Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/323830343a353534633a3a2f33322d3332203d3e20323632383939.roa
File:                     323830343a353534633a3a2f33322d3332203d3e20323632383939.roa (raw, json)
Hash identifier:          A/rlA6zBKo+/kgxcyv9FULpLDCBsJiHYGU3SxYCgakE=
Subject key identifier:   2E:D4:38:24:13:44:3C:33:1E:55:FD:77:E0:8A:7F:DA:10:EA:0E:DB
Certificate issuer:       /CN=87EEF4599C8F5E030C03B069ABA7230FD1F342B4
Certificate serial:       6F6D6EE2617F8340BC2925A6E1A60473DF279C97
Authority key identifier: 87:EE:F4:59:9C:8F:5E:03:0C:03:B0:69:AB:A7:23:0F:D1:F3:42:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87EEF4599C8F5E030C03B069ABA7230FD1F342B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/323830343a353534633a3a2f33322d3332203d3e20323632383939.roa
Signing time:             Wed 20 Dec 2023 14:14:27 +0000
ROA not before:           Wed 20 Dec 2023 14:09:27 +0000
ROA not after:            Wed 18 Dec 2024 14:14:27 +0000
asID:                     262899
IP address blocks:        2804:554c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:6d:6e:e2:61:7f:83:40:bc:29:25:a6:e1:a6:04:73:df:27:9c:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87EEF4599C8F5E030C03B069ABA7230FD1F342B4
        Validity
            Not Before: Dec 20 14:09:27 2023 GMT
            Not After : Dec 18 14:14:27 2024 GMT
        Subject: CN=2ED4382413443C331E55FD77E08A7FDA10EA0EDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:06:b5:d6:f8:ae:7d:86:0d:ec:0f:50:12:88:
                    f2:51:5d:be:73:dd:98:77:af:51:52:f7:6f:0a:aa:
                    c0:42:d5:9d:3a:79:02:81:5c:39:19:d6:35:23:1c:
                    01:0d:80:05:33:be:0c:c2:a6:4c:32:f3:0e:11:19:
                    cd:95:7e:92:19:5c:f7:90:f2:9b:bc:4c:7a:fc:6a:
                    0c:a3:ea:0b:8b:c1:86:ff:41:1e:ae:2a:84:d7:aa:
                    66:00:49:4e:0e:92:73:7e:72:7d:bd:2d:ac:34:e4:
                    91:be:b3:c2:ed:c7:77:dd:e0:4d:31:85:96:51:a5:
                    f5:a7:e9:b9:20:3e:66:48:35:5d:ab:af:24:44:e6:
                    83:a7:e9:ea:bd:bc:71:d9:f2:04:98:fc:07:4b:e4:
                    7c:d0:59:3b:9d:47:d8:f6:14:7c:9a:f1:e3:a2:85:
                    7e:50:d8:7f:2c:b1:0c:48:d7:83:8f:ab:9c:33:9a:
                    58:76:b1:d2:5a:7b:a0:72:f2:8d:0a:6e:47:9c:4b:
                    5f:a3:e5:d3:cb:06:00:74:0b:a1:0c:90:9a:b2:95:
                    9a:a3:61:75:51:29:c8:c7:1f:a9:12:09:c5:5e:64:
                    2f:91:a8:f9:a5:58:b5:00:b3:97:bf:42:a0:16:55:
                    01:e7:27:55:41:28:ea:a1:ab:10:1f:30:ab:bd:49:
                    b6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D4:38:24:13:44:3C:33:1E:55:FD:77:E0:8A:7F:DA:10:EA:0E:DB
            X509v3 Authority Key Identifier:
                keyid:87:EE:F4:59:9C:8F:5E:03:0C:03:B0:69:AB:A7:23:0F:D1:F3:42:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/87EEF4599C8F5E030C03B069ABA7230FD1F342B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87EEF4599C8F5E030C03B069ABA7230FD1F342B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/323830343a353534633a3a2f33322d3332203d3e20323632383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:554c::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:00:e7:b0:58:a4:49:cd:81:08:6a:cb:0a:78:f3:a6:90:4c:
         95:b0:2e:76:81:47:11:df:4c:8e:5d:92:b5:38:ed:8a:fc:21:
         1d:78:df:2f:02:10:14:03:f2:84:28:67:82:65:86:10:2d:28:
         87:a3:7b:47:d0:c8:5b:cd:b5:6f:65:be:64:8e:8d:06:bc:69:
         b3:a0:de:7e:9d:d3:db:b9:6d:c3:bd:da:b0:a7:b3:62:8c:b9:
         72:5b:bc:83:e9:a4:12:f9:d0:45:21:f0:bc:a9:0b:4c:64:d1:
         2a:19:4a:00:0d:92:5a:cd:71:fb:de:15:28:d6:7a:ad:8e:c3:
         65:e7:6b:e8:27:a3:98:89:a0:e7:8e:02:0e:c6:94:65:31:0b:
         68:99:42:38:55:71:10:9f:d9:87:5d:f5:fa:3f:49:a7:b6:22:
         9d:d5:68:72:6b:31:3c:3c:83:23:b2:3d:e5:ce:7a:30:dc:d7:
         9d:6e:18:9c:e8:bd:23:e7:b4:f1:92:60:af:f4:d1:12:2e:54:
         9c:ce:07:58:0b:2c:b4:76:e8:84:a5:e6:b4:52:7b:6f:f1:8b:
         0c:cf:7b:b7:4f:38:97:16:35:cf:d2:dc:32:44:70:26:20:c7:
         de:36:3c:43:67:ff:81:d4:b0:72:0f:75:fe:8d:b0:90:6f:12:
         b3:8e:bd:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----