Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/323830343a356163633a3a2f33322d3336203d3e20323638373937.roa
File:                     323830343a356163633a3a2f33322d3336203d3e20323638373937.roa (raw, json)
Hash identifier:          iftgszCxo7R73vdeIW6Q2Xz5AUgbMEyTkyAZXTqiEUs=
Subject key identifier:   D5:77:9C:17:01:09:C7:9E:EC:74:D4:4B:8E:49:42:C0:22:87:50:48
Certificate issuer:       /CN=B584B98A8771D2CECC7673116562082E67430EE0
Certificate serial:       17C9E3C639235DA6EF13B82BFC35CB030C706803
Authority key identifier: B5:84:B9:8A:87:71:D2:CE:CC:76:73:11:65:62:08:2E:67:43:0E:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B584B98A8771D2CECC7673116562082E67430EE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/323830343a356163633a3a2f33322d3336203d3e20323638373937.roa
Signing time:             Thu 15 Feb 2024 03:36:37 +0000
ROA not before:           Thu 15 Feb 2024 03:31:37 +0000
ROA not after:            Thu 13 Feb 2025 03:36:37 +0000
asID:                     268797
IP address blocks:        2804:5acc::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:c9:e3:c6:39:23:5d:a6:ef:13:b8:2b:fc:35:cb:03:0c:70:68:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B584B98A8771D2CECC7673116562082E67430EE0
        Validity
            Not Before: Feb 15 03:31:37 2024 GMT
            Not After : Feb 13 03:36:37 2025 GMT
        Subject: CN=D5779C170109C79EEC74D44B8E4942C022875048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a4:85:fb:bd:4c:25:a1:3f:65:27:db:99:0f:
                    14:36:07:f6:96:d1:40:c3:3e:0d:02:22:22:82:0a:
                    c7:71:d9:aa:e0:b2:0f:6e:e2:d0:2b:d0:b2:3e:2b:
                    47:97:fc:e7:5f:01:8e:b7:89:fa:dd:7c:17:e2:fb:
                    aa:d9:a7:a2:22:87:61:39:fd:f2:7a:ed:f7:91:d5:
                    fd:41:30:6d:ca:40:20:34:2b:c9:3d:5a:c2:0e:76:
                    63:27:d1:a8:3e:f9:38:17:7c:95:51:80:47:f1:d0:
                    df:1e:8c:eb:82:00:67:5f:c7:bf:81:10:6f:61:51:
                    36:ba:d7:76:a2:64:c4:f2:ac:45:48:fa:c3:77:22:
                    99:10:59:9f:a8:99:49:13:ee:c3:09:28:49:96:e9:
                    ca:0b:e2:d1:d7:56:32:32:9c:b4:fa:8b:66:92:0e:
                    fa:5d:0c:13:69:01:45:38:3e:9e:d4:a8:59:7c:52:
                    51:ef:51:e0:bc:64:5a:c0:75:55:88:28:68:5b:13:
                    bb:e1:7c:97:2a:82:06:e3:86:e6:90:e5:da:d4:ef:
                    7a:e4:44:ba:44:51:79:3f:a9:c0:ee:0d:71:98:09:
                    ff:0b:02:53:92:7e:78:38:85:fd:43:31:b9:25:51:
                    70:7f:99:35:14:41:3e:c1:b2:b6:a8:16:67:e7:51:
                    bd:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:77:9C:17:01:09:C7:9E:EC:74:D4:4B:8E:49:42:C0:22:87:50:48
            X509v3 Authority Key Identifier:
                keyid:B5:84:B9:8A:87:71:D2:CE:CC:76:73:11:65:62:08:2E:67:43:0E:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/B584B98A8771D2CECC7673116562082E67430EE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B584B98A8771D2CECC7673116562082E67430EE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/323830343a356163633a3a2f33322d3336203d3e20323638373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5acc::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:35:df:16:b0:c0:10:05:33:b8:67:21:11:3c:00:ae:24:64:
         04:83:02:c2:e8:3f:6e:24:b3:e7:43:72:50:0d:7f:b1:56:b7:
         6d:d0:c3:b0:1d:a2:69:0f:fa:49:2a:76:ec:a7:cc:82:45:fa:
         bf:6b:24:6a:3a:16:7c:3e:f7:85:9f:1b:54:b3:94:d4:2d:03:
         76:51:ee:45:36:5e:78:c9:31:92:d7:e9:a9:3c:28:d9:21:89:
         1f:43:18:ac:0a:d3:f1:82:e6:24:09:86:04:15:88:87:32:34:
         a3:aa:90:bd:7a:f9:9c:83:c4:36:7f:e3:19:b8:0c:31:a4:ce:
         28:90:81:0b:c5:a4:01:a5:cf:9b:5e:13:a8:94:18:09:38:8d:
         8c:e6:c0:51:36:e0:58:6b:c8:a5:6f:e8:cd:dd:e9:9d:34:ac:
         eb:fd:db:32:1d:3c:d7:e2:4b:05:c3:0f:33:ac:65:e4:f0:c7:
         8e:5b:b9:42:93:1f:3a:35:bf:ce:e4:48:90:18:df:74:32:a5:
         fa:c0:89:4f:b7:0f:fc:2b:03:32:73:88:b8:2e:e5:17:51:81:
         b9:af:dc:46:5e:28:a0:5f:d6:2b:80:cf:89:87:1b:0f:f6:25:
         9e:0b:4c:f4:cd:42:2b:da:10:5f:5e:10:95:83:6c:eb:ec:23:
         e8:4d:01:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----