Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ERfCiSbPEUrg4ycMD3LY8TatL1Cd97gS1YKJ2RWeDdP8/0/323830343a3565383a3a2f33322d3332203d3e20323632353439.roa
File:                     323830343a3565383a3a2f33322d3332203d3e20323632353439.roa (raw, json)
Hash identifier:          ktArl7R57/k+S98BR2LOoV+k448omwxA+3ae8ENUxE4=
Subject key identifier:   C5:D8:CA:4A:7A:8F:99:2C:09:48:22:F5:10:CE:4D:17:C5:7B:90:7C
Certificate issuer:       /CN=8E929E44F4E460DD232A372077C8427817A7F840
Certificate serial:       020DA796935BA1680CC3166B8045DCCAD1CB6256
Authority key identifier: 8E:92:9E:44:F4:E4:60:DD:23:2A:37:20:77:C8:42:78:17:A7:F8:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E929E44F4E460DD232A372077C8427817A7F840.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ERfCiSbPEUrg4ycMD3LY8TatL1Cd97gS1YKJ2RWeDdP8/0/323830343a3565383a3a2f33322d3332203d3e20323632353439.roa
Signing time:             Thu 10 Aug 2023 12:13:12 +0000
ROA not before:           Thu 10 Aug 2023 12:08:12 +0000
ROA not after:            Thu 08 Aug 2024 12:13:12 +0000
asID:                     262549
IP address blocks:        2804:5e8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:0d:a7:96:93:5b:a1:68:0c:c3:16:6b:80:45:dc:ca:d1:cb:62:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E929E44F4E460DD232A372077C8427817A7F840
        Validity
            Not Before: Aug 10 12:08:12 2023 GMT
            Not After : Aug  8 12:13:12 2024 GMT
        Subject: CN=C5D8CA4A7A8F992C094822F510CE4D17C57B907C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a4:da:17:c4:79:cd:48:b8:6b:6a:9a:d8:cc:
                    45:f4:2b:fc:ad:75:cc:ee:df:6f:cd:70:d1:8e:23:
                    37:f5:fa:e0:83:67:9d:55:ab:e0:02:57:52:d4:1f:
                    9d:f8:4e:98:9d:cc:ce:a9:4b:3d:93:a6:d5:69:c8:
                    74:74:c2:ba:cc:41:65:ee:79:61:60:de:36:13:a5:
                    e8:87:e2:3f:e1:b3:3d:c7:bb:61:9b:13:e0:5f:dc:
                    10:7d:f3:b7:a4:cf:cf:be:18:72:b3:75:6d:5f:f3:
                    bf:5f:41:dc:77:ef:ad:67:d8:20:73:6c:65:ee:27:
                    5c:5d:0a:d9:3e:3e:9b:ad:39:bf:0a:24:9f:4a:ae:
                    96:34:51:49:98:21:15:a8:b0:c2:db:6a:d6:9a:d6:
                    8a:f2:a5:16:3a:fd:f9:f5:3d:5a:ae:1d:6a:22:75:
                    7b:8c:7b:e3:98:da:5a:17:7f:4f:60:d3:1b:fc:d7:
                    be:47:32:3a:e9:be:8b:a5:60:13:ca:ec:0f:9d:77:
                    2c:79:d5:b3:36:e6:69:c2:3e:08:98:ec:9b:07:7a:
                    68:55:47:e8:d4:4c:31:4d:90:5b:6a:63:c5:42:bf:
                    3f:16:c4:99:52:27:79:24:53:37:36:a7:ee:a0:41:
                    9e:a9:e1:85:e7:03:92:fe:68:ee:ab:c8:f4:a3:be:
                    90:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D8:CA:4A:7A:8F:99:2C:09:48:22:F5:10:CE:4D:17:C5:7B:90:7C
            X509v3 Authority Key Identifier:
                keyid:8E:92:9E:44:F4:E4:60:DD:23:2A:37:20:77:C8:42:78:17:A7:F8:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ERfCiSbPEUrg4ycMD3LY8TatL1Cd97gS1YKJ2RWeDdP8/0/8E929E44F4E460DD232A372077C8427817A7F840.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E929E44F4E460DD232A372077C8427817A7F840.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERfCiSbPEUrg4ycMD3LY8TatL1Cd97gS1YKJ2RWeDdP8/0/323830343a3565383a3a2f33322d3332203d3e20323632353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         cc:a3:9d:d2:04:94:6c:d3:12:69:5e:e5:b6:ea:17:ce:7c:e9:
         80:9c:1a:a0:53:f5:3f:74:90:88:e7:f9:0d:3c:28:8f:39:c2:
         f8:f6:95:79:2d:7f:97:72:29:98:03:54:35:a3:ab:90:09:6d:
         bf:01:6d:2f:a9:a6:7e:af:39:61:df:86:c0:40:66:ab:42:87:
         02:79:e4:db:1a:7d:16:71:a1:0b:4a:0e:30:3e:de:87:43:37:
         94:cf:11:71:d3:0a:f1:5a:24:aa:ba:26:51:5c:e9:c6:4d:34:
         68:75:84:ae:44:b2:cb:84:1c:6d:c2:4c:31:cd:80:05:c1:0c:
         81:f1:4f:a9:ca:8e:2c:0e:60:a3:24:67:27:f9:2c:7e:32:5d:
         db:41:72:ff:88:39:82:aa:f9:0b:3a:c8:7d:3d:a0:a9:5f:72:
         60:c8:4b:5c:4d:b7:90:d5:c7:63:22:72:a4:72:bb:c2:fd:5e:
         e2:79:51:4e:63:85:ba:b7:59:09:3d:3b:f8:c6:fd:af:69:c9:
         2d:bb:82:a3:4c:60:a5:8a:64:29:95:41:99:6d:40:19:d5:27:
         52:ab:cd:7a:e2:33:f3:36:f6:23:35:20:01:ba:97:11:46:54:
         05:b9:1b:21:a4:62:a5:66:5d:23:1c:0b:9c:70:b3:9c:2c:c4:
         8c:cf:ee:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----