Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/323830343a373233303a3a2f33322d3438203d3e20323730383338.roa
File:                     323830343a373233303a3a2f33322d3438203d3e20323730383338.roa (raw, json)
Hash identifier:          aTGYGWZngcdzmqB5k0smtiZrDg0Vn8bg9RaL45IJyqI=
Subject key identifier:   72:9E:1B:22:78:A3:D7:0F:DC:D0:EE:7B:44:C7:31:8E:F1:1B:28:53
Certificate issuer:       /CN=52E1AA5528EEC08F20FBCD1690FCE7FB06DF5A52
Certificate serial:       473F6A61CF18CEF582EBA09EE1EFCA51B4A8DD50
Authority key identifier: 52:E1:AA:55:28:EE:C0:8F:20:FB:CD:16:90:FC:E7:FB:06:DF:5A:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52E1AA5528EEC08F20FBCD1690FCE7FB06DF5A52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/323830343a373233303a3a2f33322d3438203d3e20323730383338.roa
Signing time:             Fri 09 Feb 2024 17:00:02 +0000
ROA not before:           Fri 09 Feb 2024 16:55:02 +0000
ROA not after:            Fri 07 Feb 2025 17:00:02 +0000
asID:                     270838
IP address blocks:        2804:7230::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:3f:6a:61:cf:18:ce:f5:82:eb:a0:9e:e1:ef:ca:51:b4:a8:dd:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52E1AA5528EEC08F20FBCD1690FCE7FB06DF5A52
        Validity
            Not Before: Feb  9 16:55:02 2024 GMT
            Not After : Feb  7 17:00:02 2025 GMT
        Subject: CN=729E1B2278A3D70FDCD0EE7B44C7318EF11B2853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:89:e9:f7:65:0f:6f:e1:92:da:db:b3:98:47:
                    53:d6:59:3e:49:a0:91:d2:94:a6:17:e8:25:d5:f6:
                    be:a5:0b:4a:d3:af:35:28:f0:38:4f:18:93:9e:12:
                    7a:5d:ba:1b:5a:fc:67:57:bc:77:dc:10:c6:2d:38:
                    ce:23:86:f0:c8:8e:dc:57:e2:eb:5d:ec:a2:ee:5c:
                    0b:4a:d5:d2:ee:3c:ac:be:f6:9a:4a:57:30:47:b5:
                    1e:db:6a:b9:54:4c:ad:15:a4:bf:c7:27:f9:b0:da:
                    58:39:79:c5:73:a4:9e:63:4e:a8:81:8f:ea:f1:73:
                    27:4a:8a:66:e9:e6:c2:34:0a:a9:7b:94:61:39:eb:
                    a8:21:af:89:db:d6:b3:51:5c:06:39:1f:a4:76:88:
                    cc:ae:47:40:00:be:5a:8e:b2:a6:14:6e:13:f8:90:
                    2f:4d:34:9d:35:d8:77:4a:6f:1e:49:01:cc:ae:12:
                    3d:59:b6:39:11:d7:69:b7:2d:45:b9:d3:b7:9a:d6:
                    03:a7:63:53:53:9c:7b:06:e1:af:28:31:ee:89:84:
                    d8:c2:40:35:3c:7a:71:da:c0:fd:ad:85:93:0f:da:
                    3a:3f:7c:5a:b6:c5:d9:ad:98:f4:4f:f1:b5:4e:1a:
                    25:93:da:80:b4:a7:96:97:ab:70:7c:f6:40:6a:6a:
                    b0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:9E:1B:22:78:A3:D7:0F:DC:D0:EE:7B:44:C7:31:8E:F1:1B:28:53
            X509v3 Authority Key Identifier:
                keyid:52:E1:AA:55:28:EE:C0:8F:20:FB:CD:16:90:FC:E7:FB:06:DF:5A:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/52E1AA5528EEC08F20FBCD1690FCE7FB06DF5A52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52E1AA5528EEC08F20FBCD1690FCE7FB06DF5A52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/323830343a373233303a3a2f33322d3438203d3e20323730383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7230::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:15:6f:34:ed:5a:c1:1f:51:b5:34:d8:43:5f:f0:4f:a4:f6:
         4b:66:28:bc:64:14:dd:ee:6d:1c:93:de:96:91:0e:98:00:f0:
         24:4f:a6:b3:60:05:a8:9c:f9:78:16:c6:e4:6d:e2:65:a7:a8:
         75:c5:8b:68:9e:13:62:7e:39:27:51:23:c8:ef:b8:af:4d:f8:
         a7:12:07:c1:7b:cf:c4:f1:0a:01:68:07:8d:83:20:11:72:94:
         ff:02:06:e4:ba:02:9e:30:45:77:e1:c3:5a:e7:31:63:9d:98:
         b7:ae:28:9e:ca:cb:96:c1:18:2b:93:d8:24:d8:11:06:ac:50:
         0f:40:ad:de:79:01:48:9b:6c:98:bc:02:56:5d:fc:ca:f8:a0:
         81:39:74:f9:d4:3b:13:f9:ad:dd:e6:24:75:5a:ed:71:b7:52:
         a5:94:60:5c:78:5b:06:2d:21:d9:ce:60:77:8a:9a:e6:89:b0:
         87:5d:dd:b1:17:dc:f7:dd:32:8d:d6:8e:cc:c8:d9:63:e3:cb:
         60:a8:fd:21:d6:95:66:3f:d5:f2:fa:f3:78:61:31:ad:3f:8c:
         3e:9d:a7:8b:41:21:39:99:1d:5c:ff:66:f9:2d:fa:8f:e9:bf:
         67:f2:33:79:97:29:e1:29:9b:0b:97:e8:3c:e0:a0:67:4d:cf:
         37:78:6d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----