Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5fvy97CxiQpK3L6MB8ragb6HqfRLzhmAotonYBe3j5v2/0/323830343a6335343a3a2f33322d3438203d3e20323632363530.roa
File:                     323830343a6335343a3a2f33322d3438203d3e20323632363530.roa (raw, json)
Hash identifier:          ICxzmL7WD+vyxhAQk4gbp9sTuuwumeqrjYC3ywzx0AQ=
Subject key identifier:   F5:53:E7:C3:E0:2B:98:78:CF:75:32:7F:78:30:56:7E:28:BA:05:93
Certificate issuer:       /CN=08C2DACB943A740FC24C01AC1D462C8AC43B05B8
Certificate serial:       0981EEB463029D69C6E80A79BD3303624444704E
Authority key identifier: 08:C2:DA:CB:94:3A:74:0F:C2:4C:01:AC:1D:46:2C:8A:C4:3B:05:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08C2DACB943A740FC24C01AC1D462C8AC43B05B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5fvy97CxiQpK3L6MB8ragb6HqfRLzhmAotonYBe3j5v2/0/323830343a6335343a3a2f33322d3438203d3e20323632363530.roa
Signing time:             Fri 21 Jul 2023 19:04:00 +0000
ROA not before:           Fri 21 Jul 2023 18:59:00 +0000
ROA not after:            Fri 19 Jul 2024 19:04:00 +0000
asID:                     262650
IP address blocks:        2804:c54::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:81:ee:b4:63:02:9d:69:c6:e8:0a:79:bd:33:03:62:44:44:70:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08C2DACB943A740FC24C01AC1D462C8AC43B05B8
        Validity
            Not Before: Jul 21 18:59:00 2023 GMT
            Not After : Jul 19 19:04:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ff:24:96:27:92:9f:a9:fa:bc:c7:20:0a:15:
                    77:a8:a8:b2:61:8b:fe:72:81:8a:1f:96:93:6a:84:
                    53:cc:c9:e6:06:cc:ae:48:e1:d7:7a:99:3a:34:f0:
                    ca:c9:69:91:d6:be:29:f1:3e:92:5b:86:34:b8:06:
                    ee:78:87:63:39:2f:3d:35:4e:17:1c:32:17:c5:60:
                    a7:63:5f:a6:28:3b:63:ee:da:e8:8f:da:f5:33:f6:
                    de:06:9f:46:1e:1f:4c:d3:9c:58:55:3c:1c:8a:5b:
                    bb:0f:86:5e:30:45:e4:29:13:7a:04:57:ec:a8:48:
                    a6:91:4b:b7:04:02:56:41:aa:08:46:da:33:65:bf:
                    53:bb:87:17:43:9d:00:93:b1:24:8d:14:fd:08:ce:
                    13:ea:7f:09:3e:bc:59:ed:48:0b:c3:4c:90:33:c3:
                    71:11:67:33:79:d3:6f:cd:47:ff:f9:d2:bd:79:18:
                    04:ef:f0:81:ca:d7:c6:dc:6d:a1:46:97:bf:01:57:
                    5e:fd:2b:2d:06:68:9d:72:e5:6c:39:06:fb:cd:68:
                    c2:c9:e5:7f:12:57:22:d5:51:49:17:62:92:09:3f:
                    e6:70:0f:b7:e6:eb:52:1e:bf:66:fc:24:f5:67:3f:
                    8d:5d:4a:07:2b:2e:01:48:7e:fa:df:76:a7:c7:26:
                    cb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:53:E7:C3:E0:2B:98:78:CF:75:32:7F:78:30:56:7E:28:BA:05:93
            X509v3 Authority Key Identifier:
                keyid:08:C2:DA:CB:94:3A:74:0F:C2:4C:01:AC:1D:46:2C:8A:C4:3B:05:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5fvy97CxiQpK3L6MB8ragb6HqfRLzhmAotonYBe3j5v2/0/08C2DACB943A740FC24C01AC1D462C8AC43B05B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08C2DACB943A740FC24C01AC1D462C8AC43B05B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5fvy97CxiQpK3L6MB8ragb6HqfRLzhmAotonYBe3j5v2/0/323830343a6335343a3a2f33322d3438203d3e20323632363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c54::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:a6:4e:c0:97:f7:b9:0e:3f:70:85:35:7d:04:a1:ac:a9:41:
         18:1e:c6:9a:d9:f0:e1:e9:0b:73:73:72:59:f3:4c:2c:cd:93:
         3c:a1:16:60:ca:95:97:f9:d2:1e:06:77:ac:3a:98:fe:20:7f:
         1c:4f:55:f4:c0:f7:4d:1d:a7:48:a3:6a:ef:dd:0e:3c:26:1e:
         7d:3e:bd:0b:44:19:bc:2d:26:bc:fe:5e:ec:79:05:5e:91:30:
         cd:2c:45:aa:69:18:27:18:40:02:31:28:18:2d:9a:7b:81:b8:
         83:3d:7a:db:48:ea:d8:b5:d3:05:b3:f8:84:b6:81:70:ac:2a:
         f9:fa:aa:ee:30:c1:78:79:67:be:d9:4a:17:34:b9:6b:3f:5b:
         45:d8:94:37:52:94:06:3d:cd:ce:48:a1:2c:18:2b:ed:5f:4b:
         a4:e1:06:8d:a7:d6:d8:d4:03:f1:d1:b7:7d:bc:8d:49:77:b5:
         7d:46:de:cd:5b:8d:9d:c1:f5:6b:0f:0f:52:17:e3:7b:36:bd:
         00:7e:49:17:39:59:4f:0d:ea:90:0b:a7:59:f3:12:90:df:ab:
         1c:b4:16:92:2c:e0:da:da:36:01:09:ba:32:38:3c:ae:51:ec:
         71:d9:ae:d6:f3:0a:ab:ff:ef:79:9f:4e:10:97:d3:1d:06:c3:
         02:ca:0a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----