Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/0/323830343a356338343a3a2f33322d313238203d3e20323638393133.roa
File:                     323830343a356338343a3a2f33322d313238203d3e20323638393133.roa (raw, json)
Hash identifier:          awurZ2vhStRoDlV6bC7LMRu/5sE0NcFRLVPL/EZvcCE=
Subject key identifier:   4C:2C:87:78:DB:B3:02:A2:1E:1D:51:F8:D4:00:92:EF:5B:9F:CA:78
Certificate issuer:       /CN=E92C2E5EBAB4AC9C6294B7E05E6EB3188D43F2E0
Certificate serial:       ECDD47F05276BBE03E9D783D8E99F71EC4201F
Authority key identifier: E9:2C:2E:5E:BA:B4:AC:9C:62:94:B7:E0:5E:6E:B3:18:8D:43:F2:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E92C2E5EBAB4AC9C6294B7E05E6EB3188D43F2E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/0/323830343a356338343a3a2f33322d313238203d3e20323638393133.roa
Signing time:             Mon 02 Oct 2023 19:40:24 +0000
ROA not before:           Mon 02 Oct 2023 19:35:24 +0000
ROA not after:            Mon 30 Sep 2024 19:40:24 +0000
asID:                     268913
IP address blocks:        2804:5c84::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ec:dd:47:f0:52:76:bb:e0:3e:9d:78:3d:8e:99:f7:1e:c4:20:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E92C2E5EBAB4AC9C6294B7E05E6EB3188D43F2E0
        Validity
            Not Before: Oct  2 19:35:24 2023 GMT
            Not After : Sep 30 19:40:24 2024 GMT
        Subject: CN=4C2C8778DBB302A21E1D51F8D40092EF5B9FCA78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:49:20:b2:b1:99:8d:2f:5b:46:88:38:02:31:
                    30:93:72:68:be:8e:74:c1:56:fe:c0:62:63:e9:5a:
                    29:43:2f:63:ea:0c:53:61:85:db:3b:8e:5f:7f:58:
                    d3:9c:61:13:ae:b0:98:0e:17:94:7d:87:46:00:b5:
                    f4:64:f1:e2:04:af:f1:87:6d:6f:5b:1c:85:1c:3b:
                    25:2c:22:66:97:02:2a:86:9a:b8:52:f5:2c:2c:bc:
                    a2:c0:7e:49:8f:ef:f0:55:cd:89:4d:a9:25:f4:16:
                    df:00:7c:3c:1f:22:34:7c:6d:18:7b:70:c1:a7:d9:
                    d7:c4:99:3b:1a:21:90:db:6f:d8:a4:16:1d:ae:ec:
                    0b:b3:67:48:e6:b0:4a:78:81:90:bf:b3:28:2c:22:
                    fc:ee:da:d3:e7:19:80:b9:b8:b0:f7:40:36:ca:4e:
                    ea:ea:66:b2:d5:e1:38:66:46:56:b0:52:1a:a3:fb:
                    92:fe:19:dd:1d:0c:e0:ac:b1:88:79:40:9f:4c:ba:
                    69:c7:c6:a9:43:e8:ab:a4:82:4e:17:f7:46:33:e4:
                    72:0c:57:65:60:a8:b4:10:f1:6c:26:13:24:18:00:
                    51:7c:ff:74:08:65:0f:ba:2d:e7:1c:b8:2e:d5:2b:
                    bb:09:7c:e0:01:aa:c2:01:7e:63:78:08:6c:c4:81:
                    01:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:2C:87:78:DB:B3:02:A2:1E:1D:51:F8:D4:00:92:EF:5B:9F:CA:78
            X509v3 Authority Key Identifier:
                keyid:E9:2C:2E:5E:BA:B4:AC:9C:62:94:B7:E0:5E:6E:B3:18:8D:43:F2:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/0/E92C2E5EBAB4AC9C6294B7E05E6EB3188D43F2E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E92C2E5EBAB4AC9C6294B7E05E6EB3188D43F2E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/0/323830343a356338343a3a2f33322d313238203d3e20323638393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5c84::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:07:c5:1f:59:1d:e5:94:86:b6:c2:32:39:ad:4f:1b:a0:29:
         cb:e8:54:36:3c:38:98:89:54:03:80:47:db:b7:96:7c:2f:f4:
         bc:47:00:a0:c7:67:8d:29:31:ca:5c:2e:10:12:c5:d0:6b:b7:
         99:7b:f6:9d:2d:4f:a1:8e:c8:ad:ae:bc:c4:22:4b:6c:60:8b:
         d3:62:ac:7e:c7:1b:4f:3a:a5:d7:e9:ea:ee:9c:81:8b:5d:75:
         60:87:9e:82:11:74:0c:ab:a5:1d:93:de:dd:37:e2:f2:49:3c:
         58:e3:83:4a:72:86:d2:d2:90:cc:83:7e:ad:85:fc:4a:2d:2b:
         b1:f3:8d:35:fd:d4:39:5c:de:e0:0c:18:b4:05:9f:a4:90:e2:
         32:28:5c:c7:60:e2:1c:48:78:df:06:4b:4e:e7:a8:63:8e:05:
         7a:41:86:74:d8:72:ac:57:2c:87:60:0b:a6:b6:2a:1f:92:7e:
         b4:36:08:d9:ce:b5:47:97:4b:03:94:3a:47:0a:e5:b5:bd:f1:
         5b:8d:df:94:39:09:bd:ae:66:60:8d:0a:ea:67:5d:68:a2:0e:
         99:91:8e:25:08:23:52:bf:28:2a:12:7b:4d:2e:10:97:60:00:
         e8:95:8d:32:71:43:49:02:dc:b2:2b:f9:d0:6f:c4:2f:af:41:
         99:f5:e4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----