Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/323830343a323464633a3a2f33322d3438203d3e203238313836.roa
File:                     323830343a323464633a3a2f33322d3438203d3e203238313836.roa (raw, json)
Hash identifier:          3A1W8FhffmY0UrkGEgrhDuNpogf3wU0KdnzgMlx7fs8=
Subject key identifier:   8B:78:2E:7F:0D:53:11:81:94:8F:11:43:C4:7F:95:FC:4E:6A:76:AA
Certificate issuer:       /CN=89E9BA06D5A9468A2AFFB4B51EFB9780D4699056
Certificate serial:       03529F08F0AAE5D5897F7BCDF73FE18D1AA8F4C0
Authority key identifier: 89:E9:BA:06:D5:A9:46:8A:2A:FF:B4:B5:1E:FB:97:80:D4:69:90:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/89E9BA06D5A9468A2AFFB4B51EFB9780D4699056.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/323830343a323464633a3a2f33322d3438203d3e203238313836.roa
Signing time:             Wed 22 Nov 2023 23:13:15 +0000
ROA not before:           Wed 22 Nov 2023 23:08:15 +0000
ROA not after:            Wed 20 Nov 2024 23:13:15 +0000
asID:                     28186
IP address blocks:        2804:24dc::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:52:9f:08:f0:aa:e5:d5:89:7f:7b:cd:f7:3f:e1:8d:1a:a8:f4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89E9BA06D5A9468A2AFFB4B51EFB9780D4699056
        Validity
            Not Before: Nov 22 23:08:15 2023 GMT
            Not After : Nov 20 23:13:15 2024 GMT
        Subject: CN=8B782E7F0D531181948F1143C47F95FC4E6A76AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e1:da:7d:19:63:9a:37:53:8e:b8:ad:d1:63:
                    f5:f7:50:09:cf:4d:42:64:ff:c6:f5:98:16:60:00:
                    2f:6d:25:a9:2b:2f:0d:ff:fe:6f:2e:5c:b3:a8:8a:
                    a5:05:8b:b0:98:cb:2c:20:81:f5:a7:82:f9:fc:9a:
                    54:42:2d:fa:f6:da:9c:2f:f4:24:a6:c4:0b:97:9e:
                    b4:c2:c9:2c:7a:ec:62:b8:5d:ba:86:b5:ae:c0:dd:
                    ff:ec:ec:92:26:8c:cf:d5:08:11:11:9e:e4:72:75:
                    95:45:79:19:c8:93:07:12:84:a9:fc:ab:81:a7:5b:
                    97:2e:e7:78:49:df:f1:0b:a5:2e:4a:6d:72:06:9f:
                    d4:77:cb:21:53:6e:e2:0c:38:ab:2c:b4:c0:61:97:
                    b4:57:9f:49:6f:04:65:51:62:8f:02:00:f1:f7:99:
                    99:e2:64:44:21:20:06:fb:25:da:b1:71:0a:81:03:
                    6d:fd:83:46:78:88:41:4f:6c:b2:4a:d5:18:52:73:
                    ae:db:d9:24:74:44:b5:6c:49:11:39:1b:8c:75:19:
                    6d:86:b8:6f:6d:bd:b2:68:d3:ba:2d:ba:12:99:57:
                    80:21:af:89:98:93:eb:f8:e2:78:53:40:af:d5:70:
                    e3:74:d2:d3:bf:de:c7:b8:a3:c8:43:5a:61:1f:ac:
                    e5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:78:2E:7F:0D:53:11:81:94:8F:11:43:C4:7F:95:FC:4E:6A:76:AA
            X509v3 Authority Key Identifier:
                keyid:89:E9:BA:06:D5:A9:46:8A:2A:FF:B4:B5:1E:FB:97:80:D4:69:90:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/89E9BA06D5A9468A2AFFB4B51EFB9780D4699056.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/89E9BA06D5A9468A2AFFB4B51EFB9780D4699056.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/323830343a323464633a3a2f33322d3438203d3e203238313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         bb:3e:cc:86:b6:87:c8:14:bb:f0:c9:41:f2:be:44:bb:d8:81:
         ec:3b:f2:f1:c2:04:c9:ff:0d:88:6f:56:69:c7:4d:9d:ec:34:
         30:1b:39:ff:3d:1f:58:13:23:38:b1:96:a6:a3:f9:eb:61:3e:
         22:48:54:1b:08:5a:f2:bc:57:26:9e:72:be:a5:66:e2:80:67:
         88:5c:06:cf:64:58:46:35:f7:34:81:b9:b2:e4:47:71:30:42:
         27:49:3c:78:df:4f:46:51:b8:bd:39:41:ba:38:52:65:a1:03:
         28:61:a1:ce:76:33:b9:5e:fa:88:75:2c:ba:d0:ea:a4:c6:0b:
         ef:b7:f5:e7:4c:c6:c6:6d:50:2c:de:9e:44:33:5c:00:0f:a3:
         11:54:a7:9b:59:3b:ce:80:45:b2:9d:25:ed:36:4d:81:37:52:
         69:fa:65:1e:92:9c:20:c5:d2:3a:5e:e6:83:de:b7:75:d8:4d:
         66:db:ea:95:54:b6:96:93:f0:a7:6b:24:6b:bc:3e:9d:08:cd:
         75:2e:c1:b1:b0:a2:1a:58:d5:27:ac:8f:f7:1b:bc:f0:b1:04:
         b9:2d:c5:ee:ee:7f:a3:20:8c:8e:df:d2:75:cf:c6:f0:e6:41:
         77:bb:6b:f8:c3:b5:74:28:b3:9f:a4:72:f4:46:87:5a:77:79:
         45:1d:8a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----