Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5XyPwysahSMbeziBCpjSv61jjNyR1dW9jgqsaP2ZMWCa/0/323830343a353464383a3a2f33322d3332203d3e20323638363733.roa
File:                     323830343a353464383a3a2f33322d3332203d3e20323638363733.roa (raw, json)
Hash identifier:          gGkW3xcTnQefSWp1nQMFhi7eyFtp4fIQoFTAdxiV/a8=
Subject key identifier:   75:AC:09:0A:33:9F:90:20:BF:F2:95:DB:59:81:8B:70:74:9D:1B:AC
Certificate issuer:       /CN=EAA395B0A2B483C6C50BC176392A71A900364987
Certificate serial:       2D7A3678E6A34BDC992CA4D06D6D306234A32BDD
Authority key identifier: EA:A3:95:B0:A2:B4:83:C6:C5:0B:C1:76:39:2A:71:A9:00:36:49:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EAA395B0A2B483C6C50BC176392A71A900364987.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XyPwysahSMbeziBCpjSv61jjNyR1dW9jgqsaP2ZMWCa/0/323830343a353464383a3a2f33322d3332203d3e20323638363733.roa
Signing time:             Wed 21 Feb 2024 19:04:53 +0000
ROA not before:           Wed 21 Feb 2024 18:59:53 +0000
ROA not after:            Wed 19 Feb 2025 19:04:53 +0000
asID:                     268673
IP address blocks:        2804:54d8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:7a:36:78:e6:a3:4b:dc:99:2c:a4:d0:6d:6d:30:62:34:a3:2b:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAA395B0A2B483C6C50BC176392A71A900364987
        Validity
            Not Before: Feb 21 18:59:53 2024 GMT
            Not After : Feb 19 19:04:53 2025 GMT
        Subject: CN=75AC090A339F9020BFF295DB59818B70749D1BAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:98:48:bd:59:30:32:ba:e2:fb:21:2d:63:40:
                    95:e1:55:cd:db:8b:d2:39:49:e9:04:79:8e:19:f0:
                    02:32:81:3d:bd:e7:50:fb:66:4d:42:e5:99:aa:ed:
                    38:02:ae:22:43:57:4d:60:12:55:b5:1c:c7:8b:8d:
                    52:9a:32:c9:d4:90:a3:6a:db:e8:52:1f:50:3a:e0:
                    9e:01:ff:31:6e:2c:ee:06:8a:8e:d9:e1:e1:23:b0:
                    74:76:bb:3f:47:dd:83:bf:de:b0:04:b4:2a:85:8d:
                    18:39:3f:f8:46:b9:3a:fe:53:6b:0c:4b:24:f1:51:
                    a8:29:0a:14:a0:b3:e3:77:e9:f0:9e:7d:dc:86:0f:
                    a8:91:39:a6:5c:35:c1:7e:36:22:bf:17:99:36:17:
                    6d:5d:23:17:90:da:ac:dd:a3:c6:3e:8e:14:df:04:
                    69:11:80:32:86:0b:3f:97:f4:34:36:87:03:24:01:
                    f3:ca:13:be:64:37:ff:11:5e:ad:68:7d:2a:4d:e7:
                    9b:72:65:53:74:c1:93:b5:d1:06:b7:9c:2a:13:7b:
                    27:81:0d:08:4f:0d:a6:e2:7b:43:bd:a7:bb:af:65:
                    dc:43:a7:f4:72:cf:b5:29:23:ee:b1:9c:87:10:68:
                    ec:97:be:c1:a5:94:57:47:66:56:e7:a9:af:a6:23:
                    67:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:AC:09:0A:33:9F:90:20:BF:F2:95:DB:59:81:8B:70:74:9D:1B:AC
            X509v3 Authority Key Identifier:
                keyid:EA:A3:95:B0:A2:B4:83:C6:C5:0B:C1:76:39:2A:71:A9:00:36:49:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XyPwysahSMbeziBCpjSv61jjNyR1dW9jgqsaP2ZMWCa/0/EAA395B0A2B483C6C50BC176392A71A900364987.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EAA395B0A2B483C6C50BC176392A71A900364987.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XyPwysahSMbeziBCpjSv61jjNyR1dW9jgqsaP2ZMWCa/0/323830343a353464383a3a2f33322d3332203d3e20323638363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:44:3f:3e:9b:77:b5:3a:f5:34:c6:7d:2d:40:93:aa:7d:4c:
         e4:5c:b8:0d:77:e5:09:03:42:c5:95:60:49:c4:ac:68:b8:1b:
         a9:29:e0:ce:f8:78:e9:f5:0b:0b:66:ef:46:f3:de:e3:0c:ba:
         74:3c:c6:34:1c:05:1a:91:73:cb:a4:8d:ef:73:80:aa:d0:09:
         da:a3:1e:5b:40:77:3c:df:f9:53:32:67:14:c1:5d:34:5b:df:
         64:a9:f4:f6:cd:f2:8b:ae:50:99:fa:15:3f:05:3d:35:34:9c:
         67:0d:f5:ef:dd:91:47:64:dd:98:96:eb:73:58:04:c2:e9:6e:
         f2:f1:d8:dd:f4:34:3c:a6:ef:d1:a6:60:10:4d:90:2e:81:83:
         95:c6:6d:43:f7:52:22:b9:16:2e:4d:8e:2b:1d:87:ad:cc:3e:
         3d:73:7b:fa:9c:75:b7:a0:ee:94:65:b0:26:a1:c9:8a:22:d0:
         2a:44:2f:57:e9:c2:6c:27:a6:10:c1:be:7d:95:44:4d:e0:b4:
         91:f7:ea:c7:f4:07:8f:75:64:1b:63:bd:87:18:2f:9b:6b:6e:
         77:e7:87:c2:7b:28:17:cc:21:55:b5:2a:a2:be:3f:6f:8e:28:
         d7:ca:40:0e:3d:2b:51:35:e6:45:9d:a3:fb:a8:16:33:58:c0:
         c2:5d:ee:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----