Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/0/323830343a313335633a3a2f33322d3335203d3e20323633353330.roa
File:                     323830343a313335633a3a2f33322d3335203d3e20323633353330.roa (raw, json)
Hash identifier:          i4lrn+RA2LX4DTELlBIaX7MzVPjNTpeufl5D92wtYgQ=
Subject key identifier:   34:F2:65:52:7D:65:DF:34:B6:95:53:DC:55:B7:35:88:E6:F0:89:24
Certificate issuer:       /CN=8C4B870CE1B8CA58C4F05E954547788D89A7BDE1
Certificate serial:       03AC4F3BAB38002E417A3432CFEE1CD3066FCE76
Authority key identifier: 8C:4B:87:0C:E1:B8:CA:58:C4:F0:5E:95:45:47:78:8D:89:A7:BD:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C4B870CE1B8CA58C4F05E954547788D89A7BDE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/0/323830343a313335633a3a2f33322d3335203d3e20323633353330.roa
Signing time:             Mon 16 Oct 2023 17:00:00 +0000
ROA not before:           Mon 16 Oct 2023 16:55:00 +0000
ROA not after:            Mon 14 Oct 2024 17:00:00 +0000
asID:                     263530
IP address blocks:        2804:135c::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ac:4f:3b:ab:38:00:2e:41:7a:34:32:cf:ee:1c:d3:06:6f:ce:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C4B870CE1B8CA58C4F05E954547788D89A7BDE1
        Validity
            Not Before: Oct 16 16:55:00 2023 GMT
            Not After : Oct 14 17:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2e:ad:2f:34:69:e6:20:dd:c5:8a:25:00:32:
                    0a:1c:71:63:c6:2e:95:c1:a2:94:81:6f:5d:bb:4b:
                    92:0f:13:97:c6:47:e4:04:ab:d7:e4:05:83:2c:28:
                    48:b8:b9:05:1e:bd:55:d6:e6:c7:c3:ce:5e:1f:35:
                    2c:f1:89:af:c8:cd:74:be:fb:a7:26:ae:2a:6b:a1:
                    59:89:f7:bd:31:3e:92:4b:5f:81:d1:66:3d:b0:cf:
                    7e:97:d2:5a:c1:23:6d:f4:34:54:b7:1b:c8:87:30:
                    d3:c9:00:20:d0:c6:3c:4b:da:31:7c:db:4d:68:51:
                    ef:3a:2d:71:c2:d9:d8:6e:42:d5:54:34:a1:31:f1:
                    bc:44:ea:b2:f9:16:5c:09:22:fb:79:f5:b0:6e:46:
                    49:09:76:d9:1c:15:c9:9e:ac:05:fd:39:c9:60:5d:
                    2e:21:1c:ce:f0:08:e5:34:11:b6:7a:7e:83:4f:85:
                    72:4a:2a:10:20:11:43:97:62:c9:68:38:f5:76:e2:
                    a7:22:dc:bf:f9:0b:ac:7c:ff:8a:f5:d4:45:cf:91:
                    50:8c:f1:ac:12:f3:22:c3:ea:9d:90:13:e8:67:b2:
                    45:a8:6e:c3:aa:94:0d:ff:90:f4:b6:4f:16:a7:0c:
                    be:37:dc:8a:01:e9:00:8a:18:e8:9d:17:82:e4:bb:
                    1c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F2:65:52:7D:65:DF:34:B6:95:53:DC:55:B7:35:88:E6:F0:89:24
            X509v3 Authority Key Identifier:
                keyid:8C:4B:87:0C:E1:B8:CA:58:C4:F0:5E:95:45:47:78:8D:89:A7:BD:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/0/8C4B870CE1B8CA58C4F05E954547788D89A7BDE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C4B870CE1B8CA58C4F05E954547788D89A7BDE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/0/323830343a313335633a3a2f33322d3335203d3e20323633353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:135c::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:47:ad:eb:3a:40:ab:82:e5:e7:79:93:ae:ad:a9:29:38:4b:
         08:66:ab:da:c5:1c:61:cc:6d:18:ff:6d:86:70:aa:14:d8:a8:
         ac:f7:31:ef:be:47:67:46:b8:3e:37:79:7b:4e:4e:2e:14:ca:
         84:1b:c1:7f:91:68:9b:46:bd:78:cd:7c:69:95:38:ff:5d:26:
         dc:7f:88:2b:38:b5:2e:68:fc:dc:9e:14:cc:9f:0c:b6:66:e9:
         2d:4b:5a:90:a6:32:99:18:6d:16:e5:7c:74:22:b4:5a:23:c8:
         3a:12:84:61:8f:f9:70:a1:14:2b:58:b7:9d:88:04:90:e2:1e:
         c1:ae:3d:53:3d:26:f1:1e:ef:f1:96:9c:e4:f3:b4:2d:01:4c:
         08:b6:a1:66:9d:63:cc:9d:93:68:2a:dd:a1:0c:79:ee:f0:32:
         e5:33:f6:e9:48:31:50:08:71:01:08:47:7b:f9:c0:b7:a4:9c:
         da:3d:de:c2:0f:63:61:0c:0b:99:1e:a9:b1:3f:6b:ae:37:b8:
         f9:15:2d:06:38:ff:b3:e1:1a:f8:bb:07:ce:e3:6a:93:c4:8b:
         8f:cb:71:36:1a:15:b5:e6:6d:b6:ad:35:9b:a0:15:9a:ab:d0:
         ae:f3:c7:03:5f:d5:a9:76:14:b6:10:af:13:f9:93:dd:35:ff:
         9f:1a:35:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----