Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/323830343a316234343a633030303a3a2f33352d3335203d3e203631373137.roa
File:                     323830343a316234343a633030303a3a2f33352d3335203d3e203631373137.roa (raw, json)
Hash identifier:          fqgE2n1NLgA+wxx9T9SLZkwdf+qvzG2wpQ8RoA5G7i0=
Subject key identifier:   9F:52:F1:25:63:C1:BD:EC:D6:DE:C6:61:C8:0C:B0:50:CE:B9:F2:C4
Certificate issuer:       /CN=5C9914A35ACBABAC6A6E5FAA599497DD97C412A5
Certificate serial:       18A1C0DEE102EA250C4DCC476A4950800637758B
Authority key identifier: 5C:99:14:A3:5A:CB:AB:AC:6A:6E:5F:AA:59:94:97:DD:97:C4:12:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/323830343a316234343a633030303a3a2f33352d3335203d3e203631373137.roa
Signing time:             Sat 09 Dec 2023 13:03:42 +0000
ROA not before:           Sat 09 Dec 2023 12:58:42 +0000
ROA not after:            Sat 07 Dec 2024 13:03:42 +0000
asID:                     61717
IP address blocks:        2804:1b44:c000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:a1:c0:de:e1:02:ea:25:0c:4d:cc:47:6a:49:50:80:06:37:75:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C9914A35ACBABAC6A6E5FAA599497DD97C412A5
        Validity
            Not Before: Dec  9 12:58:42 2023 GMT
            Not After : Dec  7 13:03:42 2024 GMT
        Subject: CN=9F52F12563C1BDECD6DEC661C80CB050CEB9F2C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ff:2d:40:8a:1f:2e:54:13:9a:14:72:dc:8a:
                    f4:be:60:0d:bb:83:2c:6f:0d:20:33:55:e5:76:1d:
                    27:29:d0:76:97:53:c2:f8:2c:9b:c7:dc:16:74:05:
                    91:96:13:30:04:09:64:6e:01:3e:32:58:cf:c6:a6:
                    98:39:fc:fe:f9:97:a4:e3:25:be:61:64:7f:52:ee:
                    6e:3a:4c:e6:35:02:d2:3c:3a:f1:6c:9b:96:32:10:
                    de:fa:ad:89:aa:76:e8:9e:9b:a7:a3:67:91:9e:3a:
                    28:fe:94:cc:7d:e5:87:d6:d8:6a:68:68:72:22:62:
                    ce:5d:cd:8e:e5:da:ea:cc:41:fc:41:4a:af:1f:76:
                    68:71:33:83:5d:e3:57:a7:cb:4f:33:57:a4:c9:e2:
                    e3:7e:3f:1d:f4:56:86:2d:24:f4:d5:c7:7b:9e:37:
                    53:c6:56:d2:0a:38:fd:46:e7:8e:d2:70:8b:17:13:
                    28:59:b1:5e:e0:ee:98:2d:0b:2a:43:0c:87:57:71:
                    39:be:9f:48:8d:2b:fa:3e:79:8a:be:a7:0d:91:d6:
                    b7:ce:11:62:31:8a:26:67:f3:eb:47:df:b1:96:48:
                    9c:67:e8:e7:e8:be:f2:26:a7:7d:14:ba:00:f6:77:
                    55:10:50:92:29:74:46:b2:52:9b:6e:94:24:d1:c9:
                    79:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:52:F1:25:63:C1:BD:EC:D6:DE:C6:61:C8:0C:B0:50:CE:B9:F2:C4
            X509v3 Authority Key Identifier:
                keyid:5C:99:14:A3:5A:CB:AB:AC:6A:6E:5F:AA:59:94:97:DD:97:C4:12:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/323830343a316234343a633030303a3a2f33352d3335203d3e203631373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b44:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         13:bb:0b:5f:bc:e7:ea:28:f8:60:8d:f4:22:e4:f1:d4:10:7c:
         66:d4:93:06:10:35:a4:81:58:c1:59:17:f3:18:99:33:e3:77:
         6d:76:d3:b6:ce:aa:57:49:c1:d7:0c:8a:81:44:0f:c1:14:f3:
         0a:cc:5f:42:b6:57:af:91:bf:0a:5d:80:c5:80:88:3c:8d:65:
         93:1b:c4:76:c6:40:c4:19:cf:36:f6:05:94:1c:c6:e7:82:8e:
         7d:ee:62:81:cb:81:8b:cb:8b:9c:8f:e3:f5:18:75:a2:91:cf:
         d8:3f:1a:ae:d9:58:26:b6:6f:fc:cd:ca:0c:67:9b:19:d1:2c:
         2f:d0:c1:80:3d:1a:fa:91:20:ca:47:0c:90:fa:e1:7d:a9:57:
         9a:42:ac:a9:e6:e7:f1:e9:83:d8:a1:17:dc:f3:a9:95:35:8f:
         73:fa:45:41:67:a2:c9:48:08:0e:b3:b9:6a:1d:de:4e:4d:c1:
         93:17:0f:6d:03:f6:67:c5:7f:4d:5d:db:21:0d:ca:d0:87:e9:
         d1:9b:df:ba:d0:cf:4c:e4:ac:4f:9b:13:43:4a:ba:3f:80:1a:
         4e:f6:b6:6e:f9:0e:eb:b7:76:db:2d:ae:ef:48:16:cc:8d:fa:
         11:c7:d9:08:a4:eb:72:27:a0:09:eb:52:c7:5f:0f:ac:46:2e:
         25:56:8d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----