Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/0/323830343a313638303a3a2f33322d3332203d3e20323633323839.roa
File:                     323830343a313638303a3a2f33322d3332203d3e20323633323839.roa (raw, json)
Hash identifier:          ZtZt3uX3i2UB9u2DtOAxPMXAjpq3PsLcHrPM7tolCHM=
Subject key identifier:   2D:E1:36:B9:8C:41:FD:33:2E:91:0F:33:10:6C:A5:B9:EC:A2:83:8C
Certificate issuer:       /CN=8CA2336475BC551CD8B0D5ECDA42170036666F54
Certificate serial:       16EF07CF2C85367B549B9AB9AFCB0F5D2608A2BF
Authority key identifier: 8C:A2:33:64:75:BC:55:1C:D8:B0:D5:EC:DA:42:17:00:36:66:6F:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8CA2336475BC551CD8B0D5ECDA42170036666F54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/0/323830343a313638303a3a2f33322d3332203d3e20323633323839.roa
Signing time:             Tue 16 Jan 2024 20:01:33 +0000
ROA not before:           Tue 16 Jan 2024 19:56:33 +0000
ROA not after:            Tue 14 Jan 2025 20:01:33 +0000
asID:                     263289
IP address blocks:        2804:1680::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:ef:07:cf:2c:85:36:7b:54:9b:9a:b9:af:cb:0f:5d:26:08:a2:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CA2336475BC551CD8B0D5ECDA42170036666F54
        Validity
            Not Before: Jan 16 19:56:33 2024 GMT
            Not After : Jan 14 20:01:33 2025 GMT
        Subject: CN=2DE136B98C41FD332E910F33106CA5B9ECA2838C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:dd:40:c1:df:be:cc:07:6b:04:c4:f7:69:aa:
                    23:ed:97:a6:77:7c:b0:74:42:12:06:d9:c5:53:ae:
                    a5:16:45:0b:a5:6e:c0:7f:bf:bb:e3:f3:12:c2:3a:
                    1d:1f:f5:1d:fe:06:4b:30:ff:7a:73:3d:fb:80:26:
                    53:de:da:d5:d1:20:e2:bf:09:08:29:ed:4a:a1:b8:
                    76:19:8e:e1:2d:18:2a:53:7b:b8:73:88:a9:7a:ec:
                    20:75:25:76:a3:77:55:5e:d6:b1:64:f8:8e:8a:d3:
                    95:bf:ec:95:c1:6a:18:77:3b:e0:ad:ac:c2:5d:3f:
                    f5:cc:8a:78:d6:c1:6e:4a:8f:b6:24:e7:aa:ce:2f:
                    09:83:b2:90:0d:8e:ab:12:b7:eb:a2:99:90:ce:3d:
                    c0:79:4f:80:6b:5e:b3:e7:3f:f5:91:1c:4c:9b:d3:
                    07:cc:f7:1d:c7:fd:e1:3d:c1:b6:8c:57:28:84:33:
                    55:a7:ef:a8:56:e3:c0:22:03:ca:8a:1c:60:3f:d3:
                    59:ac:96:03:60:2e:91:89:a0:a0:9a:7c:10:43:68:
                    74:0b:eb:f6:e0:68:0f:78:ce:08:ff:d2:5e:c2:16:
                    76:7f:79:22:00:52:c0:98:3c:21:35:81:d0:df:c2:
                    b3:dc:bc:83:d5:f3:17:56:6a:da:68:52:97:a5:0d:
                    bb:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E1:36:B9:8C:41:FD:33:2E:91:0F:33:10:6C:A5:B9:EC:A2:83:8C
            X509v3 Authority Key Identifier:
                keyid:8C:A2:33:64:75:BC:55:1C:D8:B0:D5:EC:DA:42:17:00:36:66:6F:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/0/8CA2336475BC551CD8B0D5ECDA42170036666F54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8CA2336475BC551CD8B0D5ECDA42170036666F54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/0/323830343a313638303a3a2f33322d3332203d3e20323633323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1680::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:66:dc:83:db:fd:c8:6e:f6:b6:73:ab:5c:b8:52:10:d0:cd:
         8b:6e:b2:d6:14:e1:0e:13:4c:05:e3:4c:14:74:a1:47:87:14:
         12:6e:6e:da:49:38:5e:f8:38:73:33:5b:82:3f:24:5c:34:cd:
         d4:30:d1:e0:cc:f3:1d:0b:09:72:e0:8e:a6:0b:73:dc:20:59:
         93:70:f1:37:95:85:31:82:7e:61:cd:69:b8:7c:26:79:8d:c2:
         ca:68:c0:65:af:6c:53:7e:d0:0d:46:1e:b0:6c:fb:30:44:5a:
         d4:3e:04:38:46:f8:df:e6:1a:5b:ec:fd:24:da:d6:3e:f7:3d:
         6c:79:52:31:df:85:55:33:61:c6:3a:08:1a:c9:e9:b9:52:dd:
         0b:70:a0:0c:cb:dc:21:27:53:be:31:df:0c:d5:27:2e:65:a6:
         e4:34:14:25:b4:83:41:0c:0e:32:9e:86:bd:e3:7a:5b:63:28:
         b9:ef:dc:5d:37:e1:93:e4:aa:97:18:70:0e:cd:e4:2f:30:94:
         b0:3c:19:43:9a:c6:f2:b4:bd:da:a0:44:e1:0f:44:ed:38:e8:
         79:b0:83:fc:92:39:df:85:75:9c:34:eb:45:7f:a8:df:51:88:
         ef:7d:f1:4b:7b:6f:89:42:76:d6:53:40:17:ad:69:49:3f:4b:
         82:b9:51:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----