Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/0/323830343a363335383a383030303a3a2f33332d3333203d3e20323639333535.roa
File:                     323830343a363335383a383030303a3a2f33332d3333203d3e20323639333535.roa (raw, json)
Hash identifier:          1nUpTZB8+m+SNZkt2gul6mDRGdUveFCalBB6qqKIjVk=
Subject key identifier:   1F:11:CF:65:5D:B4:4C:3E:1B:A9:5D:64:5F:4B:DD:A0:49:B0:EC:C3
Certificate issuer:       /CN=5EBF6B302E6461438C4FA9446A9352773CC79187
Certificate serial:       3054D58A8411DA183E13CC9F98597791F2B4B890
Authority key identifier: 5E:BF:6B:30:2E:64:61:43:8C:4F:A9:44:6A:93:52:77:3C:C7:91:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5EBF6B302E6461438C4FA9446A9352773CC79187.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/0/323830343a363335383a383030303a3a2f33332d3333203d3e20323639333535.roa
Signing time:             Tue 06 Feb 2024 20:14:36 +0000
ROA not before:           Tue 06 Feb 2024 20:09:36 +0000
ROA not after:            Tue 04 Feb 2025 20:14:36 +0000
asID:                     269355
IP address blocks:        2804:6358:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:54:d5:8a:84:11:da:18:3e:13:cc:9f:98:59:77:91:f2:b4:b8:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EBF6B302E6461438C4FA9446A9352773CC79187
        Validity
            Not Before: Feb  6 20:09:36 2024 GMT
            Not After : Feb  4 20:14:36 2025 GMT
        Subject: CN=1F11CF655DB44C3E1BA95D645F4BDDA049B0ECC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:59:79:b2:7a:1d:05:36:79:33:aa:1d:37:d8:
                    02:55:06:98:99:28:fd:f0:56:a7:0d:0b:78:a3:9c:
                    60:90:b8:bb:59:e2:a6:7d:8d:38:cc:55:14:62:ea:
                    24:56:78:0a:a0:3b:d6:3b:12:99:c0:e1:03:a3:bd:
                    ef:f6:a6:78:92:c8:0d:54:a0:83:23:d5:03:c0:5e:
                    3a:4e:d2:5d:f3:5b:96:a5:36:af:d2:12:26:c9:2c:
                    9f:06:07:f9:1b:9c:5e:a1:b1:f3:19:01:07:d3:2b:
                    29:a6:d0:45:e5:e2:09:b6:8b:d1:02:95:52:f4:12:
                    04:10:fb:36:f8:9e:62:18:82:d2:2b:9f:af:63:36:
                    05:92:a8:a8:36:3b:ed:f6:25:ce:6f:6d:d8:7a:53:
                    f7:57:ea:2a:a0:88:f5:5f:ee:d9:6b:a8:28:7a:cd:
                    88:dc:73:20:51:36:33:7d:50:f5:01:2c:4d:1d:6a:
                    cf:df:e7:df:9c:ad:f8:3d:1b:9d:be:d3:8d:b3:40:
                    3a:a2:58:5a:c3:4b:f1:09:ed:0e:f4:43:10:60:83:
                    89:9d:a0:31:b8:96:48:5b:e6:e5:59:a8:dd:4d:44:
                    3f:ef:82:a5:e7:99:24:62:23:bb:b5:f0:ad:56:d3:
                    bb:bf:07:9d:87:5d:8d:69:2e:f4:c2:c8:cb:09:40:
                    fa:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:11:CF:65:5D:B4:4C:3E:1B:A9:5D:64:5F:4B:DD:A0:49:B0:EC:C3
            X509v3 Authority Key Identifier:
                keyid:5E:BF:6B:30:2E:64:61:43:8C:4F:A9:44:6A:93:52:77:3C:C7:91:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/0/5EBF6B302E6461438C4FA9446A9352773CC79187.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5EBF6B302E6461438C4FA9446A9352773CC79187.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/0/323830343a363335383a383030303a3a2f33332d3333203d3e20323639333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6358:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         b5:2f:95:64:27:02:31:fc:13:d0:90:18:89:8b:e6:74:db:e8:
         64:a0:e1:1f:91:01:74:b4:15:32:e2:98:0d:9f:01:14:4f:45:
         2f:b7:95:89:9f:1d:d1:fd:21:3f:08:0d:ac:51:35:da:9e:06:
         54:6c:b6:24:c5:64:b9:7c:16:38:db:91:ba:9c:5d:b6:c6:ef:
         56:c4:09:b0:cb:8e:96:cd:b6:9f:57:7b:4a:0a:02:9a:e1:a0:
         71:28:2c:20:9d:25:75:c9:6a:a0:68:30:5e:b7:49:c7:e7:c0:
         f1:5f:c0:67:78:32:75:aa:1c:ad:13:26:7c:c5:15:cc:31:03:
         f1:71:87:23:2b:97:54:fe:2d:97:5e:7f:5d:d4:e6:3e:91:45:
         40:a9:5e:1d:47:6d:66:50:a8:78:ac:41:c8:8e:71:58:8d:9d:
         d4:a1:8f:71:85:69:42:fa:df:00:c2:24:49:70:ec:16:a2:6e:
         ac:40:38:af:37:8d:65:ee:78:ec:89:fc:19:c4:a4:12:93:71:
         12:a4:eb:27:bc:71:a3:e1:b1:15:e2:7c:09:a2:de:97:a6:2a:
         4c:5e:d2:35:e0:61:7d:4d:5b:a7:49:13:e6:5f:e0:1f:b6:e5:
         05:48:7a:85:84:db:3b:5b:b2:a1:cb:0c:23:a6:86:68:75:1d:
         f7:2c:82:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----