Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BqpATurM2YpymFAxYL1mHZxs1MihmXR2uvWVbEmy1gb7/0/323830343a363132343a3a2f33322d3334203d3e20323639323135.roa
File:                     323830343a363132343a3a2f33322d3334203d3e20323639323135.roa (raw, json)
Hash identifier:          cTmK/c+HtYtHuFiknkJ6Y1maNRHX8ktBnJ52oK9A3DQ=
Subject key identifier:   B0:DD:16:4D:C3:86:91:D1:BE:4D:10:12:A8:22:50:79:E6:C2:8F:39
Certificate issuer:       /CN=C5CD326FCF0499DD7B0D2AEE545E54B8092095F5
Certificate serial:       7BE9EA0FFEF3771920197ABA489280E33BDE1E57
Authority key identifier: C5:CD:32:6F:CF:04:99:DD:7B:0D:2A:EE:54:5E:54:B8:09:20:95:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C5CD326FCF0499DD7B0D2AEE545E54B8092095F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BqpATurM2YpymFAxYL1mHZxs1MihmXR2uvWVbEmy1gb7/0/323830343a363132343a3a2f33322d3334203d3e20323639323135.roa
Signing time:             Fri 29 Dec 2023 15:00:00 +0000
ROA not before:           Fri 29 Dec 2023 14:55:00 +0000
ROA not after:            Fri 27 Dec 2024 15:00:00 +0000
asID:                     269215
IP address blocks:        2804:6124::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:e9:ea:0f:fe:f3:77:19:20:19:7a:ba:48:92:80:e3:3b:de:1e:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5CD326FCF0499DD7B0D2AEE545E54B8092095F5
        Validity
            Not Before: Dec 29 14:55:00 2023 GMT
            Not After : Dec 27 15:00:00 2024 GMT
        Subject: CN=B0DD164DC38691D1BE4D1012A8225079E6C28F39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:49:02:6f:ab:d2:0b:ca:a8:bb:9e:47:f7:4d:
                    f7:a9:56:50:9c:4b:fb:0f:14:70:84:af:64:0b:47:
                    1b:54:5d:c7:4b:b3:ec:d5:bc:a2:d5:0d:ca:a5:b9:
                    67:a8:91:a5:78:d2:b9:3f:f6:21:7f:f9:2d:ee:ed:
                    a8:38:ce:df:4b:77:56:75:d0:f6:8e:4e:8c:bd:1d:
                    ca:e3:05:40:f9:81:cd:23:45:90:bf:43:15:2e:d4:
                    f1:71:2b:c0:21:6b:ab:68:3b:7f:46:8e:f4:6d:f5:
                    24:c5:7f:46:81:47:4d:5b:79:c0:ca:c2:5f:fe:d9:
                    c7:6c:c0:50:03:b5:9b:19:19:04:58:e4:d1:b1:eb:
                    d2:fb:3b:f1:3b:ec:2d:19:f9:68:bf:0b:fb:55:e1:
                    b3:54:e4:be:cf:aa:1d:73:24:81:e6:a8:85:a5:89:
                    dd:24:04:d8:02:1a:17:13:8f:cc:d8:46:b9:2f:51:
                    81:81:cc:f0:67:c9:94:b2:00:4c:24:8c:b0:ec:ab:
                    ce:1b:4c:2e:01:ed:c2:f2:5d:bb:42:8a:89:e2:66:
                    99:63:14:9f:9a:8a:be:e6:8c:51:c3:0d:c8:e5:69:
                    c2:1e:45:6d:2d:b8:30:ea:3d:48:35:45:61:ac:d2:
                    71:73:b3:12:b5:d7:8c:a1:ba:16:cc:20:32:12:d4:
                    4e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:DD:16:4D:C3:86:91:D1:BE:4D:10:12:A8:22:50:79:E6:C2:8F:39
            X509v3 Authority Key Identifier:
                keyid:C5:CD:32:6F:CF:04:99:DD:7B:0D:2A:EE:54:5E:54:B8:09:20:95:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BqpATurM2YpymFAxYL1mHZxs1MihmXR2uvWVbEmy1gb7/0/C5CD326FCF0499DD7B0D2AEE545E54B8092095F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C5CD326FCF0499DD7B0D2AEE545E54B8092095F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BqpATurM2YpymFAxYL1mHZxs1MihmXR2uvWVbEmy1gb7/0/323830343a363132343a3a2f33322d3334203d3e20323639323135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6124::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:7d:81:e4:ff:35:b9:70:96:ee:a9:6a:63:af:6e:ac:82:e3:
         0b:38:c9:f3:f4:3e:18:25:a3:7f:b9:2a:41:a6:1b:81:ac:dd:
         87:a1:22:d6:8a:35:4e:c5:ae:28:45:2a:6c:21:e8:7f:79:cf:
         35:ba:35:f0:97:8c:19:f1:f0:42:1e:e3:03:53:a2:76:64:1e:
         b5:94:1a:ad:e4:74:5a:d4:c0:71:34:02:6c:93:ba:38:d5:ab:
         3f:eb:ba:f5:9f:7d:a8:96:5a:bd:ad:b9:1d:24:7b:a2:4b:81:
         ce:ca:3b:94:ef:e8:f6:61:91:ee:fd:45:38:90:a4:cb:c5:a2:
         f2:0f:40:0c:1a:b8:b0:4b:e8:f4:33:95:9f:de:f2:94:09:f7:
         ce:ee:fc:19:d0:e9:0c:3f:53:26:ed:27:9f:14:4c:74:8a:fc:
         93:3c:e1:c6:dd:2b:75:a9:e0:3b:5d:72:d6:32:32:2a:aa:e2:
         37:a5:2b:ad:59:51:9f:07:88:80:88:da:51:bd:56:fb:70:fa:
         00:ee:80:71:d7:0d:0c:a6:b1:87:a4:76:4e:e7:99:4b:cf:46:
         c9:00:6c:b5:94:28:ac:c2:ee:d3:6e:a5:e8:2c:94:65:0f:18:
         32:ba:0d:6c:65:5d:b6:3c:35:1b:dd:c9:95:67:4a:60:93:90:
         6e:61:e2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----