Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/323830343a333730383a3a2f33332d3333203d3e20323636333835.roa
File:                     323830343a333730383a3a2f33332d3333203d3e20323636333835.roa (raw, json)
Hash identifier:          7xKyYmqbknB095GNAUKOo9X8wDElf2mztd4pE1sTUg4=
Subject key identifier:   B6:97:5C:C8:52:8B:25:B3:60:7B:BD:CB:A4:2C:08:8F:E4:B4:A1:7A
Certificate issuer:       /CN=D4340BBCF3511E7FF0C0D979030DCC8553E16676
Certificate serial:       22F811EC402EB80941612B809AD63B34446A88C4
Authority key identifier: D4:34:0B:BC:F3:51:1E:7F:F0:C0:D9:79:03:0D:CC:85:53:E1:66:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4340BBCF3511E7FF0C0D979030DCC8553E16676.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/323830343a333730383a3a2f33332d3333203d3e20323636333835.roa
Signing time:             Fri 23 Feb 2024 01:44:11 +0000
ROA not before:           Fri 23 Feb 2024 01:39:11 +0000
ROA not after:            Fri 21 Feb 2025 01:44:11 +0000
asID:                     266385
IP address blocks:        2804:3708::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:f8:11:ec:40:2e:b8:09:41:61:2b:80:9a:d6:3b:34:44:6a:88:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4340BBCF3511E7FF0C0D979030DCC8553E16676
        Validity
            Not Before: Feb 23 01:39:11 2024 GMT
            Not After : Feb 21 01:44:11 2025 GMT
        Subject: CN=B6975CC8528B25B3607BBDCBA42C088FE4B4A17A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:21:ad:a5:e7:a3:2e:f1:ca:81:93:d2:53:d2:
                    01:da:ba:fc:f2:18:e0:bd:36:b2:b1:0b:4c:6a:1e:
                    9a:c8:c9:fd:fc:fc:35:2e:30:14:32:2a:e9:81:2f:
                    28:cb:ca:52:3a:0e:17:a3:4b:e8:39:e0:e9:cc:8d:
                    f6:4b:7a:97:2b:e9:b6:59:2a:28:4d:98:d7:16:f6:
                    ed:e6:3c:3f:5e:17:57:d8:7f:73:2c:e1:87:2b:6e:
                    ef:2a:9f:20:9e:76:f8:c0:6d:40:1b:ce:58:a8:04:
                    54:79:c3:d8:4e:ef:a0:d9:31:10:8f:6f:e0:81:5b:
                    aa:2f:f2:0d:11:94:81:27:f4:98:57:aa:69:31:2b:
                    48:e2:5a:c0:4a:13:a3:6f:32:10:99:f7:54:04:ce:
                    81:18:d1:b6:60:b7:60:13:f5:57:8a:d7:5e:76:39:
                    56:28:f8:d3:aa:01:47:0b:49:d3:e2:f5:12:cb:9b:
                    96:92:9f:ca:22:c2:54:d1:bf:e8:7d:2b:4a:1c:f0:
                    d0:0a:b2:7d:33:7f:dc:c2:cc:1d:2e:8a:41:2e:31:
                    5d:c9:3b:ad:4b:08:5f:1c:7c:b6:22:80:38:1b:e5:
                    95:60:90:a6:b1:b8:da:c8:26:67:4a:e0:98:0a:d2:
                    b1:ab:c6:4b:66:6b:6c:a0:14:a8:0f:ad:54:36:9b:
                    85:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:97:5C:C8:52:8B:25:B3:60:7B:BD:CB:A4:2C:08:8F:E4:B4:A1:7A
            X509v3 Authority Key Identifier:
                keyid:D4:34:0B:BC:F3:51:1E:7F:F0:C0:D9:79:03:0D:CC:85:53:E1:66:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/D4340BBCF3511E7FF0C0D979030DCC8553E16676.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4340BBCF3511E7FF0C0D979030DCC8553E16676.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/323830343a333730383a3a2f33332d3333203d3e20323636333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3708::/33

    Signature Algorithm: sha256WithRSAEncryption
         4a:67:73:5a:09:37:89:97:db:54:7f:02:1a:59:9a:67:b6:0b:
         5f:fd:31:8e:f6:09:c1:e7:01:a1:f4:8c:b8:85:c2:fc:cb:00:
         11:0f:50:1d:c7:3c:00:77:93:c7:b8:1f:2f:ac:57:88:da:14:
         1a:b2:d3:a5:05:a9:6c:c8:99:a8:18:45:fc:21:7a:f2:81:49:
         f6:31:29:1a:f0:6b:5b:31:08:5c:1e:ef:79:f3:c0:bc:d5:18:
         db:2d:e7:fd:d0:a3:7c:92:1b:86:54:d5:fb:81:3d:e5:2c:d2:
         4d:06:48:6e:b6:ec:a6:67:14:06:49:7f:ac:4e:74:4e:85:06:
         c4:ad:22:f1:6b:36:08:9a:a4:8f:a3:d1:27:31:00:00:f6:74:
         93:fe:80:2f:0c:8c:08:42:9f:f8:e6:83:d8:f7:d1:65:24:1a:
         dd:60:9e:f6:a8:4d:87:fa:5b:59:9d:ce:4e:6c:31:ae:07:e7:
         71:bb:01:38:fd:63:4c:99:6a:66:6d:28:eb:b7:58:da:cf:27:
         0d:14:9d:93:55:8d:09:62:6c:ab:ec:10:a3:2e:7d:c5:e8:b5:
         f5:77:c0:52:80:b9:f5:de:3a:f0:07:a6:58:82:ce:19:33:78:
         ae:5e:57:aa:db:f3:22:7a:f7:43:43:ee:22:35:6e:86:ca:e4:
         89:ba:51:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----