Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EKkBAvBpYRx6fvwWnJc7mDWqabmaXQAayutRKS7dFyMi/0/323830343a343133343a3a2f33322d3332203d3e20323636303130.roa
File:                     323830343a343133343a3a2f33322d3332203d3e20323636303130.roa (raw, json)
Hash identifier:          GvqWwb+l1noNFsDWAFeph6L/td/ZLTAgxbMCEJGJeJo=
Subject key identifier:   2E:47:C3:7B:98:7F:DB:F2:33:9D:8B:18:5F:63:06:BF:2F:DE:5F:7B
Certificate issuer:       /CN=51475D5046BFBC9891A4F5E8D0745B6732C70E45
Certificate serial:       3D54D218A1A99E3034F335060D6E7B727533A27D
Authority key identifier: 51:47:5D:50:46:BF:BC:98:91:A4:F5:E8:D0:74:5B:67:32:C7:0E:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51475D5046BFBC9891A4F5E8D0745B6732C70E45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKkBAvBpYRx6fvwWnJc7mDWqabmaXQAayutRKS7dFyMi/0/323830343a343133343a3a2f33322d3332203d3e20323636303130.roa
Signing time:             Thu 30 Nov 2023 19:19:00 +0000
ROA not before:           Thu 30 Nov 2023 19:14:00 +0000
ROA not after:            Thu 28 Nov 2024 19:19:00 +0000
asID:                     266010
IP address blocks:        2804:4134::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:54:d2:18:a1:a9:9e:30:34:f3:35:06:0d:6e:7b:72:75:33:a2:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51475D5046BFBC9891A4F5E8D0745B6732C70E45
        Validity
            Not Before: Nov 30 19:14:00 2023 GMT
            Not After : Nov 28 19:19:00 2024 GMT
        Subject: CN=2E47C37B987FDBF2339D8B185F6306BF2FDE5F7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5d:63:ef:56:ce:28:6e:d7:6b:fa:85:59:b3:
                    a8:20:14:32:75:e1:82:09:5d:c6:e8:8f:5f:46:b4:
                    8f:c7:61:5c:d9:88:d2:16:a9:00:67:bd:40:92:eb:
                    b1:13:75:72:a2:9c:54:db:cc:b6:11:55:4e:32:3a:
                    6b:ed:e3:5e:10:1e:a1:24:2d:59:b2:57:45:1f:4e:
                    43:8c:35:8e:a0:8f:5a:16:9d:3f:da:a6:60:82:df:
                    58:55:34:c7:40:b2:7e:2e:74:f7:1c:2b:16:d6:bb:
                    0b:9e:ef:05:cc:0e:b9:d9:14:01:ff:07:9e:c9:03:
                    a2:16:70:0a:36:6a:4b:3c:5f:e0:96:fd:48:ba:6c:
                    f1:80:6b:ca:52:37:2c:36:36:92:43:9e:df:f9:03:
                    e5:7d:c2:79:21:9f:68:93:43:5a:e6:22:dc:b2:bd:
                    6a:99:70:79:e1:c9:68:d9:6c:76:3b:b1:3f:b1:dc:
                    34:5d:9d:c1:24:d8:00:aa:62:26:95:49:23:62:9d:
                    a4:1d:6f:1a:fa:36:a8:80:51:f9:e6:f5:5c:82:c3:
                    30:3d:40:f8:a1:9d:7c:49:9b:0a:40:91:bd:6f:82:
                    5f:e6:65:e3:5b:d9:83:38:b1:a7:cc:ae:37:a4:9c:
                    f2:5f:72:6a:b0:ce:c2:4d:73:0f:61:1a:a1:f8:40:
                    9d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:47:C3:7B:98:7F:DB:F2:33:9D:8B:18:5F:63:06:BF:2F:DE:5F:7B
            X509v3 Authority Key Identifier:
                keyid:51:47:5D:50:46:BF:BC:98:91:A4:F5:E8:D0:74:5B:67:32:C7:0E:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKkBAvBpYRx6fvwWnJc7mDWqabmaXQAayutRKS7dFyMi/0/51475D5046BFBC9891A4F5E8D0745B6732C70E45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51475D5046BFBC9891A4F5E8D0745B6732C70E45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKkBAvBpYRx6fvwWnJc7mDWqabmaXQAayutRKS7dFyMi/0/323830343a343133343a3a2f33322d3332203d3e20323636303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4134::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:a3:a7:5e:e6:15:16:6b:8a:47:5f:d9:20:e2:7f:ae:84:1a:
         79:a7:e9:ac:fe:2a:8f:85:4d:33:5f:e3:95:3d:5a:ab:02:17:
         a1:ad:ec:61:0b:0c:c2:92:42:88:8f:af:82:9b:89:f5:05:a2:
         9f:42:b5:44:a5:c2:7b:2f:cc:5a:22:5c:52:d2:4b:ed:95:0b:
         bf:58:f4:fa:db:09:13:ba:6a:6c:2f:fe:83:b3:df:43:09:55:
         6d:b4:79:fe:15:0f:41:8e:4f:d3:12:cb:c5:54:6e:30:82:e5:
         ea:5c:27:e8:cb:53:ca:0d:3c:0d:fc:87:16:c5:67:78:7f:7f:
         5e:d3:f4:2c:81:96:1c:3e:27:76:be:a1:a7:5b:ab:c1:32:72:
         44:d9:7d:c0:69:91:99:1a:05:25:65:cc:f7:3d:47:4a:8a:fb:
         9b:a9:67:d4:da:ce:99:3e:ef:71:77:75:8c:19:74:ca:83:79:
         94:30:ac:64:04:83:38:8c:7c:df:05:9a:7d:b9:d9:76:96:9d:
         db:5e:24:69:ba:6a:02:25:0b:d0:1b:8d:6a:4a:27:43:24:f5:
         6f:1d:b0:0e:45:ee:4f:dd:10:f9:3c:16:c9:cc:81:d4:a3:7d:
         23:9a:8c:6e:62:ba:1e:3f:2b:36:05:42:b2:ff:94:88:d6:11:
         76:c9:12:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----