Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a3a2f33332d3333203d3e20323638363738.roa
File:                     323830343a353465633a3a2f33332d3333203d3e20323638363738.roa (raw, json)
Hash identifier:          6TBJtw5iuYx19f841r95E5/PXirjJakfQ7dLdhNuVTw=
Subject key identifier:   52:85:C3:EF:73:24:19:4D:AC:B4:B3:9F:5E:30:E1:E2:89:45:6D:76
Certificate issuer:       /CN=16E394B7AD89042F1F54B813EC0DA6DE112EC0D1
Certificate serial:       628DFE49E8B203ABF93A16F90442FE9D33483FA8
Authority key identifier: 16:E3:94:B7:AD:89:04:2F:1F:54:B8:13:EC:0D:A6:DE:11:2E:C0:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16E394B7AD89042F1F54B813EC0DA6DE112EC0D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a3a2f33332d3333203d3e20323638363738.roa
Signing time:             Wed 14 Feb 2024 20:09:52 +0000
ROA not before:           Wed 14 Feb 2024 20:04:52 +0000
ROA not after:            Wed 12 Feb 2025 20:09:52 +0000
asID:                     268678
IP address blocks:        2804:54ec::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:8d:fe:49:e8:b2:03:ab:f9:3a:16:f9:04:42:fe:9d:33:48:3f:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16E394B7AD89042F1F54B813EC0DA6DE112EC0D1
        Validity
            Not Before: Feb 14 20:04:52 2024 GMT
            Not After : Feb 12 20:09:52 2025 GMT
        Subject: CN=5285C3EF7324194DACB4B39F5E30E1E289456D76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d0:d2:54:bf:00:0b:8b:3e:50:b9:56:a2:84:
                    45:a9:09:4c:0b:73:f4:ab:f9:f0:bb:ca:06:15:5c:
                    2c:ed:5b:83:34:57:73:4d:a6:51:84:a7:bb:d3:bb:
                    74:a1:8f:a8:5d:f3:82:dc:fa:d7:5a:83:f6:4c:3e:
                    02:37:5c:1d:db:8d:a5:e6:e6:01:69:9c:ff:24:08:
                    96:b9:8b:7e:58:db:e7:4e:bf:b8:97:8c:28:45:0f:
                    d5:b5:39:62:1b:df:ae:f3:69:e8:4a:b1:25:87:94:
                    11:da:41:ab:b4:b3:32:4a:f7:3f:da:28:c1:f9:ea:
                    21:91:ac:29:fc:ac:14:f5:56:2f:04:e8:ac:0e:a9:
                    4a:1c:bd:4c:aa:4f:4d:8a:85:54:25:9a:41:a3:0b:
                    87:17:9f:ec:e6:1f:c1:64:51:5f:7c:13:bd:56:80:
                    92:da:bd:e8:90:52:87:65:87:42:4f:2f:67:5c:04:
                    7e:55:d7:38:47:4e:07:94:9a:9c:21:88:60:f9:6a:
                    99:49:2c:d7:42:fb:7f:ba:12:67:c3:51:59:64:7a:
                    08:25:b5:50:03:fd:e1:dc:4f:3a:19:85:0d:c7:64:
                    4a:ff:87:e9:7e:db:80:40:5d:c5:25:c8:5e:bc:f7:
                    50:de:82:02:8e:cc:1a:db:81:7f:bc:24:81:6a:77:
                    c5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:85:C3:EF:73:24:19:4D:AC:B4:B3:9F:5E:30:E1:E2:89:45:6D:76
            X509v3 Authority Key Identifier:
                keyid:16:E3:94:B7:AD:89:04:2F:1F:54:B8:13:EC:0D:A6:DE:11:2E:C0:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/16E394B7AD89042F1F54B813EC0DA6DE112EC0D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16E394B7AD89042F1F54B813EC0DA6DE112EC0D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a3a2f33332d3333203d3e20323638363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54ec::/33

    Signature Algorithm: sha256WithRSAEncryption
         c9:75:9f:b9:4c:2c:6c:cf:4d:fa:d3:fe:3a:71:26:72:da:0a:
         ce:74:97:bb:53:18:db:98:04:66:33:82:41:69:0f:5d:a4:2b:
         65:66:69:3f:99:7f:cb:62:6c:b5:d0:f0:0f:fb:5e:a4:76:50:
         ce:14:80:48:63:a0:0a:c5:bc:b3:18:0e:e4:22:ae:a7:79:89:
         f3:84:09:ae:db:01:58:4f:29:40:24:6e:81:e8:74:b0:68:c9:
         ef:7a:dd:c2:1a:28:92:57:fe:56:0d:b0:19:39:d0:11:f2:50:
         91:71:d4:0c:35:d1:d1:6a:46:b9:be:59:72:28:8b:95:da:92:
         04:3d:bf:1f:4e:05:01:9a:43:24:c7:a0:26:28:3d:76:f0:72:
         7f:24:bf:60:25:11:0c:a8:d5:8d:68:9e:25:ef:e3:4b:65:38:
         0e:1c:53:13:df:b1:dd:45:7c:c8:ba:6d:7e:de:40:25:31:86:
         91:fa:8b:10:f9:d8:c4:0e:76:87:4d:a8:a7:c4:e6:0c:7e:f0:
         5f:fe:f0:87:f3:c8:98:02:dc:5c:d5:78:31:84:86:27:7e:96:
         fd:c8:94:17:cc:cd:99:8b:88:ec:92:9f:18:55:bb:8d:8e:52:
         14:b8:1d:72:b3:3f:7c:5d:4e:17:61:51:dd:ca:2e:d2:78:b4:
         1b:ea:0d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----