Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/323830343a353230383a383030303a3a2f34382d3438203d3e203238353934.roa
File:                     323830343a353230383a383030303a3a2f34382d3438203d3e203238353934.roa (raw, json)
Hash identifier:          rTxcJsWz4Vws0JTMzNuum1IcgzN4d7CsxSn8pftxd48=
Subject key identifier:   6A:E7:96:D1:18:71:93:BD:16:A8:FE:45:7A:CA:1D:53:78:64:6D:F3
Certificate issuer:       /CN=FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54
Certificate serial:       2F4FB25DD49E3965EA01703F81125C5B093F53DA
Authority key identifier: FA:E4:EF:6F:4B:DB:EA:3F:80:BA:4A:0C:9E:E6:C6:D0:EE:C8:EB:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/323830343a353230383a383030303a3a2f34382d3438203d3e203238353934.roa
Signing time:             Wed 20 Sep 2023 13:22:47 +0000
ROA not before:           Wed 20 Sep 2023 13:17:47 +0000
ROA not after:            Wed 18 Sep 2024 13:22:47 +0000
asID:                     28594
IP address blocks:        2804:5208:8000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:4f:b2:5d:d4:9e:39:65:ea:01:70:3f:81:12:5c:5b:09:3f:53:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54
        Validity
            Not Before: Sep 20 13:17:47 2023 GMT
            Not After : Sep 18 13:22:47 2024 GMT
        Subject: CN=6AE796D1187193BD16A8FE457ACA1D5378646DF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e6:b8:97:34:b1:16:db:6f:47:04:d1:3e:6c:
                    71:11:ff:6e:1a:3c:f1:cb:78:1e:c9:2e:80:92:5e:
                    6e:9b:02:92:18:2e:54:3b:45:0e:bd:d5:a5:78:17:
                    bf:24:59:c7:b6:a9:bb:79:57:0c:80:69:a7:0c:42:
                    08:3e:4d:cd:70:dd:00:f6:bc:82:5d:7d:01:d4:29:
                    ea:0c:60:41:1c:79:eb:c3:89:53:bc:64:d8:e9:44:
                    20:59:e1:9e:6f:a4:fd:11:26:20:24:70:9e:66:dc:
                    83:24:fa:ee:bd:f8:7c:79:2a:14:51:f8:4c:81:ff:
                    24:cf:71:ad:2a:42:5f:d9:c2:e6:ef:8e:a8:6f:29:
                    d0:5a:4b:0e:73:c0:b2:a7:77:49:a8:c5:67:24:42:
                    d8:96:90:13:72:62:a4:c6:b2:65:d7:53:06:c4:22:
                    81:87:08:23:96:e5:1b:e5:6e:53:42:b2:a3:9d:07:
                    13:6f:d9:b8:d9:99:84:9c:2d:55:d3:81:d5:61:81:
                    dd:3f:e4:69:86:a5:fd:41:bc:e5:26:5d:59:c8:3c:
                    8f:e0:aa:72:89:33:77:c6:99:25:7e:19:ee:1a:7f:
                    b7:94:4a:aa:af:49:26:e4:1a:ca:88:2e:c4:de:92:
                    ba:62:8d:cf:d9:d5:77:c1:25:04:d0:dc:2e:a7:37:
                    ee:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E7:96:D1:18:71:93:BD:16:A8:FE:45:7A:CA:1D:53:78:64:6D:F3
            X509v3 Authority Key Identifier:
                keyid:FA:E4:EF:6F:4B:DB:EA:3F:80:BA:4A:0C:9E:E6:C6:D0:EE:C8:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/323830343a353230383a383030303a3a2f34382d3438203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5208:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:4d:d2:46:a3:0d:d1:53:68:71:3f:97:0e:3d:c1:c8:50:ba:
         a2:36:26:a7:2e:27:a2:14:fb:90:5a:70:c8:5b:e7:76:9a:49:
         cd:bb:78:e8:f6:aa:41:e4:e3:40:1d:a3:1f:9c:98:1d:cc:3d:
         8d:17:d5:50:d5:67:61:7c:ba:3c:0c:dd:27:cc:85:db:10:89:
         65:c4:c9:12:ae:29:c9:4b:f9:ce:7a:8f:6b:7b:7b:e1:d6:4b:
         c0:d8:03:b1:6a:cd:77:c5:54:aa:f7:84:95:3e:40:d1:c4:3b:
         2e:b7:99:6c:e9:3e:3f:f4:53:c5:3e:91:3a:c5:e6:41:d6:c0:
         d4:aa:ba:89:79:d7:13:fe:66:a5:bf:59:05:a2:7f:46:ff:78:
         21:56:69:0e:3e:f1:1f:aa:b1:69:c0:62:d2:7a:ba:60:4a:57:
         e1:c0:97:03:7b:82:e8:9b:25:0e:82:3f:8f:a4:88:77:54:ca:
         03:7f:ab:01:89:37:17:e6:5d:c8:ea:a8:28:85:4c:e6:90:6a:
         65:7e:70:34:57:e2:39:88:b9:c7:1d:4a:c0:87:83:01:3e:a0:
         92:06:ce:63:c9:48:b8:84:04:82:92:cd:10:8d:4a:fd:ce:7c:
         52:22:27:6c:08:10:fb:73:c5:ff:06:e5:01:8f:ee:c4:c2:57:
         39:fd:7b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----