Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/323830343a313630303a383030303a3a2f33342d3334203d3e20323633343231.roa
File:                     323830343a313630303a383030303a3a2f33342d3334203d3e20323633343231.roa (raw, json)
Hash identifier:          30AyitGScI63rynZmo9qDB4L0oFbp8tKu1AGOItnkMY=
Subject key identifier:   BC:D2:63:73:A1:48:B9:52:D3:52:B5:DE:23:F0:7E:BC:B0:01:C5:2D
Certificate issuer:       /CN=B2BBC2B5109511F272026E674B0D0AA24CE514F5
Certificate serial:       5327A928FDA8CD1BD580A597CAD4E0ED646BA557
Authority key identifier: B2:BB:C2:B5:10:95:11:F2:72:02:6E:67:4B:0D:0A:A2:4C:E5:14:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2BBC2B5109511F272026E674B0D0AA24CE514F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/323830343a313630303a383030303a3a2f33342d3334203d3e20323633343231.roa
Signing time:             Mon 04 Dec 2023 18:55:20 +0000
ROA not before:           Mon 04 Dec 2023 18:50:20 +0000
ROA not after:            Mon 02 Dec 2024 18:55:20 +0000
asID:                     263421
IP address blocks:        2804:1600:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:27:a9:28:fd:a8:cd:1b:d5:80:a5:97:ca:d4:e0:ed:64:6b:a5:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2BBC2B5109511F272026E674B0D0AA24CE514F5
        Validity
            Not Before: Dec  4 18:50:20 2023 GMT
            Not After : Dec  2 18:55:20 2024 GMT
        Subject: CN=BCD26373A148B952D352B5DE23F07EBCB001C52D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:28:1b:5b:23:f4:9e:7a:c9:38:c3:72:44:32:
                    47:43:b6:3d:70:67:17:a9:26:26:51:db:e0:88:1d:
                    98:45:d4:3e:76:82:35:b8:f7:8e:c0:89:31:c0:c1:
                    ba:57:2f:33:f4:69:5e:25:db:28:1d:a2:a6:f0:3d:
                    7e:c3:99:61:51:96:1f:a9:3b:a5:09:bc:b4:c7:a8:
                    24:35:92:01:fe:9b:f8:b1:cb:9b:96:db:17:02:16:
                    9c:6e:a2:ef:c6:39:df:94:e8:56:82:90:97:be:54:
                    38:f1:0d:e9:13:ec:4c:b4:63:08:af:53:bb:d1:fc:
                    79:b8:e2:4a:02:26:a0:4e:6e:3c:9a:19:75:25:20:
                    ec:19:a6:cf:42:e1:32:77:e6:dc:68:ed:91:16:67:
                    d3:4e:83:49:c8:0f:42:d1:6d:f1:c6:df:d3:32:b7:
                    ca:52:15:f4:8f:f4:27:3e:e1:fb:2b:59:bb:46:0e:
                    b2:d5:95:35:91:54:17:18:c4:3b:f4:95:d5:6d:0d:
                    3a:32:bc:01:07:62:6c:ae:bf:87:13:cd:3f:2a:54:
                    0e:fc:5d:c1:48:f5:fa:ad:d7:06:7b:c7:80:a5:97:
                    ec:b4:d5:3c:ed:1b:e8:07:45:6b:b0:3d:23:0d:e2:
                    1a:4c:bc:e1:64:4e:c6:0a:7a:56:1e:81:42:1d:c4:
                    af:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D2:63:73:A1:48:B9:52:D3:52:B5:DE:23:F0:7E:BC:B0:01:C5:2D
            X509v3 Authority Key Identifier:
                keyid:B2:BB:C2:B5:10:95:11:F2:72:02:6E:67:4B:0D:0A:A2:4C:E5:14:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/B2BBC2B5109511F272026E674B0D0AA24CE514F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2BBC2B5109511F272026E674B0D0AA24CE514F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/323830343a313630303a383030303a3a2f33342d3334203d3e20323633343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1600:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6f:71:65:17:b3:da:d3:23:e4:54:a5:e2:78:5d:7b:c0:39:d9:
         50:e8:3c:44:28:0e:82:7e:89:25:ea:e3:89:02:2b:63:a1:ab:
         98:9b:db:62:2f:0e:fd:d9:0e:80:6c:83:39:70:c1:3c:fd:bc:
         08:60:09:ae:15:05:50:93:08:07:14:57:78:aa:bf:cd:f4:b3:
         5c:84:91:09:5a:03:55:f9:fd:3e:a8:55:51:60:da:a5:61:ad:
         c0:3c:ab:8e:5d:67:da:4b:41:54:cf:2f:6e:dc:e6:5b:03:b2:
         d4:51:2c:4d:56:bd:8e:0e:35:d9:2d:4c:d2:9b:99:57:3d:7b:
         84:2a:1f:b4:c5:3d:06:15:69:67:2e:48:38:12:9f:04:8e:ee:
         b5:d3:7a:b7:77:ad:3f:28:1b:78:14:1d:ea:ad:ba:5d:c0:eb:
         89:92:51:39:7e:be:ef:5f:18:7e:19:1b:cf:d9:0a:43:2b:5a:
         83:7b:21:ca:a9:a6:fc:35:7c:51:de:26:e8:df:4e:5b:54:cb:
         54:05:d6:9b:03:43:c4:53:d4:18:4d:14:d2:e6:63:3d:67:5f:
         af:cc:ff:11:e6:16:54:6e:e3:dd:20:13:6e:3b:e6:93:b8:db:
         9c:e4:61:b5:f3:90:22:34:38:a4:bb:3b:2f:32:34:4d:3e:c1:
         7c:57:22:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----