:dd:f1:8f:ec:eb:d7:8d:e3:96:e5:12:99:13:
                    ca:b7:53:eb:00:88:45:06:94:e6:f8:72:b8:65:b5:
                    a9:36:58:dd:c6:12:51:a2:ad:b0:18:45:53:bf:be:
                    b6:ff:b5:ab:74:48:d7:bf:27:b5:21:db:d1:77:46:
                    9e:51:04:31:90:01:04:f2:d2:4e:43:ad:cb:bb:65:
                    60:f6:98:7e:7d:2e:50:f9:ad:b5:87:e6:89:08:2a:
                    1b:ac:0b:ca:c7:c4:80:40:94:32:b9:cf:ba:5c:60:
                    7b:99:93:2b:d5:78:54:68:43:68:d4:07:5f:b2:19:
                    88:ee:df:59:2e:2e:6a:e3:ad:a8:0c:50:df:9c:77:
                    7e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F5:20:3F:8A:5F:08:07:F2:4F:90:89:8F:C7:45:19:65:7F:22:1B
            X509v3 Authority Key Identifier:
                keyid:18:55:CD:FB:9B:5C:6D:F6:13:7E:DD:F7:CD:F4:65:C3:0A:23:F9:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fsnu97xsy8dojFcnRPqdwEKYwFjPAtgcBJkuUt5tjjAi/0/1855CDFB9B5C6DF6137EDDF7CDF465C30A23F9B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1855CDFB9B5C6DF6137EDDF7CDF465C30A23F9B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fsnu97xsy8dojFcnRPqdwEKYwFjPAtgcBJkuUt5tjjAi/0/323830343a326631633a3a2f33322d3438203d3e20323634383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f1c::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:8c:47:3f:a5:d2:b5:33:f2:bf:34:bd:bf:d7:68:69:2d:63:
         02:a0:96:9e:a0:ab:54:2f:ef:16:bd:9c:a3:3b:03:f8:bc:b1:
         39:16:45:84:c3:6b:a7:74:05:35:8f:52:7e:ca:75:5c:fb:d8:
         8f:81:bb:60:00:51:4d:d1:59:e3:43:91:3e:3c:d9:cb:21:fc:
         47:9f:af:3b:16:51:eb:c4:8f:41:01:37:b4:a9:45:db:4b:a9:
         80:9a:a0:94:af:43:3d:54:3f:22:e0:38:d1:60:29:db:8b:68:
         bd:a6:61:3d:10:b2:5a:f7:85:ac:3c:fb:02:1d:be:9e:ae:b0:
         b4:f7:b6:d8:47:1c:5b:67:2a:95:9f:d6:5c:87:56:cc:a3:9b:
         5c:fc:52:d0:cd:4d:aa:d5:b0:9d:c3:d7:29:68:5c:de:eb:73:
         75:e6:30:4f:68:19:a8:6c:b5:1e:f5:88:56:66:0a:d6:a9:2b:
         02:8c:70:d6:e3:e5:6e:db:e5:37:dc:a0:8e:c9:fd:1f:52:ac:
         8e:86:ba:35:4f:88:e8:b1:ef:38:f9:d8:09:5c:7c:a5:08:3e:
         39:c3:ce:92:14:de:b4:89:d2:83:1c:99:5f:30:b7:5b:aa:e5:
         57:1b:a1:10:c9:d1:ec:cc:06:23:e2:d3:89:ff:f2:43:99:f2:
         5d:c5:48:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----