Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/1/323830343a313861383a3a2f33322d3438203d3e20323632353032.roa
File:                     323830343a313861383a3a2f33322d3438203d3e20323632353032.roa (raw, json)
Hash identifier:          qujfc35qzH5NYGxU8DAepT9lGYElgJi+yaj6NR2DH5Q=
Subject key identifier:   9C:BE:E2:3E:04:F8:C6:77:53:64:63:67:37:E7:F6:56:80:8A:5C:08
Certificate issuer:       /CN=B083E1F6554A0DAB0E83AC5CDA1783B3B5A995C8
Certificate serial:       53047FCC425943BCCDD2DE3F87DC83E6CB90BC4E
Authority key identifier: B0:83:E1:F6:55:4A:0D:AB:0E:83:AC:5C:DA:17:83:B3:B5:A9:95:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B083E1F6554A0DAB0E83AC5CDA1783B3B5A995C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/1/323830343a313861383a3a2f33322d3438203d3e20323632353032.roa
Signing time:             Thu 04 Apr 2024 12:33:46 +0000
ROA not before:           Thu 04 Apr 2024 12:28:46 +0000
ROA not after:            Thu 03 Apr 2025 12:33:46 +0000
asID:                     262502
IP address blocks:        2804:18a8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:04:7f:cc:42:59:43:bc:cd:d2:de:3f:87:dc:83:e6:cb:90:bc:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B083E1F6554A0DAB0E83AC5CDA1783B3B5A995C8
        Validity
            Not Before: Apr  4 12:28:46 2024 GMT
            Not After : Apr  3 12:33:46 2025 GMT
        Subject: CN=9CBEE23E04F8C6775364636737E7F656808A5C08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:df:45:94:69:2f:1f:42:69:d3:20:61:67:7f:
                    02:d6:27:40:fd:ef:ae:f6:d1:1a:d6:5a:97:dc:ca:
                    e3:f3:68:76:78:3c:ce:c7:4c:a7:fe:8c:c1:6e:95:
                    4b:18:9f:69:ec:e5:79:a4:f5:1c:82:0e:78:83:a0:
                    4e:05:37:d1:ee:0d:1c:3c:86:a3:86:91:9b:91:f2:
                    c0:d1:03:8a:bb:6a:b3:d9:31:88:45:25:3b:66:bc:
                    d2:16:ec:db:57:c2:ce:64:63:8f:7a:43:55:48:79:
                    b2:82:1b:76:49:ec:9b:ee:e8:02:30:70:0b:33:82:
                    f2:2f:d9:cd:09:91:be:c5:4d:51:16:fc:39:f3:82:
                    c1:18:48:23:34:b2:0a:fd:56:0f:b2:24:bf:fe:ab:
                    7a:b8:cf:e6:08:f7:db:ab:18:2e:2f:b9:48:31:6e:
                    18:f4:ef:97:b0:50:3e:0f:f8:60:af:72:ce:f1:a0:
                    65:52:b6:11:75:bf:46:90:34:71:bf:bc:ed:d2:3a:
                    13:ea:65:f2:39:1c:db:7f:98:4f:37:6e:5b:48:77:
                    ad:61:b4:54:82:b0:c1:36:a9:a9:53:ea:5f:48:f7:
                    54:8f:76:be:ba:57:f8:25:f6:1c:21:13:85:71:bb:
                    a6:7f:fc:b5:4d:c6:9e:7e:8e:6a:f6:b7:5d:42:be:
                    42:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:BE:E2:3E:04:F8:C6:77:53:64:63:67:37:E7:F6:56:80:8A:5C:08
            X509v3 Authority Key Identifier:
                keyid:B0:83:E1:F6:55:4A:0D:AB:0E:83:AC:5C:DA:17:83:B3:B5:A9:95:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/1/B083E1F6554A0DAB0E83AC5CDA1783B3B5A995C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B083E1F6554A0DAB0E83AC5CDA1783B3B5A995C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/1/323830343a313861383a3a2f33322d3438203d3e20323632353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:18a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:28:e2:aa:0b:5c:08:e4:a4:df:38:96:84:40:ae:1b:1f:f0:
         ee:bc:2b:8e:e6:22:6c:b4:f2:af:0d:10:d7:e4:1e:f1:40:b7:
         a0:ea:14:24:89:cc:d2:11:88:7f:92:1f:ff:d6:84:45:01:33:
         bc:d6:8a:6f:0f:2d:de:48:30:46:fe:7a:86:fe:4f:52:2d:56:
         2f:af:1b:7c:86:17:3e:69:75:ce:a4:b1:a2:39:68:e5:2d:44:
         e9:7c:be:a4:4a:0e:c0:26:67:0d:84:ce:e6:a5:94:8d:9e:bf:
         f1:46:9b:f6:19:41:7a:2b:73:7e:3f:19:6e:50:7c:fd:53:c1:
         90:58:77:c7:ea:13:d2:bb:a4:ec:31:1c:ee:b3:0a:db:64:65:
         97:c3:6b:4a:dd:e3:76:72:c2:dd:04:8f:0e:61:75:19:2c:d2:
         98:cf:18:f8:77:f8:a5:b7:1a:bf:d1:65:cb:d7:1a:32:46:b7:
         0d:e7:35:a8:25:29:4c:44:c5:d0:2b:f3:52:fe:95:18:22:4d:
         6c:f2:13:40:ca:a8:f7:26:3c:a5:e0:09:90:3e:35:a7:b6:1f:
         09:ca:dc:df:b1:f5:ac:e3:e6:38:12:79:7e:91:b4:36:64:16:
         36:93:e2:18:72:99:61:09:e8:0d:bd:79:34:1c:61:7f:55:60:
         6f:23:1b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----