Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/323830343a343538633a3a2f33322d313238203d3e20323636393334.roa
File:                     323830343a343538633a3a2f33322d313238203d3e20323636393334.roa (raw, json)
Hash identifier:          /zHlH2O1JJ8n09DkFC4AS/VnYrmckea8JeCKAVqZYOw=
Subject key identifier:   BF:E9:92:20:FF:DF:80:DB:A5:12:0F:18:20:25:7C:18:D9:E5:C4:30
Certificate issuer:       /CN=BE22DC93D9DEC10D07526785DECD4A3F53639199
Certificate serial:       6680B986B4309046666C1D1EA63EBF518695CF01
Authority key identifier: BE:22:DC:93:D9:DE:C1:0D:07:52:67:85:DE:CD:4A:3F:53:63:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE22DC93D9DEC10D07526785DECD4A3F53639199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/323830343a343538633a3a2f33322d313238203d3e20323636393334.roa
Signing time:             Fri 01 Mar 2024 19:55:22 +0000
ROA not before:           Fri 01 Mar 2024 19:50:22 +0000
ROA not after:            Fri 28 Feb 2025 19:55:22 +0000
asID:                     266934
IP address blocks:        2804:458c::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:80:b9:86:b4:30:90:46:66:6c:1d:1e:a6:3e:bf:51:86:95:cf:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE22DC93D9DEC10D07526785DECD4A3F53639199
        Validity
            Not Before: Mar  1 19:50:22 2024 GMT
            Not After : Feb 28 19:55:22 2025 GMT
        Subject: CN=BFE99220FFDF80DBA5120F1820257C18D9E5C430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c5:00:50:53:ed:f9:af:cf:ac:4f:48:f3:06:
                    3f:a9:77:25:d2:25:8a:df:84:cc:30:a2:9d:96:3b:
                    80:2e:45:ef:46:8d:48:b1:c3:11:97:c8:d5:7d:a9:
                    16:5a:71:22:dd:e4:ec:c5:17:a1:5e:06:40:8d:74:
                    a3:6b:06:b5:81:c0:8f:00:a0:fd:d8:7e:10:7f:73:
                    bb:be:80:e0:8e:30:c4:88:18:8e:a4:3d:49:ad:3f:
                    b3:29:59:fc:cf:49:ff:ae:4d:fd:d4:95:0f:23:f2:
                    d9:be:a2:41:34:0e:eb:24:bb:d3:0b:b4:92:ae:7f:
                    5d:98:7b:c4:cb:ea:65:25:24:5f:44:8f:d4:88:4b:
                    ac:58:ba:1b:ae:0e:65:b2:ee:c6:7a:52:c2:d6:84:
                    75:57:ab:27:6d:ef:09:fe:81:64:9a:be:50:a1:92:
                    81:39:a6:7e:dc:8b:e4:64:30:1a:f0:01:a9:1e:88:
                    f9:81:23:58:91:d4:63:da:00:0f:61:18:c6:67:ce:
                    1f:b1:e6:8f:46:50:92:d8:dd:cf:ac:df:8a:96:50:
                    f6:bd:60:2c:69:2f:51:ef:2d:c4:29:33:77:00:09:
                    0a:bc:0b:20:fa:58:5b:9a:37:e2:1e:5f:3e:8e:60:
                    16:00:e2:c6:ca:ac:a1:81:52:c5:c3:7d:95:e4:64:
                    b3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E9:92:20:FF:DF:80:DB:A5:12:0F:18:20:25:7C:18:D9:E5:C4:30
            X509v3 Authority Key Identifier:
                keyid:BE:22:DC:93:D9:DE:C1:0D:07:52:67:85:DE:CD:4A:3F:53:63:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/BE22DC93D9DEC10D07526785DECD4A3F53639199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE22DC93D9DEC10D07526785DECD4A3F53639199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/323830343a343538633a3a2f33322d313238203d3e20323636393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:458c::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:93:50:fb:b6:3c:61:bf:27:33:26:19:ba:36:08:c2:8e:e5:
         bf:85:2e:0b:c2:a0:bf:bb:03:22:59:a5:e8:73:80:36:d1:f4:
         f5:b1:97:1f:f3:8b:bf:cf:ed:ad:1c:15:ff:a3:39:cf:5d:6e:
         20:86:57:f1:2a:f9:a2:6f:dd:5b:18:1c:04:96:87:8a:8c:8d:
         67:0c:08:48:92:7a:cb:74:77:05:4c:6f:c4:bb:91:30:2e:2d:
         8e:3b:04:3b:22:1e:8c:a9:da:ae:38:05:5e:d9:d1:ab:7c:0e:
         0d:72:e8:41:95:3d:d6:1a:44:b0:07:f9:fc:cc:ae:55:30:33:
         6c:0f:af:f2:54:49:e9:30:ed:bd:9f:c3:51:85:45:e0:53:80:
         8a:94:cb:3c:a0:a3:0e:9d:fc:56:6c:85:95:95:56:6d:68:27:
         e0:0f:76:35:a9:1e:cc:b5:a5:d8:2b:7e:c5:10:c1:46:8e:8c:
         6a:b1:f3:a1:34:9d:f8:0d:67:b0:d2:9b:38:93:c7:e2:39:88:
         a9:68:1d:4d:99:12:ea:a2:d3:db:37:ef:92:36:21:1e:de:b6:
         4a:97:9c:82:de:82:c3:c6:e9:76:7e:27:c9:14:f4:3f:42:03:
         71:4c:76:8e:99:f7:a8:53:60:c8:69:4a:95:8a:f1:ee:8b:f6:
         bd:58:22:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----