Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GoATXLY3Mftv1uPFeEHsYi9zo17fUc9pEM9EUNyhTFHL/0/323830343a363237383a3a2f33322d3438203d3e20323639323939.roa
File:                     323830343a363237383a3a2f33322d3438203d3e20323639323939.roa (raw, json)
Hash identifier:          uCcdt95QYl0xBhxcOzyzR84DmlgYRS9aXokDs01sqn8=
Subject key identifier:   58:99:5E:94:71:2D:31:42:88:92:90:27:06:DB:C1:48:A9:99:18:27
Certificate issuer:       /CN=193E8C36D989BF227A8F02A647519CEE06467E67
Certificate serial:       306EA02A6EC3B28E82644C2BE28B17D8DCF42A9E
Authority key identifier: 19:3E:8C:36:D9:89:BF:22:7A:8F:02:A6:47:51:9C:EE:06:46:7E:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/193E8C36D989BF227A8F02A647519CEE06467E67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoATXLY3Mftv1uPFeEHsYi9zo17fUc9pEM9EUNyhTFHL/0/323830343a363237383a3a2f33322d3438203d3e20323639323939.roa
Signing time:             Thu 11 Jan 2024 13:45:00 +0000
ROA not before:           Thu 11 Jan 2024 13:40:00 +0000
ROA not after:            Thu 09 Jan 2025 13:45:00 +0000
asID:                     269299
IP address blocks:        2804:6278::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:6e:a0:2a:6e:c3:b2:8e:82:64:4c:2b:e2:8b:17:d8:dc:f4:2a:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193E8C36D989BF227A8F02A647519CEE06467E67
        Validity
            Not Before: Jan 11 13:40:00 2024 GMT
            Not After : Jan  9 13:45:00 2025 GMT
        Subject: CN=58995E94712D31428892902706DBC148A9991827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8f:70:52:76:15:02:c8:69:a9:82:5c:ba:62:
                    b7:f0:86:17:cd:a1:47:61:79:c5:08:13:d7:98:66:
                    80:55:8e:89:46:cc:35:02:fc:6a:9c:bb:10:e1:14:
                    90:db:26:7c:8e:4b:44:d7:2e:6b:0c:cf:8c:08:47:
                    c6:26:d7:a1:f8:a0:dd:fc:d2:99:8a:4c:ec:7c:fa:
                    e8:66:42:eb:3d:e3:04:17:3a:76:c9:fa:c6:5c:5c:
                    87:a0:c0:0b:35:4f:1a:74:23:01:67:15:b3:ca:97:
                    b4:43:a2:3e:d7:7c:eb:94:49:76:db:7b:1a:c8:c9:
                    69:28:86:f4:5f:b1:14:f5:d3:7e:9e:65:e4:aa:4c:
                    c3:d4:e4:44:2a:7e:b4:3b:3e:11:b0:60:a5:14:de:
                    f6:55:9a:0d:54:0e:51:6a:e5:aa:38:a6:c9:8c:4e:
                    a7:e2:2d:ad:4f:44:6e:9d:b4:99:dc:40:75:ba:a7:
                    da:5f:38:b4:c7:86:30:0c:51:25:5c:6c:90:ce:60:
                    47:6f:09:95:ce:42:e4:07:8f:dc:08:53:05:96:4e:
                    ba:1c:ad:94:71:95:3e:c8:a9:de:f8:df:d8:34:ba:
                    4a:57:22:2f:b5:d9:76:ac:c6:52:be:7f:bd:08:a2:
                    d6:37:09:5f:98:6c:43:63:ef:ff:f0:31:41:29:3a:
                    90:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:99:5E:94:71:2D:31:42:88:92:90:27:06:DB:C1:48:A9:99:18:27
            X509v3 Authority Key Identifier:
                keyid:19:3E:8C:36:D9:89:BF:22:7A:8F:02:A6:47:51:9C:EE:06:46:7E:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoATXLY3Mftv1uPFeEHsYi9zo17fUc9pEM9EUNyhTFHL/0/193E8C36D989BF227A8F02A647519CEE06467E67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/193E8C36D989BF227A8F02A647519CEE06467E67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoATXLY3Mftv1uPFeEHsYi9zo17fUc9pEM9EUNyhTFHL/0/323830343a363237383a3a2f33322d3438203d3e20323639323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6278::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:16:89:86:90:38:c3:1f:f3:8c:5a:4f:99:c9:bf:5f:e5:80:
         c8:65:4b:8e:31:4b:cc:e5:eb:3a:01:6e:2f:5d:44:35:a9:dc:
         1b:44:62:73:cb:e9:bd:39:16:6c:bd:91:42:b4:5a:b9:6f:59:
         d9:1d:e3:59:91:89:6e:be:aa:a9:a8:d3:9c:02:82:5d:e4:b5:
         43:89:72:ab:27:7a:67:75:72:4c:30:29:50:a5:ea:e1:00:91:
         f9:7c:9e:32:89:f8:cc:88:bf:87:97:87:c5:76:ea:a9:4c:80:
         d4:62:b1:b8:47:6a:ad:f0:62:b8:f1:2b:34:4b:b4:72:78:5c:
         87:b5:1c:4f:45:53:20:c9:d9:9b:fe:be:be:9a:9b:a9:ab:19:
         54:56:6c:02:ac:45:b9:b8:eb:5a:09:f1:7b:0c:7d:2c:28:6a:
         6d:cb:1f:94:e0:c1:37:79:cb:98:d3:03:0e:c0:6d:e2:eb:22:
         91:0e:77:69:b3:c1:df:27:3f:07:47:4d:1c:07:c5:8c:10:db:
         e6:18:5e:7a:70:e5:3b:76:9b:6e:95:77:b8:d7:3b:41:d6:84:
         39:4c:1d:fa:56:f2:36:4e:7e:48:e6:95:93:41:61:d8:4e:7c:
         91:d5:44:9f:43:9c:71:5b:1b:5f:f2:84:0a:d1:75:62:00:3d:
         72:2e:28:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----