Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/323830343a366439633a383030303a3a2f33332d3333203d3e20323730353434.roa
File:                     323830343a366439633a383030303a3a2f33332d3333203d3e20323730353434.roa (raw, json)
Hash identifier:          EX/5bQCE0tqSzoz5ink5/2ZqDjUUwOOdR10HavSrCII=
Subject key identifier:   8B:3D:79:FC:6D:19:D0:68:B4:F6:84:7A:87:21:6F:CF:C8:40:BC:82
Certificate issuer:       /CN=B224E79ACF8AC68E9C68317AB6507068C8F22F7C
Certificate serial:       5024D24B2483A9702DD34969F61DBD8A564E8106
Authority key identifier: B2:24:E7:9A:CF:8A:C6:8E:9C:68:31:7A:B6:50:70:68:C8:F2:2F:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B224E79ACF8AC68E9C68317AB6507068C8F22F7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/323830343a366439633a383030303a3a2f33332d3333203d3e20323730353434.roa
Signing time:             Mon 30 Oct 2023 12:47:02 +0000
ROA not before:           Mon 30 Oct 2023 12:42:02 +0000
ROA not after:            Mon 28 Oct 2024 12:47:02 +0000
asID:                     270544
IP address blocks:        2804:6d9c:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:24:d2:4b:24:83:a9:70:2d:d3:49:69:f6:1d:bd:8a:56:4e:81:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B224E79ACF8AC68E9C68317AB6507068C8F22F7C
        Validity
            Not Before: Oct 30 12:42:02 2023 GMT
            Not After : Oct 28 12:47:02 2024 GMT
        Subject: CN=8B3D79FC6D19D068B4F6847A87216FCFC840BC82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4e:b4:2d:5e:30:ee:bc:7c:4d:5f:56:bd:d5:
                    d6:82:2c:ef:b2:32:fc:e2:46:9d:85:4c:df:fe:e3:
                    27:1f:50:bc:ca:44:16:1b:23:3e:4f:85:8f:df:3c:
                    b1:35:d7:6e:15:45:08:4b:28:f4:f9:d5:e0:d3:b2:
                    6e:ab:4d:66:d1:66:f3:77:11:38:f3:fe:26:87:e4:
                    8c:53:ff:de:ba:92:18:f8:65:42:97:db:3a:c5:57:
                    44:bd:8b:87:80:19:99:d5:21:04:78:e1:bf:7c:f6:
                    08:30:f9:fc:8b:ae:78:e3:21:53:f0:e8:a5:46:7f:
                    43:30:43:30:97:f5:70:44:6c:5b:c0:ee:d1:ff:eb:
                    56:98:9e:36:9a:f9:5a:c0:4f:35:b4:35:45:2a:6b:
                    7a:5c:4f:87:0b:ee:d8:9e:56:51:2a:85:97:e4:2c:
                    49:fe:fa:63:b9:1f:20:74:5b:db:e7:ce:25:22:b9:
                    37:fb:32:23:cf:78:1d:06:fe:e0:69:63:e1:7d:69:
                    e3:37:34:51:84:93:6d:6e:18:1d:af:89:d5:19:a0:
                    7a:1a:07:bf:ab:b3:a3:bd:de:42:7a:7a:bc:4a:fd:
                    5d:69:a5:56:39:11:ad:fa:90:98:87:8e:09:2e:54:
                    83:33:7e:3f:6e:cc:36:a6:f4:86:e0:a1:80:04:d8:
                    f4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:3D:79:FC:6D:19:D0:68:B4:F6:84:7A:87:21:6F:CF:C8:40:BC:82
            X509v3 Authority Key Identifier:
                keyid:B2:24:E7:9A:CF:8A:C6:8E:9C:68:31:7A:B6:50:70:68:C8:F2:2F:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/B224E79ACF8AC68E9C68317AB6507068C8F22F7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B224E79ACF8AC68E9C68317AB6507068C8F22F7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/323830343a366439633a383030303a3a2f33332d3333203d3e20323730353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6d9c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         84:29:aa:27:4b:96:a1:d2:36:88:f9:00:d0:f8:ea:b1:86:a6:
         be:51:cc:e4:bb:d1:44:80:3b:b4:46:19:c8:5e:be:43:dd:c6:
         93:fc:6a:10:ff:97:eb:77:73:e6:17:78:fc:36:c2:ba:13:41:
         dc:94:25:dc:31:56:c1:94:c8:81:b9:c5:7c:5b:07:11:c5:21:
         0d:43:ee:dc:ab:1f:e0:80:31:47:b6:7a:4c:5c:48:30:18:71:
         ed:77:f1:91:67:65:6b:c9:a9:1f:ed:33:3c:df:bb:ab:5f:9d:
         5b:4c:2b:9d:f5:db:70:b5:02:5c:82:3d:9a:e7:24:bc:a6:ad:
         65:bd:b6:03:40:a2:2a:f1:a4:d9:3b:d3:91:7b:a6:60:76:2e:
         f5:4c:0c:46:ed:8d:bc:6c:fb:82:cf:fc:25:8a:ff:fc:74:8e:
         0d:15:8e:8e:b1:c3:1f:78:4b:88:e3:d5:08:fc:ed:e5:09:c7:
         86:9d:69:4b:9f:22:b0:97:a6:8f:56:89:60:1e:bc:ad:3d:25:
         0e:9a:a7:a8:24:ec:43:38:a4:26:85:b3:50:3d:01:41:de:0a:
         1f:06:f8:0c:c2:b5:f1:fa:ca:97:95:b9:64:da:e5:c7:b1:ac:
         fb:50:67:c2:40:2f:4f:06:c8:79:ea:ac:8b:ff:bc:33:3f:d3:
         71:d0:4f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----