Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/323830343a363563383a3a2f33332d3333203d3e20323639353134.roa
File:                     323830343a363563383a3a2f33332d3333203d3e20323639353134.roa (raw, json)
Hash identifier:          oNuGPr+jxbZyNLZtWOihJ37dNBMGmJexzbO+Kt6c4+Q=
Subject key identifier:   7B:B6:E9:45:F7:2F:A8:7B:FE:BA:C5:6B:08:68:9B:E3:5E:D2:23:16
Certificate issuer:       /CN=E8214DF93C84952C85789DC14F08528DEBA22E43
Certificate serial:       1BA73B838F1792C07358D842E78E857092433D3B
Authority key identifier: E8:21:4D:F9:3C:84:95:2C:85:78:9D:C1:4F:08:52:8D:EB:A2:2E:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8214DF93C84952C85789DC14F08528DEBA22E43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/323830343a363563383a3a2f33332d3333203d3e20323639353134.roa
Signing time:             Tue 07 Nov 2023 15:10:47 +0000
ROA not before:           Tue 07 Nov 2023 15:05:47 +0000
ROA not after:            Tue 05 Nov 2024 15:10:47 +0000
asID:                     269514
IP address blocks:        2804:65c8::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:a7:3b:83:8f:17:92:c0:73:58:d8:42:e7:8e:85:70:92:43:3d:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8214DF93C84952C85789DC14F08528DEBA22E43
        Validity
            Not Before: Nov  7 15:05:47 2023 GMT
            Not After : Nov  5 15:10:47 2024 GMT
        Subject: CN=7BB6E945F72FA87BFEBAC56B08689BE35ED22316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:59:ef:92:40:9c:87:25:72:a1:0d:93:ae:4f:
                    d2:61:0a:3f:62:b6:0e:8a:10:8c:94:de:c6:90:e6:
                    d3:76:33:0c:62:62:99:ad:fb:fb:d6:10:2d:91:e3:
                    71:c2:af:d1:87:9d:78:f4:cf:9a:85:58:e1:c0:83:
                    5d:db:51:62:91:f9:6e:f2:d2:8a:e6:90:84:10:70:
                    6c:f4:b8:89:a5:2f:78:bb:e8:70:ab:72:bc:ea:f6:
                    1a:71:a3:e0:61:85:f3:2b:ab:d2:fc:70:01:a2:50:
                    b4:0f:76:3e:a0:13:49:34:18:a2:24:ba:0d:bf:80:
                    61:4f:73:3b:a4:dc:3a:fc:2a:96:46:1e:71:32:49:
                    d8:58:40:98:51:94:1d:c1:8b:69:da:5b:18:7a:27:
                    c3:29:7d:65:58:ee:18:b3:5e:73:a5:fc:33:b8:7a:
                    98:1d:d1:a3:ea:61:4e:c3:27:8c:8b:f2:4f:85:81:
                    ac:f0:e7:a3:b3:90:06:6d:f0:8a:9a:7f:60:43:d4:
                    6d:7f:ca:74:0a:0a:18:d8:ad:27:20:8a:ee:88:82:
                    e4:ed:56:ea:19:41:5e:bc:64:dc:3c:34:05:4a:2a:
                    84:d0:94:3d:73:95:14:b2:21:57:5f:10:ba:4a:52:
                    97:ea:04:24:78:44:e9:91:f9:67:2f:e3:7d:a3:fb:
                    54:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B6:E9:45:F7:2F:A8:7B:FE:BA:C5:6B:08:68:9B:E3:5E:D2:23:16
            X509v3 Authority Key Identifier:
                keyid:E8:21:4D:F9:3C:84:95:2C:85:78:9D:C1:4F:08:52:8D:EB:A2:2E:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/E8214DF93C84952C85789DC14F08528DEBA22E43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8214DF93C84952C85789DC14F08528DEBA22E43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/323830343a363563383a3a2f33332d3333203d3e20323639353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65c8::/33

    Signature Algorithm: sha256WithRSAEncryption
         75:47:80:9a:04:43:4f:d1:a1:90:e7:9b:34:b3:75:5f:a3:c7:
         6f:9b:ff:c7:4d:10:20:c3:22:7b:cf:da:6a:d0:98:ba:48:97:
         76:a8:71:67:96:5d:f5:17:8a:ca:38:f7:b7:2c:4c:9a:a6:72:
         1c:56:8e:ad:1d:1a:5e:ff:f8:af:ff:d3:e3:f0:30:80:f9:f6:
         87:f5:4a:78:ea:db:90:90:bb:4c:2d:60:32:a1:bc:49:c5:4e:
         60:db:72:24:78:00:53:d5:93:89:5a:c7:89:99:2b:1c:5e:f4:
         c5:dd:67:bf:58:a6:85:bf:6b:5f:e8:98:7c:38:00:fd:30:37:
         7b:46:bb:f7:61:3d:ae:97:0f:ed:5d:4d:93:61:e0:66:a5:56:
         8d:f2:af:23:06:24:01:7a:67:2b:2b:bd:38:98:7f:a1:a0:ab:
         89:c1:21:de:fa:79:4f:a5:27:a8:f9:08:b7:69:c3:e0:59:9b:
         b4:68:d4:75:d3:5c:02:98:42:33:a7:44:78:3d:a7:2e:24:e3:
         5c:2f:6d:0e:0e:d2:48:0c:1b:e4:e2:55:59:9d:ef:e1:72:46:
         18:b4:86:12:26:5f:f3:49:8d:b5:c6:7e:8d:d4:de:3e:c8:ca:
         9d:05:7f:c2:a5:82:c8:08:43:d2:d4:b3:d3:3d:c1:99:3c:c7:
         99:b5:14:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----