Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/1/323830343a343635633a3a2f33322d3334203d3e20323636393835.roa
File:                     323830343a343635633a3a2f33322d3334203d3e20323636393835.roa (raw, json)
Hash identifier:          YRI1hj29O35Y9sRnSl/9kB8v0atHWJ+30mP/TWvaWXI=
Subject key identifier:   55:4A:80:80:28:99:E1:3B:22:27:6E:7D:7A:A5:FA:4B:8B:7F:55:8C
Certificate issuer:       /CN=C5949E0114CEC27739D4FFD39EAF9EC469F3325D
Certificate serial:       1E5A24CBB3922F2B56583D589F763DBE6658089A
Authority key identifier: C5:94:9E:01:14:CE:C2:77:39:D4:FF:D3:9E:AF:9E:C4:69:F3:32:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C5949E0114CEC27739D4FFD39EAF9EC469F3325D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/1/323830343a343635633a3a2f33322d3334203d3e20323636393835.roa
Signing time:             Tue 20 Feb 2024 02:00:00 +0000
ROA not before:           Tue 20 Feb 2024 01:55:00 +0000
ROA not after:            Tue 18 Feb 2025 02:00:00 +0000
asID:                     266985
IP address blocks:        2804:465c::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:5a:24:cb:b3:92:2f:2b:56:58:3d:58:9f:76:3d:be:66:58:08:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5949E0114CEC27739D4FFD39EAF9EC469F3325D
        Validity
            Not Before: Feb 20 01:55:00 2024 GMT
            Not After : Feb 18 02:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:91:13:fd:1f:5b:e2:77:74:e6:bc:8b:8b:a5:
                    40:ea:33:fc:57:b0:f8:24:04:35:65:51:d4:75:5f:
                    52:cf:2a:10:fc:46:ea:f9:f2:6d:88:53:4c:c4:48:
                    af:db:e7:63:b4:ea:d6:30:19:28:a8:38:15:32:48:
                    7e:c8:6f:d3:40:58:ff:fa:92:5e:b5:84:ca:a8:9e:
                    45:bc:b0:f5:19:7d:74:3a:73:dc:58:c5:87:b8:d7:
                    f3:3f:b4:6d:26:19:e7:d6:43:9f:2e:12:5c:18:49:
                    63:e8:46:87:09:d0:d0:7d:9d:27:95:4a:77:50:94:
                    b6:07:70:e1:56:87:c4:a4:ce:eb:a4:06:e2:b7:c1:
                    e8:99:27:fb:06:78:2f:a9:34:3b:f3:8e:41:e1:eb:
                    8f:de:d9:b7:04:34:1e:65:e6:3e:30:61:12:51:0e:
                    ce:06:a2:aa:c1:bf:b2:b5:50:4b:ff:d9:4b:33:28:
                    8b:64:c9:43:99:8b:50:a5:0d:1a:7b:c9:b0:40:4d:
                    ed:f7:ce:f0:0b:66:8e:08:04:6e:4b:59:41:f6:11:
                    11:1d:e0:c9:df:29:fe:98:48:58:5a:18:84:da:1b:
                    25:86:35:f5:d0:4d:f6:39:19:c1:ee:2a:b3:64:3f:
                    e2:04:00:34:81:50:98:d9:85:04:9a:dc:fb:3b:43:
                    23:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:4A:80:80:28:99:E1:3B:22:27:6E:7D:7A:A5:FA:4B:8B:7F:55:8C
            X509v3 Authority Key Identifier:
                keyid:C5:94:9E:01:14:CE:C2:77:39:D4:FF:D3:9E:AF:9E:C4:69:F3:32:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/1/C5949E0114CEC27739D4FFD39EAF9EC469F3325D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C5949E0114CEC27739D4FFD39EAF9EC469F3325D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/1/323830343a343635633a3a2f33322d3334203d3e20323636393835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:465c::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:68:1e:c6:19:7b:51:04:a4:9e:fc:54:38:cd:55:01:40:3b:
         c4:4b:c0:9d:2a:e1:b8:ef:25:8c:fe:9c:25:f0:4a:ae:30:a3:
         f5:9d:23:f7:20:a8:e4:c0:e1:83:cf:38:7e:26:8f:2f:ae:1b:
         82:a0:9b:17:82:a2:e8:65:f0:28:1c:b8:cf:89:3c:3b:09:fb:
         e8:43:4e:16:c4:fc:37:ed:45:28:ae:f5:63:75:bc:36:6b:c9:
         6b:6c:80:81:57:e1:71:37:3e:c6:81:d4:0f:db:f3:dd:c9:a1:
         a2:fe:4c:3c:b0:ef:c3:a6:de:f8:d0:fd:45:f6:18:22:23:77:
         90:31:86:89:8c:63:3e:36:f1:a1:2a:62:45:e6:43:d6:31:6d:
         07:3b:31:bf:17:3f:a4:d7:4a:9c:08:c2:dc:f6:8b:6b:a6:46:
         fc:27:70:57:5e:91:36:b0:6a:82:23:3e:a8:ab:29:f7:fe:f9:
         aa:15:11:8f:e7:2c:fd:66:9b:fc:18:fb:22:06:a7:c1:81:1e:
         4f:38:7f:58:1c:d8:39:4a:a2:53:2d:d9:79:8a:d8:12:98:91:
         77:70:ca:f5:13:44:c7:e0:93:30:22:d6:f5:29:83:ef:7a:8e:
         08:88:be:0c:c1:58:45:0e:07:09:07:f5:9d:49:2f:65:85:e4:
         67:47:28:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----