Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8TgRJg1VZmU935LYCdJUCSdetnAi77GUjHB74PjV4xGw/0/323830343a356131343a3a2f33322d3334203d3e20323638373437.roa
File:                     323830343a356131343a3a2f33322d3334203d3e20323638373437.roa (raw, json)
Hash identifier:          I4+lIy+j5hSvjHqZ20Zq3HT2S/tnlQZLrFzJr5eZdRc=
Subject key identifier:   96:27:3B:EE:6F:73:FF:CD:0A:78:55:EA:DC:2C:7B:48:ED:B0:C1:86
Certificate issuer:       /CN=4C8C8A9B4C9E62ACC6F9624C16292855D55D4A33
Certificate serial:       26A5564BD808D55490018A15DFA547184890BE34
Authority key identifier: 4C:8C:8A:9B:4C:9E:62:AC:C6:F9:62:4C:16:29:28:55:D5:5D:4A:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C8C8A9B4C9E62ACC6F9624C16292855D55D4A33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TgRJg1VZmU935LYCdJUCSdetnAi77GUjHB74PjV4xGw/0/323830343a356131343a3a2f33322d3334203d3e20323638373437.roa
Signing time:             Sat 24 Feb 2024 13:30:00 +0000
ROA not before:           Sat 24 Feb 2024 13:25:00 +0000
ROA not after:            Sat 22 Feb 2025 13:30:00 +0000
asID:                     268747
IP address blocks:        2804:5a14::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:a5:56:4b:d8:08:d5:54:90:01:8a:15:df:a5:47:18:48:90:be:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C8C8A9B4C9E62ACC6F9624C16292855D55D4A33
        Validity
            Not Before: Feb 24 13:25:00 2024 GMT
            Not After : Feb 22 13:30:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b7:94:af:d8:95:3d:c1:dd:de:97:44:ab:71:
                    ac:aa:9b:e3:4d:00:2d:0a:c7:a5:e7:59:3d:17:47:
                    73:8d:08:34:f8:89:65:d0:82:7d:80:65:94:1d:5c:
                    68:ab:84:6d:b4:ec:6c:22:20:44:c1:46:65:06:f8:
                    78:f1:2c:75:13:d1:e4:05:4e:6c:e6:39:4b:99:7a:
                    22:05:2c:35:d3:4a:b9:51:70:c8:e6:cd:0d:67:a2:
                    57:b6:85:7e:06:8f:4f:06:4f:23:46:0b:8b:75:6e:
                    d1:b8:d5:0c:ea:ba:9d:46:69:bf:19:b1:15:9c:73:
                    a1:81:fc:27:2d:f1:c3:76:ca:06:37:09:d2:37:8e:
                    69:fa:29:a5:e8:75:c7:88:d1:13:a0:d7:05:c1:00:
                    ad:6b:fc:cb:aa:59:2e:a7:2a:f0:5d:a4:4a:d8:e4:
                    5f:c4:ca:fe:43:76:5f:75:00:bb:aa:48:6f:ad:03:
                    23:a7:3b:28:ed:20:64:9a:8d:32:19:63:88:54:55:
                    03:e3:93:ef:60:05:7a:66:bd:05:52:5b:a6:e5:aa:
                    61:a0:6b:11:bb:06:7b:e6:b0:66:5a:f8:82:7d:9c:
                    49:50:d5:a0:a7:07:14:24:cc:f3:ab:c8:16:e7:b2:
                    e9:07:e5:7d:18:9b:b9:49:60:2f:bd:eb:0b:e0:a3:
                    69:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:27:3B:EE:6F:73:FF:CD:0A:78:55:EA:DC:2C:7B:48:ED:B0:C1:86
            X509v3 Authority Key Identifier:
                keyid:4C:8C:8A:9B:4C:9E:62:AC:C6:F9:62:4C:16:29:28:55:D5:5D:4A:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TgRJg1VZmU935LYCdJUCSdetnAi77GUjHB74PjV4xGw/0/4C8C8A9B4C9E62ACC6F9624C16292855D55D4A33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C8C8A9B4C9E62ACC6F9624C16292855D55D4A33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TgRJg1VZmU935LYCdJUCSdetnAi77GUjHB74PjV4xGw/0/323830343a356131343a3a2f33322d3334203d3e20323638373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5a14::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:f0:59:23:02:d9:2e:46:8d:4e:d9:cb:98:9a:b9:d5:de:93:
         05:a3:9b:34:3a:02:c9:54:32:d6:1f:f1:3d:5a:b2:83:29:8e:
         3e:0e:b0:df:28:90:a9:0e:ac:3b:4f:ed:fb:76:ea:5a:cf:de:
         b9:39:b0:99:cd:f6:06:c7:b0:66:25:0d:1d:e5:5c:03:32:ba:
         b5:13:f9:73:a8:4e:83:2c:e3:42:c3:32:69:b5:3b:97:d5:3d:
         05:c5:02:bb:ab:f9:74:4f:b6:30:76:c8:d7:fa:e6:52:f3:c3:
         e9:a8:b6:1f:f3:16:97:98:66:5f:ec:1a:ae:c8:f0:f7:d3:bb:
         a4:df:2c:5f:b0:e5:bf:f9:21:1a:6d:54:56:3a:16:24:4c:eb:
         36:37:1c:0d:79:25:03:fe:a6:19:68:90:6b:d2:da:95:96:c5:
         68:e6:3b:5b:66:11:24:f9:31:18:4b:af:c0:47:57:72:74:3e:
         3a:d8:ea:36:fc:36:e9:a3:73:ea:06:69:7e:93:56:89:a6:a6:
         bf:53:cd:6e:01:44:a2:ce:a9:37:66:29:8e:29:89:10:c4:03:
         73:17:07:de:d2:c6:42:55:ee:4a:9b:3b:9b:4a:a1:c6:b9:41:
         31:b0:ff:e7:5d:c8:cc:f3:24:5e:31:c4:bd:6b:87:bf:57:55:
         dd:77:8f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----