Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/0/323830343a343965633a383030303a3a2f33332d3333203d3e20323637323039.roa
File:                     323830343a343965633a383030303a3a2f33332d3333203d3e20323637323039.roa (raw, json)
Hash identifier:          ZYabSZrofUo43TTCDBXEnBEBYd252FK5XiqDlsmTRUY=
Subject key identifier:   1B:53:A0:6E:BB:BE:DD:F9:35:A0:A8:3B:F2:0B:81:55:B7:13:63:43
Certificate issuer:       /CN=B79E6F9EA9CF32E1EF294AB71C07DA8ADE37719A
Certificate serial:       0F52CA3C3525557C34E6CCCF8D8398CB05705ED6
Authority key identifier: B7:9E:6F:9E:A9:CF:32:E1:EF:29:4A:B7:1C:07:DA:8A:DE:37:71:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B79E6F9EA9CF32E1EF294AB71C07DA8ADE37719A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/0/323830343a343965633a383030303a3a2f33332d3333203d3e20323637323039.roa
Signing time:             Tue 22 Aug 2023 14:52:24 +0000
ROA not before:           Tue 22 Aug 2023 14:47:24 +0000
ROA not after:            Tue 20 Aug 2024 14:52:24 +0000
asID:                     267209
IP address blocks:        2804:49ec:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:52:ca:3c:35:25:55:7c:34:e6:cc:cf:8d:83:98:cb:05:70:5e:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B79E6F9EA9CF32E1EF294AB71C07DA8ADE37719A
        Validity
            Not Before: Aug 22 14:47:24 2023 GMT
            Not After : Aug 20 14:52:24 2024 GMT
        Subject: CN=1B53A06EBBBEDDF935A0A83BF20B8155B7136343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a9:af:68:a6:42:b9:6e:c5:2f:77:32:21:a0:
                    db:2d:16:57:0e:61:cd:43:dc:27:3f:1d:77:5c:b0:
                    d0:7b:95:66:0f:88:03:77:a9:6c:5e:9b:d3:f2:ce:
                    c2:8a:9d:d1:0e:11:14:7f:30:b7:d8:87:86:22:f5:
                    1a:69:ad:14:1e:9d:d6:a1:ca:94:a3:bc:f1:37:cb:
                    a9:b4:a9:a5:95:8a:41:1c:dc:c5:cf:46:df:80:9b:
                    9c:a8:8d:da:a4:60:6c:e8:9c:6f:35:c6:41:9a:c4:
                    65:b9:39:d5:95:4a:65:2c:5b:32:4f:dc:05:f5:e6:
                    f9:c1:3f:f5:b1:5d:04:6b:fb:26:34:eb:a5:1c:bb:
                    a9:3d:53:a6:ca:94:b6:c4:6c:66:72:14:79:bc:e8:
                    a1:8b:db:49:23:8f:0e:56:f4:94:e2:37:69:ec:b6:
                    79:56:a0:12:e3:8d:04:9f:33:63:88:18:4e:ed:53:
                    99:b2:a8:ad:09:d1:96:47:0d:21:1e:70:cd:41:af:
                    47:fb:2d:1d:26:4c:17:8f:8f:f2:b1:0a:60:06:a9:
                    4d:b4:60:2a:5a:62:d1:e2:6e:ca:e7:fb:53:74:d1:
                    91:d9:29:d7:9d:2e:7f:0d:9a:aa:ab:bf:82:49:2d:
                    a3:dd:c2:e3:41:80:1b:6b:10:1b:2a:a1:8d:af:7c:
                    0c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:53:A0:6E:BB:BE:DD:F9:35:A0:A8:3B:F2:0B:81:55:B7:13:63:43
            X509v3 Authority Key Identifier:
                keyid:B7:9E:6F:9E:A9:CF:32:E1:EF:29:4A:B7:1C:07:DA:8A:DE:37:71:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/0/B79E6F9EA9CF32E1EF294AB71C07DA8ADE37719A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B79E6F9EA9CF32E1EF294AB71C07DA8ADE37719A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/0/323830343a343965633a383030303a3a2f33332d3333203d3e20323637323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:49ec:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         88:27:45:b0:39:d0:f8:c0:55:e4:7e:07:3e:64:0f:6e:b8:a8:
         7e:57:d8:be:96:f4:22:3b:8a:61:55:b6:db:17:d5:85:df:ea:
         59:9d:8a:52:b7:a5:9e:b0:39:53:9b:b4:2a:85:4d:da:70:7a:
         f8:e5:a5:54:2c:3f:1a:cc:13:28:91:bd:75:35:bf:4d:06:08:
         a4:3f:af:c9:2b:df:d1:70:ca:22:37:94:2d:90:88:97:df:4d:
         73:cf:48:ef:3e:c4:99:de:6b:d7:d2:3f:94:43:56:fc:d9:a4:
         9d:cb:30:ea:ac:c7:68:ea:67:92:63:c9:dd:f4:47:38:16:f4:
         bf:8a:d9:e6:59:cd:85:73:88:af:64:48:7f:d6:20:c9:e0:fd:
         e8:b8:72:4b:b7:4b:1a:a6:c2:f3:c8:20:38:17:64:99:a7:3a:
         cd:a7:e7:bb:32:b0:c3:c4:49:7a:b6:be:0f:a3:62:0c:4e:b7:
         ba:82:cc:6f:d7:0a:f6:ac:4c:de:0b:09:23:12:54:3c:01:51:
         cf:2a:bb:e2:0c:92:f5:d3:df:24:e8:c6:56:0c:76:fa:4c:f1:
         5e:fe:0c:b4:00:d6:48:3d:89:43:fc:99:12:cb:52:58:b9:17:
         7f:c7:0c:44:c1:80:1b:1b:0c:b9:75:85:b5:2a:7b:ff:0d:40:
         93:df:10:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----