Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/0/323830343a353231383a3a2f33322d3335203d3e20323638343934.roa
File:                     323830343a353231383a3a2f33322d3335203d3e20323638343934.roa (raw, json)
Hash identifier:          Bv7QSAteUPAR78eUEWTTpg7NWZ2SNIzsxjKMxslJo0g=
Subject key identifier:   C0:79:DA:A4:E2:23:F8:40:23:6E:51:58:6E:F2:E8:D8:26:22:D8:09
Certificate issuer:       /CN=E49C526D96BC61B745F02CCF109E186E8917E7DA
Certificate serial:       1C6BB09BC4902FBE1114EABC1D8680E4F9541DBC
Authority key identifier: E4:9C:52:6D:96:BC:61:B7:45:F0:2C:CF:10:9E:18:6E:89:17:E7:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E49C526D96BC61B745F02CCF109E186E8917E7DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/0/323830343a353231383a3a2f33322d3335203d3e20323638343934.roa
Signing time:             Tue 10 Oct 2023 21:00:02 +0000
ROA not before:           Tue 10 Oct 2023 20:55:02 +0000
ROA not after:            Tue 08 Oct 2024 21:00:02 +0000
asID:                     268494
IP address blocks:        2804:5218::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:6b:b0:9b:c4:90:2f:be:11:14:ea:bc:1d:86:80:e4:f9:54:1d:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E49C526D96BC61B745F02CCF109E186E8917E7DA
        Validity
            Not Before: Oct 10 20:55:02 2023 GMT
            Not After : Oct  8 21:00:02 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fd:22:e7:27:d6:4f:f6:d8:26:3d:dd:c7:67:
                    2b:eb:e0:5d:49:7e:f2:c9:d7:4f:f5:4c:f0:88:63:
                    b5:78:4a:ca:a2:aa:94:c1:52:9b:a0:0d:7a:56:2b:
                    2b:54:ec:f9:0d:78:e5:a8:74:7b:62:30:5e:7c:b1:
                    09:12:d9:89:ee:ea:38:fc:aa:33:dc:de:a7:5f:d7:
                    8e:b6:45:81:bd:4a:f3:40:79:91:81:dc:5b:c8:00:
                    e1:47:e1:78:3e:e4:4c:bd:44:ac:fc:d7:9d:48:91:
                    a7:57:0e:49:07:34:68:8b:7b:33:48:e3:2c:ac:bb:
                    93:68:5c:80:44:69:67:ee:7e:f3:5e:bc:7a:1b:87:
                    41:d4:61:dd:a2:c9:04:99:04:c7:45:91:b8:9e:d8:
                    54:02:6f:10:16:87:88:26:53:5f:99:a4:71:d0:6f:
                    a6:fd:c1:b4:86:0c:ff:26:22:de:2c:20:0b:e4:e2:
                    b4:2e:51:9c:1c:5a:50:dc:48:3d:31:6c:a2:14:23:
                    e1:97:45:da:ec:7e:20:71:48:6c:d9:30:94:b9:c3:
                    8a:36:86:4a:b8:08:37:3b:50:50:9c:aa:9a:9f:f2:
                    1a:12:d1:50:b3:66:cc:f2:d4:b6:26:e8:50:d8:eb:
                    b1:83:e5:f4:0f:bc:78:c4:73:8d:98:19:cb:24:ab:
                    97:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:79:DA:A4:E2:23:F8:40:23:6E:51:58:6E:F2:E8:D8:26:22:D8:09
            X509v3 Authority Key Identifier:
                keyid:E4:9C:52:6D:96:BC:61:B7:45:F0:2C:CF:10:9E:18:6E:89:17:E7:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/0/E49C526D96BC61B745F02CCF109E186E8917E7DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E49C526D96BC61B745F02CCF109E186E8917E7DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/0/323830343a353231383a3a2f33322d3335203d3e20323638343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5218::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:ba:7f:fb:7e:19:d4:f9:e6:37:89:7d:12:74:1a:4c:fd:e8:
         22:39:c6:47:b4:bd:61:ed:1f:07:45:7f:3e:b7:b9:67:2c:78:
         b0:09:6e:48:3f:76:05:07:fe:82:7d:ec:56:2b:b1:51:49:e2:
         09:98:aa:60:44:ed:b2:aa:e7:9d:20:39:d6:b5:85:1e:ce:ba:
         87:b4:4c:9e:bc:04:4f:9f:ea:f8:c7:c3:1a:77:b1:8c:37:11:
         23:f5:76:62:be:ba:18:c6:36:49:b5:78:df:54:fb:28:af:d5:
         65:2c:91:d9:bb:42:1d:a2:02:b8:8b:99:54:97:d3:ea:3d:71:
         63:23:f0:f1:6d:db:e0:41:6a:1f:d9:22:45:a3:90:a8:ed:e7:
         75:99:07:5f:fb:cb:22:27:ca:b1:fb:ea:c2:aa:9b:75:10:ba:
         91:ba:d2:8a:41:d9:4c:65:94:2b:67:91:a8:fe:26:e3:a4:5c:
         63:ba:0d:54:96:ab:ef:fc:fa:7c:48:69:84:20:ee:dd:7e:b5:
         23:8d:29:3b:b2:b5:ad:34:d5:9d:df:9a:47:be:c3:6b:e2:bc:
         17:a5:17:2f:b7:85:0f:82:46:96:9c:4b:9c:25:a4:38:ec:ac:
         a4:60:5d:8c:14:d8:ef:fa:66:0d:99:a0:9f:92:53:fb:ed:0e:
         b4:1d:f6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----