Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/0/323830343a343330343a3a2f33322d3332203d3e20323637353433.roa
File:                     323830343a343330343a3a2f33322d3332203d3e20323637353433.roa (raw, json)
Hash identifier:          lUjiRM9z5j8KBGWhRq9nVMNi9CH4PElSmdsA7UojpK0=
Subject key identifier:   04:29:8C:C7:67:8F:88:9C:33:CF:D5:57:42:9A:B5:51:26:66:61:1A
Certificate issuer:       /CN=528249EC56CB215F518F4451571769ECE2BB8915
Certificate serial:       1C11C95669681B2DCE96716C5E10746F81F8D536
Authority key identifier: 52:82:49:EC:56:CB:21:5F:51:8F:44:51:57:17:69:EC:E2:BB:89:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/528249EC56CB215F518F4451571769ECE2BB8915.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/0/323830343a343330343a3a2f33322d3332203d3e20323637353433.roa
Signing time:             Thu 19 Oct 2023 13:54:28 +0000
ROA not before:           Thu 19 Oct 2023 13:49:28 +0000
ROA not after:            Thu 17 Oct 2024 13:54:28 +0000
asID:                     267543
IP address blocks:        2804:4304::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:11:c9:56:69:68:1b:2d:ce:96:71:6c:5e:10:74:6f:81:f8:d5:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=528249EC56CB215F518F4451571769ECE2BB8915
        Validity
            Not Before: Oct 19 13:49:28 2023 GMT
            Not After : Oct 17 13:54:28 2024 GMT
        Subject: CN=04298CC7678F889C33CFD557429AB5512666611A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:89:59:9b:e2:81:1a:9d:04:dd:f3:fd:e2:78:
                    38:64:ec:56:64:21:35:fa:88:d0:e5:89:9d:8b:d9:
                    b0:d4:35:1b:53:54:01:26:c6:62:d0:0f:88:e0:1c:
                    a1:88:18:73:03:ed:0f:f1:94:77:33:2e:d6:3b:a2:
                    f7:b0:7f:1d:eb:89:0a:52:03:fe:6a:11:34:bf:b8:
                    61:b9:c5:a1:a1:49:1c:04:2d:d2:0f:50:0c:3b:9e:
                    24:9a:cb:b8:f6:95:b7:0d:49:fd:67:77:52:32:9f:
                    05:c0:c1:b6:7c:fb:5d:0c:7c:a0:8c:c8:54:6b:ac:
                    84:42:e9:de:b1:0d:52:76:38:b0:97:eb:35:a8:f3:
                    85:c5:c9:32:85:d2:fc:72:71:f6:4c:f1:a9:41:e6:
                    1a:38:71:a4:d1:3f:52:23:7a:e1:c8:b7:7f:35:81:
                    af:ab:32:b9:83:ff:fc:ef:df:5c:36:ab:36:e6:dd:
                    5a:53:30:ec:8c:ad:6d:c7:84:c2:6b:c9:b5:21:94:
                    80:6c:57:28:72:75:5b:f7:0b:ce:ee:2c:98:00:74:
                    b5:24:66:92:c1:95:fe:6c:f0:b7:6c:56:9b:22:0c:
                    8c:06:94:e3:fd:7e:aa:82:e2:e2:af:6e:9c:fb:f2:
                    fe:84:ed:b3:0e:52:7c:d7:1b:e0:7d:96:90:33:69:
                    cd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:29:8C:C7:67:8F:88:9C:33:CF:D5:57:42:9A:B5:51:26:66:61:1A
            X509v3 Authority Key Identifier:
                keyid:52:82:49:EC:56:CB:21:5F:51:8F:44:51:57:17:69:EC:E2:BB:89:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/0/528249EC56CB215F518F4451571769ECE2BB8915.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/528249EC56CB215F518F4451571769ECE2BB8915.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/0/323830343a343330343a3a2f33322d3332203d3e20323637353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4304::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:ae:e7:a9:69:01:a7:a9:a5:d9:ab:79:c6:3a:39:d7:4d:82:
         ef:54:97:6a:ea:5d:20:25:26:fa:cc:b3:9f:79:6d:af:f3:b2:
         15:cd:d2:e6:2f:26:b0:65:28:36:39:e7:bc:4f:4b:e5:a6:1b:
         7c:2a:01:18:67:2a:3a:3d:3e:d6:be:97:fe:4b:41:f2:a0:a9:
         48:c6:9a:ac:89:33:8d:ac:de:a2:23:bf:ad:1c:41:fc:83:3d:
         11:b9:68:b8:c4:fd:a8:5d:06:c3:0c:67:d1:79:90:89:d5:b5:
         95:c2:d6:a1:a6:07:10:25:bb:7d:42:ba:ed:1e:60:0d:f8:59:
         7f:79:be:a2:20:af:46:6f:65:78:58:f6:7b:63:ae:ab:eb:41:
         50:35:51:56:2c:f8:13:4c:d3:3e:e8:c0:66:ef:d5:31:d4:22:
         46:7d:89:17:4b:e2:3a:e3:79:96:46:44:bb:13:e7:39:ae:e6:
         65:ee:f8:b0:e9:cd:32:36:4b:49:b5:d3:d7:a3:bb:97:df:32:
         85:f4:72:a9:99:fa:ce:81:bd:8e:fc:9c:44:35:97:31:6b:98:
         37:b9:65:e1:4f:27:e2:08:3d:d9:85:6b:c9:af:5c:72:d1:91:
         3e:fa:f3:4a:d2:0c:ca:1d:bc:de:28:bd:85:1a:d7:75:dd:4b:
         48:ec:c8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----