Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/0/323830343a353964383a623138313a3a2f34382d3438203d3e20323638373239.roa
File:                     323830343a353964383a623138313a3a2f34382d3438203d3e20323638373239.roa (raw, json)
Hash identifier:          fTY0B3ZIi1nr7ASLIP5sgI+tkpNwiF532DeFPd7wrog=
Subject key identifier:   BC:FA:2B:9F:B8:4B:59:47:5B:82:FC:66:F6:D4:CD:14:BD:F6:98:FE
Certificate issuer:       /CN=8EDE9E8FBF73C6D8FEC3F7D82DEF1E1B2B04AED1
Certificate serial:       02C320212719BAC35564F63216066421EC81EDDF
Authority key identifier: 8E:DE:9E:8F:BF:73:C6:D8:FE:C3:F7:D8:2D:EF:1E:1B:2B:04:AE:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8EDE9E8FBF73C6D8FEC3F7D82DEF1E1B2B04AED1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/0/323830343a353964383a623138313a3a2f34382d3438203d3e20323638373239.roa
Signing time:             Tue 26 Dec 2023 16:59:21 +0000
ROA not before:           Tue 26 Dec 2023 16:54:21 +0000
ROA not after:            Tue 24 Dec 2024 16:59:21 +0000
asID:                     268729
IP address blocks:        2804:59d8:b181::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:c3:20:21:27:19:ba:c3:55:64:f6:32:16:06:64:21:ec:81:ed:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EDE9E8FBF73C6D8FEC3F7D82DEF1E1B2B04AED1
        Validity
            Not Before: Dec 26 16:54:21 2023 GMT
            Not After : Dec 24 16:59:21 2024 GMT
        Subject: CN=BCFA2B9FB84B59475B82FC66F6D4CD14BDF698FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:06:d7:44:df:fc:c7:af:cf:29:6b:f7:8b:85:
                    d9:46:76:d1:49:55:c7:fd:14:e9:01:63:be:19:40:
                    21:4d:18:3b:bf:39:ac:56:94:8c:b8:96:0f:4d:b5:
                    25:8b:25:42:2b:21:88:be:3e:c6:b3:39:93:67:3c:
                    a7:31:df:e7:e5:66:1b:e6:75:17:24:f0:b9:b6:98:
                    44:e3:8a:85:6d:52:f0:d9:cb:92:91:8e:19:d3:fa:
                    0e:08:c8:bb:2b:04:d5:65:49:74:49:37:11:2d:9f:
                    81:44:80:34:75:98:49:38:83:5b:5d:0b:fb:a0:60:
                    9a:f7:f9:f2:2a:76:0d:c6:65:e0:27:1e:c1:7d:cd:
                    08:94:b7:11:2a:3c:0c:34:f0:52:6f:b5:0e:c6:7f:
                    e8:b5:62:9b:49:06:9c:cb:80:a7:25:ab:a8:49:75:
                    83:17:40:75:02:f0:7d:7f:8f:23:e4:cd:36:b1:fb:
                    93:d0:91:62:89:35:4c:96:e3:2a:88:cb:e2:2e:70:
                    3a:ec:55:bd:a2:1b:67:b9:05:b0:90:c2:a6:49:dc:
                    92:b1:e4:e0:8f:05:ec:24:f5:1c:2d:1e:01:b5:0f:
                    4a:0e:eb:02:11:a5:d5:8f:cf:df:20:33:55:c4:77:
                    3b:e4:7c:bc:60:ab:86:91:47:74:0d:07:8f:0b:92:
                    3f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:FA:2B:9F:B8:4B:59:47:5B:82:FC:66:F6:D4:CD:14:BD:F6:98:FE
            X509v3 Authority Key Identifier:
                keyid:8E:DE:9E:8F:BF:73:C6:D8:FE:C3:F7:D8:2D:EF:1E:1B:2B:04:AE:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/0/8EDE9E8FBF73C6D8FEC3F7D82DEF1E1B2B04AED1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8EDE9E8FBF73C6D8FEC3F7D82DEF1E1B2B04AED1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/0/323830343a353964383a623138313a3a2f34382d3438203d3e20323638373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:59d8:b181::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:81:1c:af:f1:52:97:2b:01:07:39:e0:e1:0b:da:9e:ee:10:
         22:56:4c:e1:84:49:a7:1d:0a:53:80:4a:27:95:d3:87:6f:04:
         4a:d8:a8:87:eb:c7:b1:ae:bd:60:44:b2:cc:9e:84:f1:82:95:
         f2:49:59:ed:81:6d:ca:79:1b:e9:e7:d9:67:b0:8b:0f:c0:1a:
         18:ae:48:80:3c:20:3a:9b:dc:e7:93:81:c3:76:d2:c5:8c:84:
         1e:93:9e:7f:00:9d:83:4f:0d:89:8e:7c:7d:e6:d1:b4:df:aa:
         04:e0:5d:a8:62:d3:d6:64:cb:23:82:08:fc:80:12:54:88:68:
         34:f3:df:b1:ef:c6:da:fb:14:79:9f:ac:42:c3:ea:33:42:6f:
         e3:93:cd:bb:c6:56:ee:10:5d:40:98:6a:14:a9:5e:db:e9:3a:
         4f:ff:45:2c:c8:98:62:b5:bb:5e:6f:fc:a6:05:12:b5:09:07:
         2f:03:3f:23:b3:60:04:f0:56:6a:2e:ce:2d:76:9b:f6:3a:5a:
         25:cb:fc:79:5e:5a:c0:ad:ec:c9:2b:ce:0c:d0:ac:33:4d:75:
         d4:d2:55:e4:61:9c:f9:a2:12:38:09:c8:9a:fd:20:d2:f5:9f:
         72:f1:7e:1e:9f:c3:88:6e:da:22:fd:7b:e2:89:94:f6:c1:c9:
         06:e5:e8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----