Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tW37snQ9KvPMp9SHZT5mbErHDwtRnmDAUe7XC2LuTFJ/0/323830343a333936383a3a2f33322d3438203d3e20323636303239.roa
File:                     323830343a333936383a3a2f33322d3438203d3e20323636303239.roa (raw, json)
Hash identifier:          teTCP4bmx1nuIPPr5yzofOYhgDFztFPF76hG0Nncm78=
Subject key identifier:   B4:97:04:99:CF:BE:D4:6E:6B:8F:EF:73:1D:E6:54:E5:39:FD:E7:E8
Certificate issuer:       /CN=E53B5DAC54E1A974B57713FDFFFECC1553BC3C2E
Certificate serial:       10B3CBDD0C28B3F2C144EADF854732655CF20256
Authority key identifier: E5:3B:5D:AC:54:E1:A9:74:B5:77:13:FD:FF:FE:CC:15:53:BC:3C:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E53B5DAC54E1A974B57713FDFFFECC1553BC3C2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tW37snQ9KvPMp9SHZT5mbErHDwtRnmDAUe7XC2LuTFJ/0/323830343a333936383a3a2f33322d3438203d3e20323636303239.roa
Signing time:             Tue 02 Jan 2024 21:14:54 +0000
ROA not before:           Tue 02 Jan 2024 21:09:54 +0000
ROA not after:            Tue 31 Dec 2024 21:14:54 +0000
asID:                     266029
IP address blocks:        2804:3968::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:b3:cb:dd:0c:28:b3:f2:c1:44:ea:df:85:47:32:65:5c:f2:02:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E53B5DAC54E1A974B57713FDFFFECC1553BC3C2E
        Validity
            Not Before: Jan  2 21:09:54 2024 GMT
            Not After : Dec 31 21:14:54 2024 GMT
        Subject: CN=B4970499CFBED46E6B8FEF731DE654E539FDE7E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fc:6d:26:b1:e3:a5:e3:71:42:49:6f:c1:2f:
                    83:b6:58:5e:6d:95:4f:94:27:e6:ba:b6:32:59:e4:
                    49:2a:f8:eb:5b:52:c7:80:a5:e8:10:f2:60:7b:a8:
                    84:5e:7f:a8:81:97:2a:3f:13:47:6a:b0:99:17:fa:
                    3e:60:83:85:40:ba:32:0b:70:c3:2f:10:92:9c:0e:
                    b3:4d:d9:59:15:d1:8c:be:79:08:d4:c2:6b:bb:75:
                    29:80:ef:8f:80:7f:02:76:ec:4f:42:8c:5f:7c:53:
                    cc:7b:2e:39:f5:14:80:2e:8a:2d:b3:b1:91:a5:ed:
                    ad:ff:e3:16:19:a3:5f:05:0f:c3:17:1b:72:15:32:
                    b2:60:03:31:4c:20:2e:70:b4:10:c7:3b:8e:c3:e7:
                    cb:fe:73:75:30:eb:00:7e:06:e8:39:a9:1a:fb:5d:
                    0a:00:5f:0a:e4:0f:d6:21:b0:89:ae:7f:4e:13:36:
                    fb:7e:4a:e9:8b:f3:d5:f4:e7:a2:41:82:c5:ee:5c:
                    ee:0f:4e:0a:35:d0:9f:b5:33:7e:54:2a:79:6e:e3:
                    5b:59:54:f2:4c:1a:8e:8b:73:9d:ab:d6:05:18:37:
                    6f:b0:f0:c1:3f:98:ce:da:94:48:84:a2:9b:50:aa:
                    d8:85:2c:99:26:30:b6:e4:70:0a:e5:f7:52:7b:9d:
                    c1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:97:04:99:CF:BE:D4:6E:6B:8F:EF:73:1D:E6:54:E5:39:FD:E7:E8
            X509v3 Authority Key Identifier:
                keyid:E5:3B:5D:AC:54:E1:A9:74:B5:77:13:FD:FF:FE:CC:15:53:BC:3C:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tW37snQ9KvPMp9SHZT5mbErHDwtRnmDAUe7XC2LuTFJ/0/E53B5DAC54E1A974B57713FDFFFECC1553BC3C2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E53B5DAC54E1A974B57713FDFFFECC1553BC3C2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tW37snQ9KvPMp9SHZT5mbErHDwtRnmDAUe7XC2LuTFJ/0/323830343a333936383a3a2f33322d3438203d3e20323636303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3968::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:21:a6:02:70:9d:0c:b5:75:3e:05:24:55:f6:99:12:d0:86:
         c8:2e:52:52:90:0d:12:57:41:3d:5a:74:df:89:11:be:bd:17:
         0e:5a:a3:c8:db:18:38:1c:fb:2c:6c:29:aa:5e:05:6d:38:cd:
         d1:8d:2c:7c:8c:2f:bf:05:90:b8:14:f9:ca:58:fd:ed:58:2a:
         82:9a:c2:97:61:ff:dd:5f:83:4a:32:6c:f8:f9:c4:5e:f0:00:
         69:d1:08:04:b4:f0:07:59:22:a4:16:2f:3b:be:11:d6:ae:99:
         99:8e:2e:e6:b1:9d:89:25:5a:b6:85:f6:10:e4:45:24:46:61:
         81:a5:57:b5:f3:d5:4b:d5:1d:7a:bc:cc:96:57:85:9b:ee:b0:
         e4:3e:3a:ac:c6:10:86:5c:29:a8:bb:e6:a1:a5:67:1b:97:ce:
         84:a6:e7:ac:0b:42:4f:9c:02:ee:f7:b0:8f:f5:d3:b2:a6:fc:
         15:0d:b8:5b:05:fd:f3:48:56:7f:2a:cd:8d:95:06:fb:37:de:
         de:d3:6a:2d:dd:5e:ac:7f:96:f4:97:64:98:56:74:16:bf:0b:
         4d:4e:62:8b:47:02:73:5c:7a:b7:37:4d:8d:5e:44:a8:75:92:
         9c:c9:03:ce:cc:da:c7:0b:4d:91:ff:45:b6:d4:eb:fe:a2:d9:
         ce:23:c6:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----