Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/0/323830343a363335383a3a2f33322d3332203d3e20323639333535.roa
File:                     323830343a363335383a3a2f33322d3332203d3e20323639333535.roa (raw, json)
Hash identifier:          D7Myz8b7Z+wbrvwUiDLoGi4oy/TBKTzG2hsyoYrgg3g=
Subject key identifier:   86:81:C1:D2:F1:58:DB:FE:09:04:44:95:43:89:36:33:03:F9:8F:11
Certificate issuer:       /CN=5EBF6B302E6461438C4FA9446A9352773CC79187
Certificate serial:       5F5267F7870781F2EB5464C9E980C31FF7C04A2E
Authority key identifier: 5E:BF:6B:30:2E:64:61:43:8C:4F:A9:44:6A:93:52:77:3C:C7:91:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5EBF6B302E6461438C4FA9446A9352773CC79187.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/0/323830343a363335383a3a2f33322d3332203d3e20323639333535.roa
Signing time:             Tue 06 Feb 2024 20:13:21 +0000
ROA not before:           Tue 06 Feb 2024 20:08:21 +0000
ROA not after:            Tue 04 Feb 2025 20:13:21 +0000
asID:                     269355
IP address blocks:        2804:6358::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:52:67:f7:87:07:81:f2:eb:54:64:c9:e9:80:c3:1f:f7:c0:4a:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EBF6B302E6461438C4FA9446A9352773CC79187
        Validity
            Not Before: Feb  6 20:08:21 2024 GMT
            Not After : Feb  4 20:13:21 2025 GMT
        Subject: CN=8681C1D2F158DBFE090444954389363303F98F11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f6:36:ce:ad:d9:f5:d3:a9:b5:8e:78:62:ad:
                    18:7f:fd:af:ca:65:73:b5:47:1f:aa:bf:77:a0:f8:
                    40:31:f6:b9:c4:fa:4f:ab:26:37:8c:a0:11:2c:46:
                    15:b2:e5:c4:42:07:78:7a:d8:b1:88:c1:36:da:56:
                    84:23:20:43:c1:67:3a:0d:f9:29:9b:29:27:d1:c2:
                    90:c1:ff:fa:d4:39:0f:33:a5:54:e2:13:ad:52:67:
                    8c:67:0e:fb:32:89:4c:c4:27:45:b4:ab:24:84:ff:
                    35:0f:1d:90:23:7e:61:6c:eb:3c:50:60:ad:81:71:
                    ec:2b:c1:3a:82:3a:9a:e7:9c:cf:84:0b:f4:d3:49:
                    ce:0c:bf:cc:b0:df:e5:59:aa:40:18:60:bb:08:fc:
                    e0:53:c6:5b:21:f0:65:96:72:b1:17:89:a0:4a:5c:
                    1d:3d:f1:6c:ba:ca:b8:76:16:a6:05:4f:36:ac:c4:
                    b1:99:26:33:70:41:39:a4:b9:e0:3f:32:30:65:7c:
                    c0:74:cf:2f:38:3a:0d:9d:a5:51:7c:50:48:aa:d8:
                    ad:30:be:f3:78:27:89:2a:2a:23:6f:c4:2d:9c:2e:
                    e6:0b:8b:b0:e5:36:30:c6:f0:b0:b7:98:e9:03:b2:
                    94:71:36:2c:97:99:47:d7:d7:97:d2:54:70:bd:da:
                    81:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:81:C1:D2:F1:58:DB:FE:09:04:44:95:43:89:36:33:03:F9:8F:11
            X509v3 Authority Key Identifier:
                keyid:5E:BF:6B:30:2E:64:61:43:8C:4F:A9:44:6A:93:52:77:3C:C7:91:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/0/5EBF6B302E6461438C4FA9446A9352773CC79187.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5EBF6B302E6461438C4FA9446A9352773CC79187.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/0/323830343a363335383a3a2f33322d3332203d3e20323639333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6358::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:d2:8a:9e:d3:3a:d4:b2:5f:3a:cb:9e:d3:16:56:5f:76:41:
         ba:cc:5f:0b:4c:77:56:54:94:5a:a4:3a:36:fd:20:ee:73:c1:
         d3:61:a4:bc:fc:7f:b8:07:71:86:1e:c7:44:44:25:4d:35:24:
         59:52:19:08:b9:f7:31:40:b9:45:53:60:59:c4:e3:3d:e3:c8:
         08:c2:bc:92:22:7e:eb:ac:36:a8:b0:d9:9e:07:fe:f8:7a:4d:
         64:82:e8:d8:06:64:28:47:2b:b5:2d:96:5f:e9:cf:09:64:01:
         ee:09:e5:3f:34:8b:ee:73:04:9c:01:93:e9:a0:72:30:b6:6b:
         37:11:64:cd:8c:e3:5a:39:a2:40:f8:fc:ed:e8:ab:45:99:8f:
         6e:22:11:d8:68:9d:a2:ac:c7:1c:7e:ef:a1:3f:4e:40:80:96:
         2c:70:68:84:60:23:ef:21:0e:ab:a5:b1:d4:5e:6a:07:93:06:
         84:79:c4:1d:50:58:30:d9:af:18:e5:31:7f:f4:42:5e:f8:d1:
         ca:eb:55:19:d5:8e:43:9f:0d:a2:23:00:a4:fc:9a:3c:25:03:
         83:76:27:9e:4c:7c:e3:e3:96:a2:be:80:86:c7:b7:d5:3c:be:
         a8:0d:5d:06:85:e3:67:88:24:62:74:09:46:5b:e0:a0:57:49:
         03:62:18:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----