Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/1/323830343a333365633a3a2f33332d3333203d3e20323635343235.roa
File:                     323830343a333365633a3a2f33332d3333203d3e20323635343235.roa (raw, json)
Hash identifier:          xrWPGa4kBUog88lyNNWzJlrbXuaZe9Ljy+WunorUhq0=
Subject key identifier:   D7:C6:FA:09:97:FB:68:23:AE:F5:96:00:92:4C:DF:E5:00:E4:48:E4
Certificate issuer:       /CN=AEBE4A8C0B918A62DC00B5C6391FF5B6DDE29A0E
Certificate serial:       7903DAFE4F0660F3FB8770855D5346F9FD910652
Authority key identifier: AE:BE:4A:8C:0B:91:8A:62:DC:00:B5:C6:39:1F:F5:B6:DD:E2:9A:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AEBE4A8C0B918A62DC00B5C6391FF5B6DDE29A0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/1/323830343a333365633a3a2f33332d3333203d3e20323635343235.roa
Signing time:             Thu 18 Jan 2024 19:49:15 +0000
ROA not before:           Thu 18 Jan 2024 19:44:15 +0000
ROA not after:            Thu 16 Jan 2025 19:49:15 +0000
asID:                     265425
IP address blocks:        2804:33ec::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:03:da:fe:4f:06:60:f3:fb:87:70:85:5d:53:46:f9:fd:91:06:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEBE4A8C0B918A62DC00B5C6391FF5B6DDE29A0E
        Validity
            Not Before: Jan 18 19:44:15 2024 GMT
            Not After : Jan 16 19:49:15 2025 GMT
        Subject: CN=D7C6FA0997FB6823AEF59600924CDFE500E448E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c4:8e:8e:d5:88:da:71:60:15:ef:b7:67:69:
                    49:1d:5b:3d:5b:b3:54:d9:3a:b2:6d:0f:6e:b1:50:
                    df:55:6c:30:f0:54:aa:a3:d0:68:14:7a:ec:bd:37:
                    2b:54:77:e9:06:a8:bf:2b:80:70:0b:bb:d0:ce:34:
                    1c:6c:cd:1f:a1:7a:d5:93:9f:83:83:ab:2f:d4:9f:
                    4d:6c:95:a4:42:6d:04:42:81:df:56:fd:c7:29:b2:
                    b7:f4:f7:09:08:63:d8:b3:f7:cc:c4:79:fa:d4:04:
                    de:6a:0d:51:a1:c2:6f:48:d2:23:ca:bb:ee:b3:72:
                    c5:1a:59:be:fe:d1:4a:dc:79:97:6c:e3:33:b4:dc:
                    af:20:7e:10:7f:40:bd:45:71:66:e9:73:8b:78:c6:
                    b6:88:28:58:bb:0e:78:61:7e:56:d4:92:b1:b9:d9:
                    8a:2f:45:d2:57:a0:82:d9:4f:fe:69:69:01:a5:39:
                    a7:3a:8f:26:98:0e:05:08:34:ba:6f:ac:05:53:1c:
                    52:ab:1f:8b:6e:d2:2d:9e:d7:5d:0f:9e:2d:f5:4e:
                    f6:8e:5b:b6:61:1e:b1:10:ec:5f:16:21:81:e9:50:
                    30:15:6c:08:94:55:ec:c4:53:bd:fd:bb:5c:85:4b:
                    ec:70:fc:1e:e3:1d:e4:77:53:fc:21:18:84:e8:94:
                    e7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C6:FA:09:97:FB:68:23:AE:F5:96:00:92:4C:DF:E5:00:E4:48:E4
            X509v3 Authority Key Identifier:
                keyid:AE:BE:4A:8C:0B:91:8A:62:DC:00:B5:C6:39:1F:F5:B6:DD:E2:9A:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/1/AEBE4A8C0B918A62DC00B5C6391FF5B6DDE29A0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AEBE4A8C0B918A62DC00B5C6391FF5B6DDE29A0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/1/323830343a333365633a3a2f33332d3333203d3e20323635343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33ec::/33

    Signature Algorithm: sha256WithRSAEncryption
         2a:38:e4:f2:a6:67:91:39:3c:4b:80:52:e8:3b:01:67:03:36:
         c4:dd:c4:82:fc:c2:fb:d7:b1:40:da:2d:c8:be:8d:e9:42:0f:
         ac:ab:63:07:f7:03:a2:71:8c:48:87:f1:3c:8f:d9:da:8e:a8:
         64:c3:42:32:15:80:00:04:42:d5:9c:f0:2a:b5:e0:f5:b4:bd:
         a2:88:85:44:2a:01:b0:f5:87:39:98:bc:66:f1:fd:a3:d3:a6:
         68:0c:22:25:a0:12:01:bc:f2:d8:38:eb:ad:54:2b:65:a0:0e:
         2f:8e:3f:1e:d0:56:c3:6f:c2:50:3d:ea:08:2d:f3:2a:bc:33:
         0c:35:9b:3c:c1:0e:df:7d:6c:50:9a:89:75:2d:cb:93:39:53:
         cc:1f:33:3f:99:f6:6a:88:81:2c:65:04:e6:df:b3:93:77:ff:
         4b:6a:12:bd:d2:7e:45:79:2a:92:67:89:aa:3b:79:a6:cb:9b:
         c8:91:f6:d1:dc:ff:c6:3f:56:d2:18:c7:7a:3a:02:e7:35:5d:
         2d:26:5a:af:19:10:68:8e:33:3a:cc:e3:c4:4e:29:ed:9d:5a:
         71:a7:9c:cb:25:e5:3e:3d:d9:ce:96:2d:16:27:e4:c5:c1:33:
         c9:20:ce:d6:4a:68:90:4f:6c:cc:fb:f2:b4:07:d4:0f:62:c5:
         8a:33:4b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----