Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/323830343a363830303a633030303a3a2f33342d3334203d3e20323639363634.roa
File:                     323830343a363830303a633030303a3a2f33342d3334203d3e20323639363634.roa (raw, json)
Hash identifier:          BSyENf11tYQTgxU2KjIV7MsDtH+3RrTPTG5c1E1MXG4=
Subject key identifier:   E9:2F:5A:76:94:BA:F8:84:CA:2A:04:44:DA:3E:69:3C:9C:E2:A0:73
Certificate issuer:       /CN=56D3BF882CDB74384D2E127BE22B36BC31C29243
Certificate serial:       1AE14B0F3FF4B6D3AFEFCC7386B442A5936A49F5
Authority key identifier: 56:D3:BF:88:2C:DB:74:38:4D:2E:12:7B:E2:2B:36:BC:31:C2:92:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56D3BF882CDB74384D2E127BE22B36BC31C29243.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/323830343a363830303a633030303a3a2f33342d3334203d3e20323639363634.roa
Signing time:             Mon 18 Dec 2023 19:17:36 +0000
ROA not before:           Mon 18 Dec 2023 19:12:36 +0000
ROA not after:            Mon 16 Dec 2024 19:17:36 +0000
asID:                     269664
IP address blocks:        2804:6800:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e1:4b:0f:3f:f4:b6:d3:af:ef:cc:73:86:b4:42:a5:93:6a:49:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56D3BF882CDB74384D2E127BE22B36BC31C29243
        Validity
            Not Before: Dec 18 19:12:36 2023 GMT
            Not After : Dec 16 19:17:36 2024 GMT
        Subject: CN=E92F5A7694BAF884CA2A0444DA3E693C9CE2A073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:34:42:92:c6:1a:3e:c0:83:28:83:1f:65:ca:
                    6a:b5:a5:53:46:84:ef:b1:1a:03:f6:cb:0a:a2:af:
                    43:b2:07:d4:9e:35:9b:57:95:50:fa:7f:f4:c1:78:
                    e5:84:90:1f:fd:78:8f:17:c1:9d:73:14:85:c5:7e:
                    bd:27:43:4c:00:1a:1b:22:a8:c3:34:f4:0e:28:4b:
                    a4:a7:5f:47:e5:01:6b:d2:1f:78:8a:a9:4d:9a:5a:
                    00:6f:91:2c:3d:9c:39:44:01:98:3c:f6:9c:39:50:
                    e2:79:0b:21:35:c8:90:cf:1e:1d:cc:1f:49:0a:01:
                    12:9b:29:14:3a:a9:66:17:48:1a:60:d7:5d:29:32:
                    75:7b:53:cc:7a:ef:31:e8:8b:02:90:8a:d1:34:6b:
                    4d:45:6e:31:9f:31:4f:f7:f7:b0:b7:46:10:d3:3c:
                    3e:e7:fd:1d:a2:72:6d:a3:08:be:8a:b1:b6:ec:cc:
                    c7:5e:4a:5a:35:b5:70:ce:56:8b:55:f9:53:64:70:
                    d6:64:fc:7d:f5:4e:fd:19:25:8d:30:c1:86:13:e5:
                    59:a9:fa:88:27:14:d7:73:6e:12:1b:60:89:02:10:
                    a7:2f:b8:fa:49:e1:3e:f1:e8:cf:63:17:53:2c:14:
                    18:35:e0:9a:f5:f1:91:c2:f2:e4:cc:24:c2:18:b3:
                    18:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:2F:5A:76:94:BA:F8:84:CA:2A:04:44:DA:3E:69:3C:9C:E2:A0:73
            X509v3 Authority Key Identifier:
                keyid:56:D3:BF:88:2C:DB:74:38:4D:2E:12:7B:E2:2B:36:BC:31:C2:92:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/56D3BF882CDB74384D2E127BE22B36BC31C29243.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56D3BF882CDB74384D2E127BE22B36BC31C29243.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/323830343a363830303a633030303a3a2f33342d3334203d3e20323639363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6800:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0f:fb:5a:7f:31:8e:4f:c9:06:ed:b7:85:24:a1:e1:e0:ef:d0:
         09:6a:3e:a5:ee:45:95:7e:67:4f:cc:fe:65:0e:56:a0:2c:f4:
         f9:05:78:70:4b:f7:98:c4:ee:a7:31:3a:be:aa:f5:1c:45:e7:
         38:e1:2a:3c:db:69:25:41:5f:bf:b3:34:04:83:a2:45:11:cf:
         7d:67:95:71:ae:c9:d5:54:14:3c:ac:4a:e4:17:97:ea:db:b8:
         cc:98:8b:6c:4e:8e:6b:39:d4:e6:c6:05:29:8b:e8:71:95:83:
         df:b5:75:84:ba:03:07:0a:b0:49:62:0b:66:17:2e:42:a9:be:
         87:5e:73:d7:48:08:2c:54:9a:a4:31:e8:35:b7:b7:0c:da:ca:
         bd:3c:a7:08:bc:30:5b:30:04:44:0c:94:3d:67:84:eb:b2:45:
         87:8b:4d:c4:f5:4a:fa:7c:56:fa:f0:19:19:53:81:9b:7d:1e:
         a8:b1:1a:c1:15:4a:75:d9:9e:d6:94:70:40:04:89:5c:c7:b1:
         8a:20:42:73:c9:c7:88:6b:c6:99:8c:2e:44:b6:52:d7:c3:cc:
         34:d9:3c:6e:87:7a:3b:7f:e7:c6:bf:1e:4b:5c:49:a2:31:65:
         b4:f0:69:9e:04:d0:cf:0f:c9:fd:06:d6:8c:71:12:d4:9d:81:
         fb:0c:c6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----