Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/0/323830343a366466383a3a2f33322d3438203d3e20323730353637.roa
File:                     323830343a366466383a3a2f33322d3438203d3e20323730353637.roa (raw, json)
Hash identifier:          r2u59MNEjCC+ZO/eBkKyohy0ZxamReD7GdMhG8xx8Y0=
Subject key identifier:   1F:7C:0D:7B:63:DF:BF:45:BF:21:60:36:80:BB:D2:AD:69:F8:AE:A2
Certificate issuer:       /CN=5E67AA0BB6A44C0BB239FEC50C971CD56CA45343
Certificate serial:       369C19C039DDF419E8E6196F9FF573F65C01E3CB
Authority key identifier: 5E:67:AA:0B:B6:A4:4C:0B:B2:39:FE:C5:0C:97:1C:D5:6C:A4:53:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5E67AA0BB6A44C0BB239FEC50C971CD56CA45343.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/0/323830343a366466383a3a2f33322d3438203d3e20323730353637.roa
Signing time:             Thu 15 Feb 2024 16:54:20 +0000
ROA not before:           Thu 15 Feb 2024 16:49:20 +0000
ROA not after:            Thu 13 Feb 2025 16:54:20 +0000
asID:                     270567
IP address blocks:        2804:6df8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:9c:19:c0:39:dd:f4:19:e8:e6:19:6f:9f:f5:73:f6:5c:01:e3:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E67AA0BB6A44C0BB239FEC50C971CD56CA45343
        Validity
            Not Before: Feb 15 16:49:20 2024 GMT
            Not After : Feb 13 16:54:20 2025 GMT
        Subject: CN=1F7C0D7B63DFBF45BF21603680BBD2AD69F8AEA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:23:63:92:e2:28:8e:19:4e:17:c8:2c:74:f9:
                    84:5e:b9:5b:65:75:60:d4:26:68:23:a0:3c:9b:d0:
                    0d:62:c1:5e:9d:18:8c:2a:4d:7e:0a:17:07:2e:82:
                    14:a6:db:78:ef:82:bb:27:ee:ce:d3:7b:a4:ac:25:
                    93:44:9f:1f:49:be:c6:10:59:81:dd:6e:81:1b:27:
                    fd:6c:6d:08:8c:f4:bb:2d:7a:09:b9:7b:f3:45:fe:
                    cf:70:ab:4c:a4:31:0c:6f:3b:ee:a2:90:3e:95:b4:
                    eb:6d:2b:ea:94:67:1a:b7:9b:5c:56:64:d5:e9:3b:
                    17:15:fb:da:6a:78:32:96:ec:d2:ac:c0:af:16:12:
                    55:0e:74:6e:11:2e:12:51:ee:d2:81:0f:be:ce:3f:
                    fb:41:39:05:83:10:0b:7b:d2:bf:7b:70:20:6c:af:
                    df:f0:e8:9d:75:65:0a:65:c6:b8:da:d9:65:20:f0:
                    12:f4:b2:f7:91:2c:2c:51:aa:18:c0:ec:34:76:3b:
                    be:fc:d5:87:ba:f5:c4:d0:25:61:c5:5e:35:37:35:
                    72:58:f5:bc:8c:8d:64:aa:fa:b7:bb:11:7a:72:19:
                    ce:05:30:bc:c9:5f:bb:7a:d9:78:48:a9:c6:53:30:
                    6c:2f:73:8e:4a:12:8f:07:e3:c7:72:d4:75:33:3b:
                    1f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:7C:0D:7B:63:DF:BF:45:BF:21:60:36:80:BB:D2:AD:69:F8:AE:A2
            X509v3 Authority Key Identifier:
                keyid:5E:67:AA:0B:B6:A4:4C:0B:B2:39:FE:C5:0C:97:1C:D5:6C:A4:53:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/0/5E67AA0BB6A44C0BB239FEC50C971CD56CA45343.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5E67AA0BB6A44C0BB239FEC50C971CD56CA45343.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/0/323830343a366466383a3a2f33322d3438203d3e20323730353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6df8::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:2b:b8:fb:4f:08:d7:59:3c:83:44:05:08:d5:e2:04:b1:b1:
         7f:fd:af:c6:d0:98:33:4b:94:05:06:25:f8:21:88:43:3a:d7:
         c1:8c:9c:00:1d:af:65:fc:2b:51:f0:be:4c:7b:11:79:60:7a:
         d1:e6:d2:2d:01:75:60:db:d7:b2:51:07:b8:54:a7:ad:7f:23:
         85:4f:62:3b:bb:a7:46:67:16:fe:49:43:3b:ca:a5:aa:48:47:
         e7:50:80:b9:83:7f:1b:0a:61:b3:1c:57:2a:3c:0f:98:e9:59:
         3e:36:90:13:8e:73:ee:8c:2d:82:3c:5e:04:ec:8a:59:af:32:
         70:cd:3c:a1:5a:5a:27:26:50:b5:ad:b4:ca:8a:2d:04:9a:75:
         39:01:3f:4e:b3:47:29:8e:0a:2f:b6:69:ad:f0:fa:dc:f5:0c:
         26:62:a0:8b:76:d4:2a:bc:6e:88:a2:91:41:d3:83:57:3a:83:
         00:86:e0:b6:fd:00:fe:52:6a:43:40:5f:84:67:5c:18:d0:a1:
         88:4f:ab:0b:d3:84:ac:03:75:6b:29:45:92:9f:2a:e2:b2:d2:
         e9:9e:f3:9f:d5:db:7e:0c:35:93:07:51:58:27:f1:05:e0:75:
         b0:f8:a9:8f:55:96:12:00:1f:af:9c:8a:73:78:e8:0f:dd:9d:
         26:38:63:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----