Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2XPT6igjoPuFGSck2ac3EB4wwnjA8UqHZiTTvDF4EmiY/0/323830343a333561303a3a2f33322d3335203d3e20323636323937.roa
File:                     323830343a333561303a3a2f33322d3335203d3e20323636323937.roa (raw, json)
Hash identifier:          1oQmJIlTmRtGISNeuPT5Aaw1F/AXzgAcuzC0VoBsGco=
Subject key identifier:   C0:12:3E:6C:B3:00:B8:4C:BB:F4:58:0B:22:45:DF:D2:B6:F1:00:B0
Certificate issuer:       /CN=2BD5F5DB3376C3320EEFAAFFEF3A34EEF3F1E933
Certificate serial:       16E36C46FB7F624EA4E87D3F1132281F7E77CC09
Authority key identifier: 2B:D5:F5:DB:33:76:C3:32:0E:EF:AA:FF:EF:3A:34:EE:F3:F1:E9:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BD5F5DB3376C3320EEFAAFFEF3A34EEF3F1E933.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2XPT6igjoPuFGSck2ac3EB4wwnjA8UqHZiTTvDF4EmiY/0/323830343a333561303a3a2f33322d3335203d3e20323636323937.roa
Signing time:             Fri 08 Dec 2023 19:27:55 +0000
ROA not before:           Fri 08 Dec 2023 19:22:55 +0000
ROA not after:            Fri 06 Dec 2024 19:27:55 +0000
asID:                     266297
IP address blocks:        2804:35a0::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:e3:6c:46:fb:7f:62:4e:a4:e8:7d:3f:11:32:28:1f:7e:77:cc:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BD5F5DB3376C3320EEFAAFFEF3A34EEF3F1E933
        Validity
            Not Before: Dec  8 19:22:55 2023 GMT
            Not After : Dec  6 19:27:55 2024 GMT
        Subject: CN=C0123E6CB300B84CBBF4580B2245DFD2B6F100B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:96:ea:34:4a:c4:6b:5c:1f:fe:72:35:eb:95:
                    3c:e3:10:e5:35:0d:07:39:4f:ac:7a:bf:bf:b1:1b:
                    51:e0:76:08:7c:90:02:c9:6b:99:20:95:ba:cf:bf:
                    f5:df:89:63:22:fd:c9:b7:56:fe:53:a9:b1:54:0c:
                    c0:64:22:44:a9:17:da:8d:99:9b:ec:bc:8d:0a:ff:
                    14:61:25:6f:d9:3e:a8:41:4a:55:a2:21:a2:2a:53:
                    78:e8:21:fe:89:e5:50:43:c2:0a:da:a8:35:d9:ee:
                    5b:40:1f:9f:05:c4:67:ad:72:78:fd:77:96:f8:1d:
                    c1:0a:05:6e:90:52:9e:74:dd:c9:d0:dc:26:42:b3:
                    68:59:cd:62:d0:d3:22:6f:f0:0f:d4:94:a4:9f:30:
                    82:34:fd:d9:30:22:49:60:3b:85:0e:16:89:ba:f3:
                    e6:72:aa:e3:7b:ea:75:51:23:7f:33:bb:0f:23:d9:
                    23:84:fb:9b:fe:ba:55:d5:49:5e:00:dd:f3:ae:12:
                    56:ea:0e:75:6c:3e:4f:ba:e5:39:5a:18:fe:36:1c:
                    c3:9e:c9:43:65:db:d2:9f:33:4f:11:e5:e6:a8:98:
                    33:a9:19:12:1e:e2:21:9c:5a:df:b3:eb:bd:0d:f3:
                    f9:30:65:27:15:a6:53:11:e2:f0:ae:ee:19:c0:00:
                    78:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:12:3E:6C:B3:00:B8:4C:BB:F4:58:0B:22:45:DF:D2:B6:F1:00:B0
            X509v3 Authority Key Identifier:
                keyid:2B:D5:F5:DB:33:76:C3:32:0E:EF:AA:FF:EF:3A:34:EE:F3:F1:E9:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2XPT6igjoPuFGSck2ac3EB4wwnjA8UqHZiTTvDF4EmiY/0/2BD5F5DB3376C3320EEFAAFFEF3A34EEF3F1E933.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BD5F5DB3376C3320EEFAAFFEF3A34EEF3F1E933.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XPT6igjoPuFGSck2ac3EB4wwnjA8UqHZiTTvDF4EmiY/0/323830343a333561303a3a2f33322d3335203d3e20323636323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:35a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:b5:7b:b7:30:f3:ed:5c:90:a6:5c:2b:9a:0c:f3:19:e4:16:
         fc:16:e6:fc:0f:ad:4c:07:07:29:92:2c:71:a1:36:c4:49:aa:
         af:5a:1c:23:23:3b:c9:a4:bd:ac:a9:87:ba:7a:4b:0f:f7:48:
         53:8c:ab:70:1f:1e:33:bb:40:8c:8f:04:33:e1:8c:30:81:b9:
         82:e5:3c:b3:81:77:ef:a9:51:5f:2f:92:6f:c7:d5:89:52:9c:
         8e:d4:a8:5c:02:34:1d:73:6e:d8:eb:f5:36:a9:c1:c4:79:af:
         50:b1:fb:07:b9:13:ff:e3:4f:7f:d7:fe:e4:16:40:24:73:a8:
         c0:fc:d3:8d:0e:10:f2:8f:89:0b:27:ba:ab:25:0a:f1:da:cb:
         03:08:b0:6a:8e:e6:f4:09:93:36:50:ef:9a:ea:aa:f3:63:e5:
         a4:b1:cd:98:4b:39:9f:cc:aa:f9:07:ca:2b:67:00:20:4d:1c:
         ac:e1:e5:42:a8:2a:24:33:bb:10:ee:f3:a9:d1:64:97:fd:80:
         b4:56:67:e9:ca:86:3f:68:a8:ad:4d:8d:c2:0f:fe:a0:fd:55:
         cf:41:0b:e3:bd:9b:c9:ba:6f:2c:55:cf:31:a2:a2:d2:d3:49:
         c3:4f:85:b8:d3:63:f6:8f:29:5f:8d:e8:99:90:4d:c1:e0:b4:
         24:81:34:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----