Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/323830343a6663633a3a2f33332d3333203d3e20323633363034.roa
File:                     323830343a6663633a3a2f33332d3333203d3e20323633363034.roa (raw, json)
Hash identifier:          cwcmmXvDi2W7vQTFpt+d+UmtWlZzbyn20ckkq+Z1TFE=
Subject key identifier:   65:F3:0B:39:CF:71:3F:C9:67:3D:C2:E0:D5:50:9B:46:85:CB:54:08
Certificate issuer:       /CN=496659D2A113157B4BED7E1189FFAEA19CE9E6F4
Certificate serial:       0913927F5FE5E126F2B615EFD979EE61B808ABFA
Authority key identifier: 49:66:59:D2:A1:13:15:7B:4B:ED:7E:11:89:FF:AE:A1:9C:E9:E6:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/496659D2A113157B4BED7E1189FFAEA19CE9E6F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/323830343a6663633a3a2f33332d3333203d3e20323633363034.roa
Signing time:             Tue 19 Dec 2023 17:10:16 +0000
ROA not before:           Tue 19 Dec 2023 17:05:16 +0000
ROA not after:            Tue 17 Dec 2024 17:10:16 +0000
asID:                     263604
IP address blocks:        2804:fcc::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:13:92:7f:5f:e5:e1:26:f2:b6:15:ef:d9:79:ee:61:b8:08:ab:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=496659D2A113157B4BED7E1189FFAEA19CE9E6F4
        Validity
            Not Before: Dec 19 17:05:16 2023 GMT
            Not After : Dec 17 17:10:16 2024 GMT
        Subject: CN=65F30B39CF713FC9673DC2E0D5509B4685CB5408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ef:a3:ed:87:ec:92:26:4b:35:e3:34:2e:2e:
                    0c:b5:7a:6d:a1:12:40:44:d8:eb:0c:07:21:f0:ae:
                    a2:e6:59:1a:6c:58:8d:76:d1:45:ef:31:55:88:89:
                    00:2c:89:1a:f4:c8:5b:74:13:72:f6:b8:e4:db:81:
                    c6:cd:05:69:d9:c9:75:a9:45:07:75:59:06:05:f5:
                    00:69:ef:95:40:ca:fa:b9:1a:bc:b5:6d:03:8a:51:
                    03:91:f3:50:ba:42:f6:2b:42:64:62:36:d6:0a:14:
                    4d:da:2b:e7:15:37:d9:90:69:0d:c1:79:6d:2b:f6:
                    4c:fc:19:d6:81:05:f4:ae:3c:4a:99:4b:4a:63:d4:
                    b3:28:30:bb:0e:f2:ce:9a:1c:c5:24:00:6b:cf:46:
                    52:b0:ee:ab:18:f4:5c:ef:28:3e:76:f1:57:82:52:
                    34:86:b4:a2:e5:ed:c9:c8:ea:d1:3f:3f:52:3f:9d:
                    6d:b1:84:9b:31:46:c6:e5:0b:ff:6d:18:f2:44:10:
                    8b:cf:c9:39:26:cc:72:3c:49:17:3d:24:7d:fe:b3:
                    50:bd:1b:fd:93:ec:dd:ba:af:9f:e3:8f:1e:c4:f7:
                    cf:6b:a7:5a:86:3f:f7:90:de:9b:4e:7c:48:f9:4b:
                    61:0e:e0:29:6a:d8:b6:68:2d:b8:11:c0:1f:01:5c:
                    c7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F3:0B:39:CF:71:3F:C9:67:3D:C2:E0:D5:50:9B:46:85:CB:54:08
            X509v3 Authority Key Identifier:
                keyid:49:66:59:D2:A1:13:15:7B:4B:ED:7E:11:89:FF:AE:A1:9C:E9:E6:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/496659D2A113157B4BED7E1189FFAEA19CE9E6F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/496659D2A113157B4BED7E1189FFAEA19CE9E6F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/323830343a6663633a3a2f33332d3333203d3e20323633363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fcc::/33

    Signature Algorithm: sha256WithRSAEncryption
         75:11:9f:d0:6d:5f:8f:19:66:c5:cb:f2:c0:66:aa:ff:c6:66:
         6a:ea:08:a8:f6:51:fc:f7:b1:2c:16:65:ea:72:60:e4:f2:da:
         35:8f:5c:26:a6:f2:0e:72:5e:c7:2a:dc:81:38:03:46:2e:71:
         8a:84:15:d0:8a:7d:56:d2:2b:b8:68:1a:51:59:2a:89:68:d7:
         af:03:0e:5e:5f:a9:90:f4:ad:d4:90:61:b8:01:0f:6e:72:f9:
         e9:99:2e:d4:45:9d:be:d7:55:6e:b5:3b:3f:75:34:b3:4c:f5:
         53:51:0b:c7:42:37:e9:a2:7e:f5:82:2e:9e:b1:df:04:65:0d:
         84:27:3d:8a:35:d8:6a:38:b0:f7:fd:62:5d:25:1d:7f:03:cb:
         33:76:f9:1a:8b:33:a7:d2:ea:8e:da:4b:6a:2c:6b:d5:83:b9:
         16:83:dd:6f:cc:76:db:b9:b0:bd:0c:60:b5:ed:0b:4d:53:e0:
         71:d6:71:26:b9:10:62:9e:6c:fc:46:81:8a:2e:c1:e2:be:21:
         4b:08:83:3b:62:cb:3a:95:43:38:07:cf:00:d1:c4:4f:4a:4a:
         40:1b:ba:4c:fb:b5:dc:72:88:6a:c6:27:24:42:bd:e3:c8:44:
         48:b9:0c:90:59:66:f8:2c:31:c9:81:d7:55:86:eb:2a:5d:17:
         36:69:9a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----