Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/323830343a386362343a3a2f33322d3332203d3e20323733383136.roa
File:                     323830343a386362343a3a2f33322d3332203d3e20323733383136.roa (raw, json)
Hash identifier:          UWbrNLomIxmw9XZYl+sIDh5Fth0bYHQRLVz2nFkY2uI=
Subject key identifier:   BD:07:3D:B7:5D:58:7B:59:81:FE:5C:CA:E3:EA:EE:6B:4E:89:E1:DB
Certificate issuer:       /CN=BAF68C193144B8DD53B0312AA8ACCD5BB59350E0
Certificate serial:       026ED26C8A6C10EBCEA8D1D85762A180CABD0241
Authority key identifier: BA:F6:8C:19:31:44:B8:DD:53:B0:31:2A:A8:AC:CD:5B:B5:93:50:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAF68C193144B8DD53B0312AA8ACCD5BB59350E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/323830343a386362343a3a2f33322d3332203d3e20323733383136.roa
Signing time:             Mon 09 Dec 2024 14:34:21 +0000
ROA not before:           Mon 09 Dec 2024 14:29:21 +0000
ROA not after:            Mon 08 Dec 2025 14:34:21 +0000
asID:                     273816
IP address blocks:        2804:8cb4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:6e:d2:6c:8a:6c:10:eb:ce:a8:d1:d8:57:62:a1:80:ca:bd:02:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAF68C193144B8DD53B0312AA8ACCD5BB59350E0
        Validity
            Not Before: Dec  9 14:29:21 2024 GMT
            Not After : Dec  8 14:34:21 2025 GMT
        Subject: CN=BD073DB75D587B5981FE5CCAE3EAEE6B4E89E1DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:73:0d:af:71:57:63:25:ad:a8:64:59:e6:82:
                    81:da:50:95:50:61:ba:77:e4:d3:87:fa:74:45:9c:
                    6d:24:6c:9e:5b:ad:f9:5a:9c:20:e3:c4:fb:10:a9:
                    db:af:62:d7:d4:3f:30:10:bd:f2:8d:3e:36:d8:3c:
                    5f:d1:0c:a6:d9:75:22:d6:59:15:80:0a:e1:8e:db:
                    29:0c:bd:84:06:28:94:4c:81:f1:01:7a:55:0a:c7:
                    05:fd:43:fd:76:a4:88:d0:3e:e6:47:8f:2b:f4:c0:
                    ce:30:ec:d2:34:a6:4b:24:70:03:66:8e:fc:c9:e6:
                    a9:fe:b7:fd:e8:88:56:a6:84:67:fc:6d:9a:1e:31:
                    73:97:f5:09:6a:3f:2d:6d:2b:ff:55:c0:28:00:db:
                    a8:f2:5e:5a:a8:7b:94:83:e5:dc:45:79:0b:61:3f:
                    10:bd:31:44:bc:20:70:36:8a:01:d3:5d:f6:e7:fc:
                    53:be:0b:ec:4f:f4:a0:f7:00:1e:3f:bf:e2:5d:79:
                    61:88:c5:cd:b2:33:c3:d2:99:91:fa:b8:ea:04:bb:
                    81:df:10:00:f5:47:74:e9:56:d8:8c:07:cf:79:95:
                    1b:e9:fc:b7:30:d3:83:ed:b8:8c:c4:27:89:e6:21:
                    d5:01:68:50:26:d1:0d:f4:8c:6d:a0:36:8d:83:8a:
                    22:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:07:3D:B7:5D:58:7B:59:81:FE:5C:CA:E3:EA:EE:6B:4E:89:E1:DB
            X509v3 Authority Key Identifier:
                keyid:BA:F6:8C:19:31:44:B8:DD:53:B0:31:2A:A8:AC:CD:5B:B5:93:50:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/BAF68C193144B8DD53B0312AA8ACCD5BB59350E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAF68C193144B8DD53B0312AA8ACCD5BB59350E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/323830343a386362343a3a2f33322d3332203d3e20323733383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8cb4::/32

    Signature Algorithm: sha256WithRSAEncryption
         d8:31:7d:d7:87:90:3e:4e:2b:4d:99:6b:b8:d3:a8:cc:87:c6:
         1d:df:12:28:31:0d:cf:2b:0f:17:f0:e3:87:83:bb:6b:82:b9:
         a0:10:3a:cd:19:44:36:fc:9d:75:bf:f0:62:85:c9:42:71:9b:
         0d:26:f2:a1:a3:da:f5:96:79:4e:4c:e7:04:13:84:cb:65:79:
         bc:f4:c0:35:12:d4:16:cc:0e:63:7f:7b:53:6e:8e:f0:80:f2:
         31:28:1f:54:1a:11:d3:b0:67:de:94:95:32:65:b0:cb:57:eb:
         fe:6a:9f:90:55:94:c3:53:74:f7:73:67:13:71:d5:cf:3e:44:
         c7:7e:c3:ad:75:58:99:e2:cf:8b:c3:aa:46:31:fb:4e:92:fd:
         cb:f2:54:0b:d7:d9:c0:95:3e:87:1d:ac:5d:70:f4:0d:21:04:
         98:85:54:66:9f:75:33:78:1b:71:ab:6b:94:36:6b:e0:e1:9e:
         3d:5b:87:cf:ba:62:fe:f4:a0:5f:54:6e:4f:f4:3a:ea:9f:17:
         34:93:fa:7d:f8:cc:9a:90:e0:5f:73:2d:45:f0:c2:a6:60:11:
         df:ab:ab:f2:75:8f:f1:66:58:11:8c:27:fe:a4:57:d5:e9:fc:
         4b:71:88:d2:61:0f:45:3e:b9:55:e3:d5:59:67:81:4a:ce:20:
         d4:fb:70:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----