Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/323830343a326363343a3a2f33322d313238203d3e20323635323432.roa
File:                     323830343a326363343a3a2f33322d313238203d3e20323635323432.roa (raw, json)
Hash identifier:          bEAWXfUt1aas/tZqqFLBAZxa4gq4COZY838rO5OLikw=
Subject key identifier:   9C:98:5D:1D:7C:E9:25:6A:A3:CC:2C:E0:98:FB:D2:ED:22:E2:F4:DB
Certificate issuer:       /CN=C086F933844AE977142A610348BAC966E4D6B7B4
Certificate serial:       23E8F6C467BDAFD883EA093E39B3A71605E546DC
Authority key identifier: C0:86:F9:33:84:4A:E9:77:14:2A:61:03:48:BA:C9:66:E4:D6:B7:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C086F933844AE977142A610348BAC966E4D6B7B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/323830343a326363343a3a2f33322d313238203d3e20323635323432.roa
Signing time:             Mon 12 Feb 2024 00:52:54 +0000
ROA not before:           Mon 12 Feb 2024 00:47:54 +0000
ROA not after:            Mon 10 Feb 2025 00:52:54 +0000
asID:                     265242
IP address blocks:        2804:2cc4::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:e8:f6:c4:67:bd:af:d8:83:ea:09:3e:39:b3:a7:16:05:e5:46:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C086F933844AE977142A610348BAC966E4D6B7B4
        Validity
            Not Before: Feb 12 00:47:54 2024 GMT
            Not After : Feb 10 00:52:54 2025 GMT
        Subject: CN=9C985D1D7CE9256AA3CC2CE098FBD2ED22E2F4DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e0:9b:7a:a5:ff:a5:6a:89:0b:9f:0d:2c:1b:
                    bb:43:17:4e:d5:3f:1a:16:08:e9:f9:99:16:e9:1c:
                    36:24:a8:30:57:1c:e0:f3:fe:0d:08:28:4c:9d:09:
                    d0:ec:6a:d5:a2:e0:79:2c:13:20:4e:d8:b1:7d:15:
                    3c:77:fc:e7:2d:f5:e4:42:41:67:8f:05:e8:44:91:
                    43:b7:40:38:c3:21:dc:a3:57:7f:7f:94:c0:bc:f0:
                    d4:81:12:69:c1:7f:63:db:d5:15:b8:fd:d3:66:43:
                    f9:75:3b:53:97:e0:48:f8:8d:d4:aa:c2:2b:da:a0:
                    ea:84:f1:ae:18:23:be:ec:bc:98:24:cc:57:24:c0:
                    54:14:1e:a0:90:ce:a5:3e:4d:2f:74:1d:22:5b:72:
                    9b:14:42:e1:08:e2:0e:07:4a:a1:5e:c2:e7:e1:6a:
                    2a:24:1a:c2:51:37:12:af:fd:81:cd:3b:1e:dc:dd:
                    7c:04:13:91:10:82:d4:ae:42:24:ff:d9:9e:6d:ae:
                    88:ed:5f:e2:82:79:33:1b:f3:44:34:5d:07:ef:11:
                    b1:5a:96:24:7b:58:a1:88:43:5d:85:95:68:c8:e4:
                    a4:76:34:66:86:fc:cc:44:27:f3:6e:83:de:48:ae:
                    fa:78:2b:5c:57:9d:df:4e:7c:a6:a6:0b:a3:2c:c3:
                    4c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:98:5D:1D:7C:E9:25:6A:A3:CC:2C:E0:98:FB:D2:ED:22:E2:F4:DB
            X509v3 Authority Key Identifier:
                keyid:C0:86:F9:33:84:4A:E9:77:14:2A:61:03:48:BA:C9:66:E4:D6:B7:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/C086F933844AE977142A610348BAC966E4D6B7B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C086F933844AE977142A610348BAC966E4D6B7B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/323830343a326363343a3a2f33322d313238203d3e20323635323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2cc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:73:bd:79:63:5e:ae:92:d8:af:79:14:bf:b9:8f:d0:a9:2d:
         93:3a:ea:71:87:f6:7d:b3:a4:20:dd:e6:30:5b:90:54:54:87:
         ab:14:5c:bf:a2:1c:39:b3:03:25:19:84:8c:72:e0:bb:4b:8b:
         c2:6e:c8:88:38:5b:4b:60:27:b2:80:8d:91:45:62:16:9e:9b:
         b2:94:24:78:16:da:aa:a5:ad:ea:7f:ee:44:24:d6:78:3b:52:
         8a:4e:db:26:b9:c8:75:e1:37:1c:22:da:04:09:57:28:2f:fd:
         ac:87:c4:dd:64:f9:93:76:73:5a:23:04:aa:37:b7:76:80:b1:
         f1:37:59:9d:29:a5:09:7e:c6:c5:d0:12:89:91:a5:4e:1f:e3:
         99:dd:63:53:43:1d:32:b1:7e:44:9b:cc:37:cd:46:2b:0f:63:
         e5:fa:ca:24:21:16:6f:74:06:ad:b0:26:de:35:4a:9c:9c:d9:
         36:da:8b:bb:8c:75:a4:7b:92:ff:52:45:8b:2d:6e:6c:f1:9d:
         6e:a7:8d:3e:4d:f8:55:84:59:c2:d0:70:6d:c0:53:67:3b:f5:
         35:fa:52:a7:1f:63:6f:b4:b6:55:25:6a:3f:f4:c8:a6:63:e1:
         4a:a5:45:72:ab:fd:72:4c:c3:14:d5:a2:ac:f1:d4:b0:13:24:
         07:ba:64:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----