Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/323830343a366439633a3a2f33332d3333203d3e20323730353434.roa
File:                     323830343a366439633a3a2f33332d3333203d3e20323730353434.roa (raw, json)
Hash identifier:          9GOBozo1ekrkKyINtGpicR9ydlhmakdj/q8Tob7LA7k=
Subject key identifier:   BC:DB:3C:BB:59:3E:C9:6F:65:36:C3:11:27:9F:9A:A9:28:C1:0E:1F
Certificate issuer:       /CN=B224E79ACF8AC68E9C68317AB6507068C8F22F7C
Certificate serial:       2DC8794F979DAC7F11AB8A9669E1703EFE12D9E3
Authority key identifier: B2:24:E7:9A:CF:8A:C6:8E:9C:68:31:7A:B6:50:70:68:C8:F2:2F:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B224E79ACF8AC68E9C68317AB6507068C8F22F7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/323830343a366439633a3a2f33332d3333203d3e20323730353434.roa
Signing time:             Mon 30 Oct 2023 12:47:02 +0000
ROA not before:           Mon 30 Oct 2023 12:42:02 +0000
ROA not after:            Mon 28 Oct 2024 12:47:02 +0000
asID:                     270544
IP address blocks:        2804:6d9c::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:c8:79:4f:97:9d:ac:7f:11:ab:8a:96:69:e1:70:3e:fe:12:d9:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B224E79ACF8AC68E9C68317AB6507068C8F22F7C
        Validity
            Not Before: Oct 30 12:42:02 2023 GMT
            Not After : Oct 28 12:47:02 2024 GMT
        Subject: CN=BCDB3CBB593EC96F6536C311279F9AA928C10E1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ed:17:04:5d:91:11:0c:77:12:f0:c0:37:e2:
                    e4:96:82:b8:ea:67:4d:6b:35:b8:86:6d:e4:f8:e3:
                    2f:de:19:7d:92:3e:1c:67:95:39:b8:6f:b9:c2:3f:
                    bd:7f:36:54:6e:38:13:e2:70:53:95:a6:4e:32:5a:
                    3a:a1:87:63:be:42:c2:b9:35:92:fc:b1:66:a8:c9:
                    16:a6:ed:19:23:01:ee:7f:8a:2d:24:d2:13:d8:70:
                    74:7f:b0:f9:13:c1:33:3a:51:80:f6:a1:84:90:6c:
                    47:94:27:8f:c7:57:54:52:07:58:9e:62:cd:1a:5c:
                    d7:14:37:f7:1c:3e:44:73:91:32:79:7b:b7:a5:3f:
                    21:b0:5f:a4:33:2d:41:1a:66:72:a5:0f:56:80:97:
                    8b:d8:00:e6:bd:00:fb:66:36:92:c8:1f:3a:63:b0:
                    05:28:54:e7:a7:79:74:b6:65:0d:00:3a:80:2e:cd:
                    e8:2a:bc:61:0c:62:ff:b2:58:a5:ab:33:8b:d7:87:
                    bd:c7:05:ee:0d:2d:84:e9:00:f1:f7:09:f5:df:31:
                    f5:c7:76:0e:d5:2a:83:79:2a:c1:9d:3c:a7:41:8c:
                    18:87:4d:fc:64:bb:1c:9a:57:9c:a3:3a:68:a4:5e:
                    82:f8:b6:44:ca:df:7b:b6:bf:b8:fd:21:c4:71:04:
                    c9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:DB:3C:BB:59:3E:C9:6F:65:36:C3:11:27:9F:9A:A9:28:C1:0E:1F
            X509v3 Authority Key Identifier:
                keyid:B2:24:E7:9A:CF:8A:C6:8E:9C:68:31:7A:B6:50:70:68:C8:F2:2F:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/B224E79ACF8AC68E9C68317AB6507068C8F22F7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B224E79ACF8AC68E9C68317AB6507068C8F22F7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/323830343a366439633a3a2f33332d3333203d3e20323730353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6d9c::/33

    Signature Algorithm: sha256WithRSAEncryption
         a2:da:81:e1:49:1b:57:c9:0b:76:e7:c7:83:1f:ed:f5:81:89:
         b2:c9:35:9f:c2:b1:8f:65:e2:54:58:67:99:82:90:65:9d:49:
         4f:ff:b8:e9:d5:bb:29:d0:ba:53:90:ba:7c:03:7c:7b:42:90:
         18:13:42:49:34:39:cb:ce:60:01:2c:df:44:e6:7c:4c:1b:f5:
         2e:f7:cf:b4:ab:6e:b4:b2:8e:93:fe:74:ca:84:96:1c:ed:0d:
         4c:5d:94:78:af:80:8b:93:aa:31:99:ef:51:25:7a:3e:03:d0:
         6c:e9:ae:53:d5:76:8d:d2:4c:ea:d2:69:3a:c6:75:a0:37:f8:
         df:70:1d:3c:43:53:a0:41:4d:64:70:d4:a1:99:c9:28:76:e9:
         be:fe:43:64:3b:fd:3d:e8:f1:ca:55:7a:15:fd:1c:a4:3e:d5:
         77:14:90:bc:01:91:9a:51:b0:f0:5c:07:60:bf:5c:75:03:e1:
         0f:f0:59:05:21:6c:bc:e2:98:34:da:7a:80:e3:17:13:ac:87:
         22:62:2e:f7:38:60:21:32:c9:1d:c3:15:84:6a:37:51:7c:e0:
         fb:f3:f8:4d:97:e1:83:ac:3f:90:90:6a:80:12:24:92:e2:46:
         8a:79:c9:0f:54:79:ff:69:47:35:a2:f9:1a:1a:6f:ea:d5:e3:
         db:7e:5f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----