Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a3a2f33322d3332203d3e20323635353030.roa
File:                     323830343a333531383a3a2f33322d3332203d3e20323635353030.roa (raw, json)
Hash identifier:          +cVKw09gewX5lrdlZ1yDAqDESrsve0CiDWCW6pQU5tI=
Subject key identifier:   BE:70:2C:B0:7C:62:41:2D:8A:B8:83:1B:9B:A3:47:ED:5E:C1:B0:E3
Certificate issuer:       /CN=2EAEB0C4298C81A5A19D7D700EA0E36F82D2FB11
Certificate serial:       23B2B60D536A87DBF48253C90A62795D14E3824E
Authority key identifier: 2E:AE:B0:C4:29:8C:81:A5:A1:9D:7D:70:0E:A0:E3:6F:82:D2:FB:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EAEB0C4298C81A5A19D7D700EA0E36F82D2FB11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a3a2f33322d3332203d3e20323635353030.roa
Signing time:             Tue 27 Feb 2024 14:56:12 +0000
ROA not before:           Tue 27 Feb 2024 14:51:12 +0000
ROA not after:            Tue 25 Feb 2025 14:56:12 +0000
asID:                     265500
IP address blocks:        2804:3518::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:b2:b6:0d:53:6a:87:db:f4:82:53:c9:0a:62:79:5d:14:e3:82:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EAEB0C4298C81A5A19D7D700EA0E36F82D2FB11
        Validity
            Not Before: Feb 27 14:51:12 2024 GMT
            Not After : Feb 25 14:56:12 2025 GMT
        Subject: CN=BE702CB07C62412D8AB8831B9BA347ED5EC1B0E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:07:10:db:ed:9e:cc:d4:7b:ea:14:f6:2c:27:
                    70:5c:e8:e8:d9:2a:66:5c:0d:66:3d:5a:95:7b:c0:
                    15:1e:4d:a4:33:4f:7a:18:a2:57:7c:a7:d7:24:ba:
                    43:f4:96:cb:d1:2c:72:55:52:71:2f:b5:bb:a0:21:
                    a3:44:19:8f:a0:84:33:f4:be:32:e8:a2:b6:7a:ee:
                    f3:04:d7:15:a1:9d:7a:ee:b2:93:b8:8a:f2:70:1e:
                    40:45:38:c5:56:5c:ed:06:79:21:ec:02:9a:79:2b:
                    0c:89:85:16:fb:33:5c:90:e1:4e:1e:fb:ee:99:69:
                    28:4f:36:6c:b3:50:dd:ec:16:da:4b:fb:29:b1:47:
                    d1:d7:bb:72:61:47:b9:ec:c4:ce:6a:e4:83:49:69:
                    bf:48:c8:a4:34:30:af:3f:1c:1c:7d:17:36:c7:fa:
                    b4:31:e5:fa:8b:68:39:3e:ad:e5:eb:7a:a5:1c:7a:
                    56:6d:bb:a3:3a:4b:4d:e7:26:96:b0:19:d2:09:51:
                    9e:19:b5:1e:ef:a6:41:2a:0c:a9:2e:ba:b0:86:8c:
                    f3:bb:59:8e:44:65:77:a7:0b:ae:01:d1:8d:b8:57:
                    74:f1:74:b6:62:df:c4:e6:ce:8c:8c:0b:80:84:8a:
                    30:7d:b4:73:37:60:25:de:47:17:e1:23:c7:59:db:
                    fc:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:70:2C:B0:7C:62:41:2D:8A:B8:83:1B:9B:A3:47:ED:5E:C1:B0:E3
            X509v3 Authority Key Identifier:
                keyid:2E:AE:B0:C4:29:8C:81:A5:A1:9D:7D:70:0E:A0:E3:6F:82:D2:FB:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/2EAEB0C4298C81A5A19D7D700EA0E36F82D2FB11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EAEB0C4298C81A5A19D7D700EA0E36F82D2FB11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a3a2f33322d3332203d3e20323635353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3518::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:93:79:7f:ef:53:21:f3:fd:29:51:58:61:f5:ce:a7:c1:98:
         33:e6:7a:7a:bf:85:8c:a7:4c:8e:85:b4:7b:42:b5:50:2e:ea:
         91:d8:9d:8b:47:7b:3d:75:e3:70:6f:0e:4b:2b:ca:ba:fe:0c:
         20:90:17:73:e1:54:79:62:bf:ae:3a:9e:4b:e4:a0:c9:82:16:
         dd:f7:42:49:c3:e1:7d:99:e0:b1:c6:cb:29:b2:7e:ca:a5:20:
         cc:e3:5b:a0:78:a4:b6:ae:c8:a6:b4:04:b3:76:46:1f:6b:0b:
         99:6c:c9:3e:2b:05:dd:d7:ff:f1:59:11:ff:f0:72:16:d3:de:
         d0:63:87:dc:d3:22:ba:56:3e:03:1a:e7:7b:1c:1e:d6:89:c6:
         fc:1d:09:71:78:89:e4:da:fb:e0:1c:c3:fe:b6:c1:31:74:91:
         cf:18:79:1c:71:3c:09:61:98:7a:1a:3b:2a:7d:01:ca:27:17:
         69:3f:ef:99:12:b6:1c:cb:43:7c:ac:13:32:b8:6d:ad:3b:4e:
         7d:fa:d6:f1:b9:b9:a5:49:3d:22:dd:ca:9d:e8:cf:ee:d8:59:
         66:8d:b6:80:a5:97:f2:f5:b1:f0:91:c2:b7:b0:23:d0:60:00:
         fa:8f:1e:bc:e4:d5:c8:ac:ea:d2:30:dd:96:0b:df:d7:e2:a8:
         30:37:78:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----