Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/323830343a323531343a3a2f33322d3438203d3e20323634323539.roa
File:                     323830343a323531343a3a2f33322d3438203d3e20323634323539.roa (raw, json)
Hash identifier:          HpVhABLyJmyay2lWP9vsig+GwoixcDJokdzw5/OeHec=
Subject key identifier:   70:36:42:C2:E3:7F:15:2F:BA:17:60:AB:A6:C5:84:39:42:60:DF:E5
Certificate issuer:       /CN=EDBEBB97A2E0B31B286277642BAC47B714C7BAE8
Certificate serial:       233E974B6531F102B9B6B5CFA806E480C5B27406
Authority key identifier: ED:BE:BB:97:A2:E0:B3:1B:28:62:77:64:2B:AC:47:B7:14:C7:BA:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EDBEBB97A2E0B31B286277642BAC47B714C7BAE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/323830343a323531343a3a2f33322d3438203d3e20323634323539.roa
Signing time:             Tue 20 Feb 2024 18:42:13 +0000
ROA not before:           Tue 20 Feb 2024 18:37:13 +0000
ROA not after:            Tue 18 Feb 2025 18:42:13 +0000
asID:                     264259
IP address blocks:        2804:2514::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:3e:97:4b:65:31:f1:02:b9:b6:b5:cf:a8:06:e4:80:c5:b2:74:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDBEBB97A2E0B31B286277642BAC47B714C7BAE8
        Validity
            Not Before: Feb 20 18:37:13 2024 GMT
            Not After : Feb 18 18:42:13 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e3:16:e3:46:bb:f6:c8:17:0a:12:d4:68:0d:
                    22:50:5d:41:ce:62:9c:71:54:64:71:35:a1:73:ce:
                    81:e5:8b:15:2f:26:7c:8f:ce:4c:31:42:c3:4f:7f:
                    32:08:b4:59:12:cf:3e:2a:eb:e9:ee:ab:fb:5e:ca:
                    b5:c3:1f:eb:94:f5:61:74:55:e0:d7:48:7d:5d:29:
                    b1:cb:f2:e1:47:e4:a0:fd:24:36:d1:6f:62:66:bc:
                    ba:88:6a:f7:6e:c3:da:4c:7e:6a:a1:8f:d8:d1:a3:
                    57:74:e5:36:63:5e:a3:8a:eb:11:6c:c0:74:e1:f3:
                    7c:40:f0:d0:aa:be:2b:d2:0b:e7:7c:25:16:85:e0:
                    e7:a0:99:1d:b2:d4:ce:35:3f:43:c0:66:63:9b:68:
                    b2:68:5c:ac:f8:29:2f:44:62:2b:92:bd:41:46:be:
                    91:c5:0b:df:5b:6d:d9:c9:78:17:60:09:e2:96:c4:
                    67:9d:8d:92:9c:59:9d:9d:aa:a5:d3:3a:ac:12:de:
                    5a:5b:a2:fd:b3:85:62:08:bb:bd:1b:d0:30:84:4f:
                    11:fb:c7:bc:50:8d:0a:b9:c5:07:45:86:0c:80:9a:
                    5b:9f:91:48:69:2d:ba:bf:68:30:3a:7b:ef:8c:4d:
                    55:60:ac:4e:12:1c:33:96:e1:78:3f:37:6b:4c:8f:
                    75:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:36:42:C2:E3:7F:15:2F:BA:17:60:AB:A6:C5:84:39:42:60:DF:E5
            X509v3 Authority Key Identifier:
                keyid:ED:BE:BB:97:A2:E0:B3:1B:28:62:77:64:2B:AC:47:B7:14:C7:BA:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/EDBEBB97A2E0B31B286277642BAC47B714C7BAE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EDBEBB97A2E0B31B286277642BAC47B714C7BAE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/323830343a323531343a3a2f33322d3438203d3e20323634323539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2514::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:09:a3:d7:b0:5a:0d:4c:4f:1a:0e:fd:69:f7:da:f6:f9:34:
         dc:98:76:a4:49:a7:2f:21:24:fb:2b:dd:49:79:5e:3c:d0:45:
         84:cf:ae:4c:54:82:15:80:d6:ea:ad:30:f4:9f:a5:90:63:2d:
         e4:63:96:65:0a:6d:8e:4c:22:91:48:27:ee:8c:58:ca:3b:3c:
         f9:96:ec:23:b4:86:a5:ae:74:fb:8d:e2:af:b5:e8:7f:3a:13:
         a1:a1:61:9d:0f:42:3d:5a:a5:4e:c6:19:1d:8f:68:37:ae:e0:
         a9:a7:68:90:30:34:85:a6:4b:09:41:9b:1c:f6:d3:34:15:77:
         0f:74:76:ed:0a:fa:5f:f1:70:b0:23:ae:2d:53:47:0b:6d:47:
         b4:eb:97:29:d6:fa:4d:62:6d:90:fd:d4:9a:1d:82:3c:2a:2e:
         c6:57:fc:b5:50:b8:4b:ed:41:cd:dc:c4:f9:c2:7b:54:e4:00:
         6e:4e:cb:77:7c:3d:c1:ce:ee:80:38:84:d3:24:be:1e:9b:1d:
         73:d8:00:3b:8b:ed:73:2b:9f:71:60:75:5a:cd:e3:c6:2f:12:
         1e:54:fa:d9:a3:66:b9:6d:e8:9b:64:9c:b4:a6:b5:5e:20:7e:
         c1:cc:d5:99:72:c5:d8:4e:2f:c5:26:5b:58:d0:e6:54:96:16:
         1c:6c:8c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----