Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a3a2f33322d3332203d3e20323633393430.roa
File:                     323830343a323831383a3a2f33322d3332203d3e20323633393430.roa (raw, json)
Hash identifier:          cDo9EZnI8aT128S6J2rcwxvfKNqGcb8srlbKZ3aMFNw=
Subject key identifier:   45:50:FC:68:04:7C:17:E6:46:34:6D:40:99:66:34:AE:93:99:67:9F
Certificate issuer:       /CN=B554F9183DD50D422F8B2C261FCB73CB7E6FC392
Certificate serial:       2D6C9010A2130C3D8D6CC1FB275EFD1F6E044F4F
Authority key identifier: B5:54:F9:18:3D:D5:0D:42:2F:8B:2C:26:1F:CB:73:CB:7E:6F:C3:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B554F9183DD50D422F8B2C261FCB73CB7E6FC392.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a3a2f33322d3332203d3e20323633393430.roa
Signing time:             Mon 18 Dec 2023 17:26:30 +0000
ROA not before:           Mon 18 Dec 2023 17:21:30 +0000
ROA not after:            Mon 16 Dec 2024 17:26:30 +0000
asID:                     263940
IP address blocks:        2804:2818::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:6c:90:10:a2:13:0c:3d:8d:6c:c1:fb:27:5e:fd:1f:6e:04:4f:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B554F9183DD50D422F8B2C261FCB73CB7E6FC392
        Validity
            Not Before: Dec 18 17:21:30 2023 GMT
            Not After : Dec 16 17:26:30 2024 GMT
        Subject: CN=4550FC68047C17E646346D40996634AE9399679F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5f:3b:9c:23:16:74:eb:b1:ba:4e:a0:b1:61:
                    ad:c7:bd:3c:55:ea:0b:8d:c3:81:9c:a4:7a:48:9b:
                    1f:1a:8d:45:35:74:20:f3:13:3d:ff:09:c0:bc:93:
                    c2:29:cf:e1:10:cf:ce:cd:b9:6e:3d:ef:3b:32:a7:
                    0e:3f:63:ae:e3:7e:c8:ed:c0:4e:06:9c:21:30:85:
                    b7:78:a7:da:ca:c6:47:37:9f:5c:c9:6b:2b:33:0f:
                    82:01:c6:9c:85:d0:9a:7c:5c:16:0f:3b:5d:5b:bd:
                    73:6d:53:b3:72:eb:4f:25:9f:64:bf:ac:c6:de:4d:
                    6f:07:21:30:32:cd:b0:7e:cf:02:9e:08:b4:87:da:
                    ee:be:8f:22:8c:20:65:7f:85:7f:bb:2b:82:c9:d4:
                    8e:69:25:c4:60:4d:56:27:47:42:bd:cc:f3:ff:57:
                    d7:d3:4c:a4:5a:93:cb:5c:65:09:7a:a2:dd:9d:48:
                    5d:2e:71:fa:cd:d8:a8:3d:ed:74:53:51:0d:31:c6:
                    8a:e0:a6:4a:1c:7c:98:a4:fe:ba:9e:fa:9d:fe:78:
                    b9:40:5c:20:ad:1e:e3:b4:e6:4a:b8:00:23:52:21:
                    4f:f9:8b:63:1a:50:92:56:01:43:79:64:ed:8f:59:
                    dd:b6:1f:93:64:52:db:8c:1a:b4:cb:e9:6a:1d:a0:
                    80:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:50:FC:68:04:7C:17:E6:46:34:6D:40:99:66:34:AE:93:99:67:9F
            X509v3 Authority Key Identifier:
                keyid:B5:54:F9:18:3D:D5:0D:42:2F:8B:2C:26:1F:CB:73:CB:7E:6F:C3:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/B554F9183DD50D422F8B2C261FCB73CB7E6FC392.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B554F9183DD50D422F8B2C261FCB73CB7E6FC392.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a3a2f33322d3332203d3e20323633393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2818::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:a6:17:73:50:8a:0f:bf:2f:82:72:f8:28:19:00:2b:91:5c:
         76:60:85:ad:da:f7:7f:39:bc:e6:97:5e:24:74:de:bf:9f:13:
         dd:d0:ae:5b:05:33:80:01:de:66:b2:31:30:cc:c9:c7:1f:22:
         15:61:d7:25:a8:22:ed:51:3d:41:e1:99:6c:f4:75:0e:88:75:
         b3:df:ca:ba:97:6d:ca:09:ac:29:8c:36:8a:db:75:cb:14:c0:
         e6:2a:a7:ac:38:31:95:a9:31:ab:ab:e2:0a:4d:b7:39:f4:07:
         ea:68:b6:73:ae:26:5e:9e:fa:7b:5f:f7:aa:7b:e7:4a:85:ea:
         ab:5b:b3:7a:a9:a4:6a:41:61:bf:e5:0c:b9:2a:19:28:36:7c:
         98:a3:9c:d8:93:36:68:bc:6a:19:f6:9b:7c:cb:0c:8b:71:16:
         07:5d:d3:d5:35:1c:7b:c5:da:70:69:ef:10:8f:82:7a:df:da:
         35:59:c9:c1:f6:d8:74:19:49:ea:98:d5:58:78:78:82:a8:47:
         9e:51:65:c8:b0:1e:3d:e4:69:7a:57:e1:ce:0b:83:cf:6b:41:
         bd:6a:01:e4:22:31:fe:e2:75:7a:29:d9:b3:0e:16:74:ff:14:
         62:42:b1:f4:45:c3:2c:a0:50:3d:34:39:48:68:6a:68:b2:34:
         7a:e0:ba:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----