Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/0/323830343a313964303a383030303a3a2f33332d3333203d3e203631383230.roa
File:                     323830343a313964303a383030303a3a2f33332d3333203d3e203631383230.roa (raw, json)
Hash identifier:          WwiyL3JhfZl6jTNsELngHwI7Ol/1bjHKbTN8T/4AUhU=
Subject key identifier:   88:2D:7C:B0:9B:3E:6B:8D:22:51:EE:67:36:53:69:CC:59:DA:98:6F
Certificate issuer:       /CN=8E53055106EEDE2F0DFBF8E2D72E71F1E4EE2C11
Certificate serial:       1646E2DB3DC0581B531DA27045C551E203CDF34B
Authority key identifier: 8E:53:05:51:06:EE:DE:2F:0D:FB:F8:E2:D7:2E:71:F1:E4:EE:2C:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E53055106EEDE2F0DFBF8E2D72E71F1E4EE2C11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/0/323830343a313964303a383030303a3a2f33332d3333203d3e203631383230.roa
Signing time:             Thu 29 Feb 2024 17:28:01 +0000
ROA not before:           Thu 29 Feb 2024 17:23:01 +0000
ROA not after:            Thu 27 Feb 2025 17:28:01 +0000
asID:                     61820
IP address blocks:        2804:19d0:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:46:e2:db:3d:c0:58:1b:53:1d:a2:70:45:c5:51:e2:03:cd:f3:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E53055106EEDE2F0DFBF8E2D72E71F1E4EE2C11
        Validity
            Not Before: Feb 29 17:23:01 2024 GMT
            Not After : Feb 27 17:28:01 2025 GMT
        Subject: CN=882D7CB09B3E6B8D2251EE67365369CC59DA986F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e6:9c:68:90:6e:b9:38:dd:28:6d:4c:99:0b:
                    02:be:06:60:10:76:91:21:0c:21:90:85:fe:fb:ff:
                    cb:84:3d:42:a3:4b:40:55:0d:b3:6e:88:1a:e6:2b:
                    6a:2d:09:1d:77:32:87:da:b5:64:29:30:aa:4c:f3:
                    d7:40:95:70:12:b8:a9:25:7f:6a:1a:63:c9:fc:a5:
                    87:af:77:79:22:f2:4d:d3:69:b7:67:ab:95:97:3e:
                    ea:6a:4f:3d:34:ab:30:9c:98:d4:44:c5:d4:48:9e:
                    c3:3f:24:52:18:11:c6:a2:eb:25:43:f3:13:7d:59:
                    49:6c:70:11:13:3c:e1:c1:74:93:b5:06:9a:32:ce:
                    89:77:f4:c2:60:68:72:c5:a4:b9:cb:b5:9d:62:30:
                    52:db:f1:b7:0a:4c:35:9b:31:f7:fa:d2:39:fc:5e:
                    6d:c9:64:b0:f4:79:50:33:1b:80:c9:34:3b:18:78:
                    8f:14:22:c5:d1:a2:de:e3:b7:81:97:08:14:a2:9d:
                    9f:5c:4a:64:78:96:3f:2f:b6:2e:8d:89:f9:89:7e:
                    58:f5:ed:ee:eb:af:a6:84:8d:29:b4:fb:5f:fa:66:
                    67:ac:33:e9:39:a3:bb:ab:50:db:69:a9:47:a3:ec:
                    e7:d4:05:34:a9:36:1f:12:9d:ab:d6:b7:7f:4c:06:
                    55:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:2D:7C:B0:9B:3E:6B:8D:22:51:EE:67:36:53:69:CC:59:DA:98:6F
            X509v3 Authority Key Identifier:
                keyid:8E:53:05:51:06:EE:DE:2F:0D:FB:F8:E2:D7:2E:71:F1:E4:EE:2C:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/0/8E53055106EEDE2F0DFBF8E2D72E71F1E4EE2C11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E53055106EEDE2F0DFBF8E2D72E71F1E4EE2C11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/0/323830343a313964303a383030303a3a2f33332d3333203d3e203631383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:19d0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         6d:35:73:fa:7d:53:0c:59:42:88:ff:d1:3d:fe:06:80:f1:11:
         99:8a:34:fe:77:78:0f:df:f0:bf:51:9a:1d:bf:68:0c:b5:40:
         26:8f:f4:09:fe:75:12:d7:ec:c6:da:75:40:78:48:ec:5f:29:
         ed:0a:bf:07:fd:2c:9f:f1:4a:d4:79:7d:43:18:f8:2e:c3:42:
         26:19:d8:79:a5:24:f4:4b:ee:c0:1f:5e:46:e5:b3:a1:b3:94:
         15:3a:ef:73:16:6f:fa:eb:c2:f8:cb:cb:ff:35:5a:88:e4:07:
         be:02:0e:7d:8c:35:4b:01:06:77:8d:31:71:36:d3:ed:13:e9:
         1a:ad:1c:fa:de:2f:25:16:39:8a:fd:80:f5:0f:6e:70:ff:88:
         13:3b:3f:8e:29:04:9c:2e:79:ca:83:57:b3:20:f6:51:60:10:
         80:e2:be:86:30:2d:fa:c4:d7:ba:ce:99:22:5a:32:f0:28:8c:
         76:27:fc:00:35:c6:7f:40:79:eb:6a:bc:cd:c9:f7:49:4c:fa:
         4b:15:db:b7:9f:5e:f4:c3:37:d4:ca:fc:94:f4:4a:99:04:39:
         3e:22:61:f2:fa:4a:9a:41:fd:b8:86:cc:5e:84:63:57:24:1b:
         76:50:cd:c9:3a:d5:57:e3:de:4a:c5:83:0d:c4:0f:64:ad:92:
         6a:11:5d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----