Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/323830343a3266303a3a2f33362d3336203d3e203533323336.roa
File:                     323830343a3266303a3a2f33362d3336203d3e203533323336.roa (raw, json)
Hash identifier:          /PJhkWDT8K7pKSV2ND0blUCRftmFR7+uCB8K7QjjLQE=
Subject key identifier:   C6:C4:CF:AD:60:C9:E3:6E:2D:F8:A5:9C:E4:7E:79:EA:9D:37:73:23
Certificate issuer:       /CN=EE1F2CBFD1CF93D6FA0078818FBF753815C16C09
Certificate serial:       5AB2057FC7D856C6A5864EF05F4939DFAD13DE5B
Authority key identifier: EE:1F:2C:BF:D1:CF:93:D6:FA:00:78:81:8F:BF:75:38:15:C1:6C:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE1F2CBFD1CF93D6FA0078818FBF753815C16C09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/323830343a3266303a3a2f33362d3336203d3e203533323336.roa
Signing time:             Thu 08 Feb 2024 15:00:01 +0000
ROA not before:           Thu 08 Feb 2024 14:55:01 +0000
ROA not after:            Thu 06 Feb 2025 15:00:01 +0000
asID:                     53236
IP address blocks:        2804:2f0::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:b2:05:7f:c7:d8:56:c6:a5:86:4e:f0:5f:49:39:df:ad:13:de:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE1F2CBFD1CF93D6FA0078818FBF753815C16C09
        Validity
            Not Before: Feb  8 14:55:01 2024 GMT
            Not After : Feb  6 15:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d2:2f:6f:c2:d1:3f:44:ae:04:7a:2a:22:b0:
                    8a:27:ed:fc:49:bc:43:6c:bb:1c:ce:92:1b:02:65:
                    e8:c1:1a:e0:c6:1a:ca:83:5c:a0:65:59:c9:32:48:
                    f6:f9:a7:58:b1:66:92:1c:66:08:dd:3d:45:73:3a:
                    1c:24:44:07:cc:6f:8b:68:aa:f9:44:97:37:3b:f5:
                    2f:87:c3:e0:e2:56:71:b9:a3:8a:18:1e:d5:35:23:
                    fe:2e:3f:9d:c2:be:f8:07:ff:a3:bf:fd:f8:55:c4:
                    da:03:44:32:b5:67:ce:4d:65:f0:92:f6:22:a7:8a:
                    df:a2:1c:00:e8:3e:b4:bf:dc:29:e8:7b:fa:69:91:
                    04:b6:60:6d:50:39:a6:d9:35:1a:d2:8c:3d:30:47:
                    c7:a2:20:3f:4e:0c:c2:47:8c:c8:62:ae:36:99:e6:
                    40:e6:0c:4c:e6:9d:d3:45:50:42:74:38:8c:26:71:
                    ad:80:c6:38:ee:f2:96:d0:6e:4f:c5:84:fa:c8:24:
                    1e:15:fc:5e:74:8b:cc:35:e5:6b:fc:bb:61:66:6a:
                    ba:bd:fb:8f:86:32:f9:bd:39:2b:33:b6:2d:09:35:
                    9a:b8:a3:a4:b1:97:3f:f8:51:e9:f0:ab:dd:95:41:
                    a1:9c:a5:cb:57:cc:ff:07:07:c5:bc:dd:8c:80:e4:
                    21:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C4:CF:AD:60:C9:E3:6E:2D:F8:A5:9C:E4:7E:79:EA:9D:37:73:23
            X509v3 Authority Key Identifier:
                keyid:EE:1F:2C:BF:D1:CF:93:D6:FA:00:78:81:8F:BF:75:38:15:C1:6C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/EE1F2CBFD1CF93D6FA0078818FBF753815C16C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE1F2CBFD1CF93D6FA0078818FBF753815C16C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/323830343a3266303a3a2f33362d3336203d3e203533323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f0::/36

    Signature Algorithm: sha256WithRSAEncryption
         1f:50:30:5e:a4:66:05:d5:9c:9f:fc:10:cc:9c:70:42:cf:ac:
         56:a1:1b:f6:7c:44:97:c1:12:40:40:67:70:6a:f4:22:dc:d1:
         3b:c2:b6:cd:1d:f2:38:b5:f9:a6:f5:cc:48:3a:30:e4:f5:f6:
         90:cc:9d:a8:3f:9b:98:42:3c:b6:0d:14:e9:50:5b:c0:06:0e:
         aa:e2:f1:94:5a:bf:84:23:8b:40:99:f6:e0:cc:54:82:37:96:
         e9:ea:5e:88:3c:f9:67:1d:76:8a:2c:60:3d:81:c7:ed:6e:fb:
         f6:bb:21:9a:2e:45:7f:ba:0b:74:f8:d0:4b:2c:bf:3b:39:2f:
         cd:f1:23:ca:75:b3:f1:7e:67:f6:f3:26:36:4b:07:1f:ab:f2:
         d8:52:72:21:42:4b:e0:8e:b9:6b:00:96:d7:12:94:10:6b:86:
         3f:6f:3b:46:9d:eb:80:15:cb:78:83:3e:69:3e:22:0c:da:d2:
         a7:1f:56:e2:99:aa:2d:45:4a:b8:0f:b2:2a:d0:23:f3:a8:90:
         80:9e:92:98:71:6d:30:6c:6f:ee:74:74:27:eb:25:2d:2b:23:
         e3:83:ea:94:6c:bb:ee:13:49:cc:98:64:fd:5f:e4:c9:50:2f:
         20:50:52:b1:30:94:09:10:5f:5b:3c:2c:86:97:a0:65:1b:38:
         97:ee:70:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----