Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/323830343a376566303a3a2f33322d3438203d3e20323731363536.roa
File:                     323830343a376566303a3a2f33322d3438203d3e20323731363536.roa (raw, json)
Hash identifier:          5XovJjt1dtzs7VHGjWRDoW6i+mmGwhKu2OofXBiD67A=
Subject key identifier:   78:7B:03:32:B9:00:96:A4:3E:DA:2C:4B:BC:9A:42:B9:0E:87:0D:FE
Certificate issuer:       /CN=8D24ABD2CD282876D19E9E8E10198ACD520BC95C
Certificate serial:       16B9096BA6CC475471DC9FE67A4A7ECEB7F8264C
Authority key identifier: 8D:24:AB:D2:CD:28:28:76:D1:9E:9E:8E:10:19:8A:CD:52:0B:C9:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8D24ABD2CD282876D19E9E8E10198ACD520BC95C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/323830343a376566303a3a2f33322d3438203d3e20323731363536.roa
Signing time:             Thu 15 Feb 2024 20:43:47 +0000
ROA not before:           Thu 15 Feb 2024 20:38:47 +0000
ROA not after:            Thu 13 Feb 2025 20:43:47 +0000
asID:                     271656
IP address blocks:        2804:7ef0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b9:09:6b:a6:cc:47:54:71:dc:9f:e6:7a:4a:7e:ce:b7:f8:26:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D24ABD2CD282876D19E9E8E10198ACD520BC95C
        Validity
            Not Before: Feb 15 20:38:47 2024 GMT
            Not After : Feb 13 20:43:47 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1a:fb:e2:9e:b3:5b:e9:6c:55:02:79:b4:51:
                    cb:c1:d0:0e:fb:03:a9:0b:ab:2c:30:66:66:f0:c2:
                    c0:72:53:67:fe:8b:0d:ee:54:8d:89:19:e1:3b:4f:
                    8a:8c:44:3c:6e:17:1f:a7:27:70:e8:1c:34:80:5a:
                    d8:d5:72:7a:65:54:85:12:97:9d:8f:a1:fe:0c:37:
                    c4:d0:b1:3c:c8:c4:69:66:70:11:bf:1d:0c:1d:c4:
                    ed:01:c1:5f:ca:eb:64:25:ca:87:c4:04:a1:f3:41:
                    d0:0e:43:98:0e:bd:a2:46:de:d9:8b:90:7f:f9:f6:
                    6b:b0:38:02:89:b9:6d:a4:63:af:e3:9a:71:89:13:
                    36:4c:30:13:f8:8c:21:2a:6e:99:e6:eb:a5:8b:1b:
                    6e:c9:59:29:06:cf:fa:d4:1d:98:c7:14:a3:4e:6d:
                    73:d8:77:7c:ca:00:d7:cd:3d:09:b1:0c:b8:1f:07:
                    f5:15:ab:ca:c5:43:c7:c2:55:7b:45:6a:dc:3d:3c:
                    65:80:8c:15:10:c1:b6:c5:35:b7:fe:65:32:cd:ad:
                    be:e9:04:06:9d:01:f3:c3:e8:a2:2a:c1:fe:aa:40:
                    02:a8:06:67:09:ad:ca:9c:85:34:a3:26:a7:6a:32:
                    32:0a:64:9c:ad:33:a5:18:ba:83:74:41:dc:ed:a1:
                    02:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:7B:03:32:B9:00:96:A4:3E:DA:2C:4B:BC:9A:42:B9:0E:87:0D:FE
            X509v3 Authority Key Identifier:
                keyid:8D:24:AB:D2:CD:28:28:76:D1:9E:9E:8E:10:19:8A:CD:52:0B:C9:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/8D24ABD2CD282876D19E9E8E10198ACD520BC95C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8D24ABD2CD282876D19E9E8E10198ACD520BC95C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/323830343a376566303a3a2f33322d3438203d3e20323731363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ef0::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:6b:49:50:e3:b4:75:b3:ba:2e:17:13:49:54:1a:8d:a1:da:
         81:c2:8a:8f:af:73:b5:a4:2f:16:ef:c3:1f:52:ca:9e:94:09:
         ed:82:fe:8a:2d:87:0f:92:64:9e:ed:65:f6:f7:26:20:2c:72:
         c2:c6:94:08:fc:de:29:1d:38:e3:5f:34:56:7f:8a:d9:92:c3:
         9a:ce:99:1d:b8:6a:c4:37:18:0b:63:8f:2e:1c:c5:4c:18:cb:
         f1:b4:bb:4c:81:2a:cf:3f:97:0c:f5:62:8f:a1:c4:1b:a9:8b:
         9f:10:72:99:8c:f4:b5:54:2c:dc:58:1f:04:1f:70:b0:31:b3:
         49:64:2c:2c:04:6e:58:36:3e:78:58:d4:b4:83:66:24:e3:00:
         fc:45:cc:3f:7b:44:76:96:4c:4e:17:97:93:0d:c3:ff:df:f5:
         27:55:25:02:4e:54:e0:d7:c2:52:09:67:e4:df:f8:44:b0:c0:
         67:4e:af:f0:3b:1e:4c:bd:7d:ee:d3:ad:7c:1f:29:8d:74:30:
         db:85:95:f8:55:a8:59:78:01:ff:91:9d:f2:2a:4d:50:81:e0:
         2a:31:eb:4c:d8:1a:63:20:85:74:34:d3:a2:41:28:b8:7d:a4:
         63:3a:4a:58:d8:7f:49:c9:e0:7f:ed:86:41:9e:c4:a7:4b:40:
         b2:40:88:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----