Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/323830343a333136343a383030303a3a2f33332d3333203d3e20323635303131.roa
File:                     323830343a333136343a383030303a3a2f33332d3333203d3e20323635303131.roa (raw, json)
Hash identifier:          i2mnhnxTWIQUp5oCwhl2g+9J5TAABHEb1YnmQp6uOsY=
Subject key identifier:   B3:2A:D8:85:39:71:AF:6B:52:61:D4:EE:2F:5F:CC:41:8A:C3:DA:93
Certificate issuer:       /CN=8545ED852E6BA88695268C3F3DB0FF2B57345AAD
Certificate serial:       05EC25B3EE0B2253A6A592054FB77FEAAEBCF946
Authority key identifier: 85:45:ED:85:2E:6B:A8:86:95:26:8C:3F:3D:B0:FF:2B:57:34:5A:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8545ED852E6BA88695268C3F3DB0FF2B57345AAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/323830343a333136343a383030303a3a2f33332d3333203d3e20323635303131.roa
Signing time:             Wed 20 Mar 2024 18:13:03 +0000
ROA not before:           Wed 20 Mar 2024 18:08:03 +0000
ROA not after:            Wed 19 Mar 2025 18:13:03 +0000
asID:                     265011
IP address blocks:        2804:3164:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:ec:25:b3:ee:0b:22:53:a6:a5:92:05:4f:b7:7f:ea:ae:bc:f9:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8545ED852E6BA88695268C3F3DB0FF2B57345AAD
        Validity
            Not Before: Mar 20 18:08:03 2024 GMT
            Not After : Mar 19 18:13:03 2025 GMT
        Subject: CN=B32AD8853971AF6B5261D4EE2F5FCC418AC3DA93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:76:ca:c6:f2:8a:5a:19:52:ea:78:2c:c2:be:
                    16:ba:fa:7f:46:fd:33:e1:51:6a:8d:a8:0d:41:be:
                    c5:34:ae:33:3e:a5:d4:70:4a:ff:3d:d1:dd:a2:8e:
                    bf:a0:d6:d8:e0:2d:b1:eb:cd:93:c1:72:fb:1d:94:
                    df:ef:b7:8d:24:6d:fb:69:3e:cd:31:10:21:6e:50:
                    32:88:19:10:29:4d:b7:09:1d:db:7b:3d:2b:9c:df:
                    e8:27:ea:bf:c1:8a:90:2a:5c:6f:e4:3b:05:0e:f0:
                    bd:a3:74:38:bc:18:71:2a:61:e0:b8:1b:4e:a5:6b:
                    e2:13:bd:a6:de:ed:3b:c7:42:f6:8a:87:37:09:fb:
                    7a:93:0c:a0:f0:a0:83:8a:17:6c:67:bf:4a:57:7a:
                    1d:5b:6a:a8:6a:b3:97:76:b2:05:de:3a:e3:7b:bf:
                    8a:82:94:bd:4c:11:6c:59:dc:d1:09:87:8c:84:ce:
                    81:2a:37:24:84:cb:d7:08:04:84:f4:9b:87:61:f7:
                    35:e8:24:27:33:22:b4:4a:96:c3:b1:a5:63:42:84:
                    13:ee:35:7e:df:d9:d3:1f:6f:eb:53:df:e9:1d:de:
                    c2:42:eb:47:f4:2e:4a:45:32:a6:49:6e:fd:05:38:
                    b6:27:2c:20:11:d9:d4:e7:1f:08:e3:8f:64:3c:9c:
                    8d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:2A:D8:85:39:71:AF:6B:52:61:D4:EE:2F:5F:CC:41:8A:C3:DA:93
            X509v3 Authority Key Identifier:
                keyid:85:45:ED:85:2E:6B:A8:86:95:26:8C:3F:3D:B0:FF:2B:57:34:5A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/8545ED852E6BA88695268C3F3DB0FF2B57345AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8545ED852E6BA88695268C3F3DB0FF2B57345AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/323830343a333136343a383030303a3a2f33332d3333203d3e20323635303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3164:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         07:8a:c4:3c:ce:f6:f0:46:fb:92:d0:15:0d:b2:39:6a:81:49:
         08:fd:0f:4b:be:30:97:bf:65:f3:51:0b:93:a8:4b:5e:64:12:
         ab:43:51:09:7d:ea:4e:4b:71:21:45:c6:16:d6:f5:bf:2e:de:
         43:8f:77:1b:62:51:9d:24:f1:e1:0c:27:25:0f:94:cd:95:24:
         2e:41:a6:22:00:b0:21:99:83:2d:6e:cc:78:d1:0a:b8:cf:6d:
         6f:30:1f:c7:fe:17:11:6d:cb:f3:56:1c:e1:6f:45:15:c1:21:
         ff:9f:16:cf:d5:43:68:7f:f3:83:88:99:f2:2f:91:2b:0d:05:
         39:70:c3:16:6c:78:39:28:b7:71:ad:50:70:ff:7e:90:e2:6f:
         e5:ef:de:8d:9b:4c:9f:49:79:ec:f4:3f:bf:f0:5f:96:b9:fd:
         71:7c:1d:7b:30:09:5e:da:88:e4:75:ba:fc:cd:21:a3:39:de:
         4b:77:42:58:38:de:97:d5:09:a8:e1:22:d4:71:0c:d2:6c:70:
         20:30:e6:82:10:c3:34:45:dd:ad:cf:f9:5b:6c:10:31:83:c1:
         ff:ee:3e:b6:f4:bb:de:b0:ae:aa:6d:d0:c6:c3:0f:94:c7:ec:
         58:a2:d0:89:b2:cd:00:ce:f0:06:1b:a3:ee:f1:19:d9:99:1d:
         47:81:5a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----