Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/0/323830343a323762633a3a2f33322d3438203d3e20323633393139.roa
File:                     323830343a323762633a3a2f33322d3438203d3e20323633393139.roa (raw, json)
Hash identifier:          MwBRDpRCZhkfevGbBx5VZ6a71vdx5CZuKT85D/FJIpI=
Subject key identifier:   0E:3C:BA:5A:A5:4D:5B:B7:5C:7E:61:E6:52:B1:2B:8F:07:2E:70:02
Certificate issuer:       /CN=53DBD8550574BFB1767083FAD3A327CD5351750E
Certificate serial:       4235B78780DAB30E7E3B629CE614ED979605FAE0
Authority key identifier: 53:DB:D8:55:05:74:BF:B1:76:70:83:FA:D3:A3:27:CD:53:51:75:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53DBD8550574BFB1767083FAD3A327CD5351750E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/0/323830343a323762633a3a2f33322d3438203d3e20323633393139.roa
Signing time:             Fri 22 Sep 2023 03:52:42 +0000
ROA not before:           Fri 22 Sep 2023 03:47:42 +0000
ROA not after:            Fri 20 Sep 2024 03:52:42 +0000
asID:                     263919
IP address blocks:        2804:27bc::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:35:b7:87:80:da:b3:0e:7e:3b:62:9c:e6:14:ed:97:96:05:fa:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53DBD8550574BFB1767083FAD3A327CD5351750E
        Validity
            Not Before: Sep 22 03:47:42 2023 GMT
            Not After : Sep 20 03:52:42 2024 GMT
        Subject: CN=0E3CBA5AA54D5BB75C7E61E652B12B8F072E7002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9a:6c:a8:11:34:b2:3f:10:ad:f4:e6:97:73:
                    e7:e3:ed:62:65:e8:84:ae:3c:b2:6e:b1:52:56:88:
                    7b:e8:6f:2f:03:7f:80:27:c6:74:a9:d2:63:fd:82:
                    f4:cc:52:cb:58:94:8d:0c:e4:6f:01:bd:c3:16:0c:
                    87:80:dd:96:20:c3:73:88:ed:04:71:08:d2:e2:92:
                    c4:21:9a:c2:59:29:b4:a2:ae:9f:99:d7:5a:b9:fe:
                    66:3e:1f:7b:49:51:d0:0f:f5:01:18:8d:5a:56:69:
                    c2:4f:27:18:78:2a:03:c4:85:09:9a:58:db:2f:03:
                    9f:9c:a4:c1:dd:b8:c0:03:f0:2f:71:59:7e:48:60:
                    d1:f0:bd:c2:e4:9f:8c:fa:0b:40:21:52:d1:3e:f8:
                    12:29:68:9b:34:38:84:6c:fc:e6:b9:f6:a9:c7:17:
                    52:40:1c:ff:23:41:95:3b:48:6f:cc:8d:0e:ba:31:
                    38:1d:8f:bb:4b:fb:b3:97:2c:23:81:e7:f5:c9:4d:
                    6f:e2:e1:25:bd:01:83:d2:a4:f4:10:69:13:ac:1c:
                    2b:ce:52:03:5e:bd:ab:83:35:83:d8:7c:04:bd:46:
                    8d:25:9b:39:0f:a8:61:f4:8c:27:58:5f:1d:c5:e0:
                    b7:f0:9b:4c:8a:04:f8:17:56:28:b2:b1:a0:d2:c5:
                    66:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:3C:BA:5A:A5:4D:5B:B7:5C:7E:61:E6:52:B1:2B:8F:07:2E:70:02
            X509v3 Authority Key Identifier:
                keyid:53:DB:D8:55:05:74:BF:B1:76:70:83:FA:D3:A3:27:CD:53:51:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/0/53DBD8550574BFB1767083FAD3A327CD5351750E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53DBD8550574BFB1767083FAD3A327CD5351750E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/0/323830343a323762633a3a2f33322d3438203d3e20323633393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         bf:bf:c6:d6:f4:0e:1a:b8:3f:f7:75:7b:d4:e5:57:19:bf:f5:
         c5:3b:5c:d0:87:07:42:ca:b1:1b:16:99:c9:2d:da:7d:8d:71:
         93:88:05:21:b9:2b:38:5e:f6:22:46:2e:8a:00:ba:fe:61:b5:
         e5:8f:bc:00:9f:00:6c:63:22:6e:38:93:ec:9c:90:6f:a7:d4:
         d3:0e:82:6e:95:72:ce:e1:15:1b:07:1e:f8:05:af:8c:32:e6:
         d0:60:52:f6:0a:76:ce:bb:d4:62:56:a8:63:96:3a:21:e3:1f:
         30:ce:83:ca:03:6a:d3:63:1e:0d:61:24:00:cd:79:9a:8e:35:
         72:e0:e1:ca:c9:f6:83:5f:2e:38:58:13:04:d1:74:e0:7d:d2:
         19:9b:46:ed:b1:8c:51:76:01:4f:85:c2:00:57:36:23:47:c6:
         39:61:10:5e:86:08:d2:82:bb:bd:55:cf:df:71:f8:fb:f9:81:
         88:db:fe:e1:ca:18:f2:e8:99:63:39:49:bc:c2:91:06:66:2d:
         98:f8:04:2b:f8:ba:87:7f:30:27:36:82:09:23:27:80:27:7e:
         d5:cf:0c:28:7a:37:3b:83:a4:d8:e8:d6:1b:fc:1e:ce:4e:d8:
         8c:aa:5b:ae:33:fc:2b:3e:e7:7d:fe:43:0c:58:a6:38:a4:2a:
         1b:5d:a0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----