Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a3a2f33322d3334203d3e20323637393432.roa
File:                     323830343a353539303a3a2f33322d3334203d3e20323637393432.roa (raw, json)
Hash identifier:          DUkSay2205ZpKc2rZ+l2vZo47qShwybcTHXM1vRbXHg=
Subject key identifier:   88:26:24:07:5A:27:DB:94:A2:D3:08:17:69:E3:32:E9:2E:2A:EA:38
Certificate issuer:       /CN=AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73
Certificate serial:       6BDCF7B27946F84304AEDC1B20B6F9D8486DD38C
Authority key identifier: AF:BE:5F:9D:8B:8C:17:D6:EB:A4:E6:94:F3:6F:C1:E7:9F:50:FF:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a3a2f33322d3334203d3e20323637393432.roa
Signing time:             Mon 19 Feb 2024 20:57:23 +0000
ROA not before:           Mon 19 Feb 2024 20:52:23 +0000
ROA not after:            Mon 17 Feb 2025 20:57:23 +0000
asID:                     267942
IP address blocks:        2804:5590::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:dc:f7:b2:79:46:f8:43:04:ae:dc:1b:20:b6:f9:d8:48:6d:d3:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73
        Validity
            Not Before: Feb 19 20:52:23 2024 GMT
            Not After : Feb 17 20:57:23 2025 GMT
        Subject: CN=882624075A27DB94A2D3081769E332E92E2AEA38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:40:4b:61:f2:cb:19:c5:9e:6f:45:aa:48:7b:
                    36:00:41:d2:fb:f1:99:07:21:6c:00:65:b9:6a:b3:
                    56:ee:8e:48:ce:3e:7b:c7:73:74:77:ee:df:a4:6b:
                    9d:ff:a1:33:72:c9:6a:6d:a8:55:26:57:5a:e1:b5:
                    1c:c4:8d:ed:a8:9b:21:e9:1e:e6:6d:ee:70:38:7e:
                    04:eb:3f:35:c3:00:4e:46:27:c7:8a:16:60:b9:ab:
                    19:f3:ef:7f:8c:d1:da:b7:dd:17:c2:d3:d1:97:d5:
                    fc:e2:6c:b3:ff:42:21:6b:2f:19:28:61:ea:bd:fe:
                    07:e7:42:9c:2e:62:88:28:7a:6d:20:a7:61:52:c1:
                    3b:ac:ca:2e:29:09:74:6b:c9:7d:a1:c1:db:99:1b:
                    e1:75:8a:e7:4c:91:b6:91:95:95:aa:c4:c3:1e:a9:
                    1f:c7:3f:0b:d8:7f:7b:ac:76:84:15:44:15:31:73:
                    f0:48:fb:4d:95:86:e4:ea:18:44:ba:6a:8f:cd:cc:
                    0e:d3:9b:3d:b4:a3:10:08:a1:75:64:9e:b7:d5:02:
                    d9:13:2e:9f:d6:a6:a6:3b:89:66:ab:9b:23:61:e1:
                    d2:20:05:f4:46:b5:1a:e7:5a:2f:b1:f6:48:27:c0:
                    06:b9:a0:c5:5b:58:eb:b3:79:68:31:25:bc:1f:bd:
                    c5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:26:24:07:5A:27:DB:94:A2:D3:08:17:69:E3:32:E9:2E:2A:EA:38
            X509v3 Authority Key Identifier:
                keyid:AF:BE:5F:9D:8B:8C:17:D6:EB:A4:E6:94:F3:6F:C1:E7:9F:50:FF:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a3a2f33322d3334203d3e20323637393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5590::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:7f:77:e0:37:6d:7d:76:9b:7e:1f:e5:8f:5d:bf:cb:67:41:
         e9:3a:5b:dd:2f:77:fe:fd:f5:3e:00:0c:3d:86:68:d1:8c:05:
         bd:95:d8:4f:f9:9e:bf:db:84:b9:28:dd:96:6e:46:fd:d6:89:
         31:b8:40:b5:cf:0a:f1:5b:9b:76:72:bc:f1:ee:8a:4a:9a:cb:
         eb:87:ca:01:7c:3e:7a:c9:9d:81:49:6a:7d:a5:78:a3:a5:a2:
         e2:d8:2b:68:e0:3e:85:9d:0f:9b:2b:f0:ce:ad:2f:ab:fd:23:
         89:4f:c1:91:9d:86:6d:6d:71:25:81:51:8b:dd:91:c3:17:4c:
         d4:9c:d1:d3:82:50:d8:20:0f:94:80:e2:9f:85:e7:1e:4b:74:
         6b:30:1f:a9:b8:f0:ad:7e:b4:cd:6a:ee:4e:e8:c9:6a:20:1f:
         71:79:2b:92:ec:13:b8:0b:14:7a:08:84:62:82:e7:82:54:3c:
         45:48:37:f7:34:5b:bd:de:22:b5:d5:f9:c1:22:53:28:a8:a6:
         e0:b6:80:07:e9:81:35:9d:60:34:63:4f:e8:9b:94:12:b9:69:
         6f:c3:2f:26:62:3c:09:b0:55:ac:18:48:a6:0c:da:57:71:81:
         ea:a2:6f:b5:30:a6:85:ed:35:be:90:08:bc:87:a7:c9:52:4f:
         9c:47:18:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----