Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kgtiefyaB7o3dEFUmRSv3Li7XLHhjkqR4bWRfMUrxAE/0/323830343a356662383a343030303a3a2f33342d3334203d3e20323639313139.roa
File:                     323830343a356662383a343030303a3a2f33342d3334203d3e20323639313139.roa (raw, json)
Hash identifier:          4ThANwmoIEYRpP5AdDPSqcrd+fJq2AQHihlXJTbB4CI=
Subject key identifier:   00:07:64:34:6C:41:FF:D0:08:1A:C3:75:12:96:4D:FE:1B:D6:36:F5
Certificate issuer:       /CN=93EB58C11DA4DA24D1CE358FCF7DC9E5FF891CE8
Certificate serial:       1E63BB2B8AF7054A536E6EB595285143B1054408
Authority key identifier: 93:EB:58:C1:1D:A4:DA:24:D1:CE:35:8F:CF:7D:C9:E5:FF:89:1C:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93EB58C11DA4DA24D1CE358FCF7DC9E5FF891CE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kgtiefyaB7o3dEFUmRSv3Li7XLHhjkqR4bWRfMUrxAE/0/323830343a356662383a343030303a3a2f33342d3334203d3e20323639313139.roa
Signing time:             Sun 21 May 2023 20:56:33 +0000
ROA not before:           Sun 21 May 2023 20:51:33 +0000
ROA not after:            Tue 21 May 2024 20:56:33 +0000
asID:                     269119
IP address blocks:        2804:5fb8:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:63:bb:2b:8a:f7:05:4a:53:6e:6e:b5:95:28:51:43:b1:05:44:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93EB58C11DA4DA24D1CE358FCF7DC9E5FF891CE8
        Validity
            Not Before: May 21 20:51:33 2023 GMT
            Not After : May 21 20:56:33 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1f:3d:a2:c4:d9:80:19:f8:b0:2f:51:6d:08:
                    97:ec:db:c8:ff:3f:26:a2:08:57:46:03:3c:d3:d5:
                    34:94:dd:47:cf:3b:fe:71:dc:b7:17:3c:19:00:e5:
                    f5:07:d8:22:89:ca:d6:65:3e:0c:72:75:21:8f:55:
                    fb:35:85:71:9e:6d:ad:72:12:17:3d:ad:bd:82:cf:
                    b7:cd:d7:7d:5c:ed:74:04:e8:c7:ca:04:5c:f4:bb:
                    0b:ee:52:6e:a1:47:13:91:1a:ae:2e:98:45:16:6c:
                    7b:30:6a:a7:70:b6:d0:08:75:25:55:58:10:3d:a9:
                    a3:8f:40:69:fb:c2:a7:1f:09:6d:e1:a2:c0:dc:01:
                    3a:9d:67:a1:a7:a6:01:32:12:51:f7:a3:53:aa:c9:
                    ce:3d:c2:6c:b9:50:bf:67:b2:33:bb:a8:a3:a2:99:
                    e3:da:50:91:ac:fd:13:c1:8c:a9:2c:a9:ca:91:3b:
                    bf:89:48:25:ed:f5:32:47:15:6f:81:79:ee:7a:4b:
                    62:a5:2b:2c:96:bf:42:83:41:19:ab:36:2b:c5:a9:
                    6c:30:49:97:cc:54:ed:ed:13:55:df:69:9b:08:8d:
                    29:8d:52:f7:47:0e:90:74:2c:f3:c7:7a:8f:1f:ef:
                    55:0f:1d:91:4a:38:d0:f9:a5:3b:7a:b4:8f:a2:63:
                    9b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:07:64:34:6C:41:FF:D0:08:1A:C3:75:12:96:4D:FE:1B:D6:36:F5
            X509v3 Authority Key Identifier:
                keyid:93:EB:58:C1:1D:A4:DA:24:D1:CE:35:8F:CF:7D:C9:E5:FF:89:1C:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kgtiefyaB7o3dEFUmRSv3Li7XLHhjkqR4bWRfMUrxAE/0/93EB58C11DA4DA24D1CE358FCF7DC9E5FF891CE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93EB58C11DA4DA24D1CE358FCF7DC9E5FF891CE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kgtiefyaB7o3dEFUmRSv3Li7XLHhjkqR4bWRfMUrxAE/0/323830343a356662383a343030303a3a2f33342d3334203d3e20323639313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5fb8:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         51:c1:f2:ae:de:4d:40:7a:00:fd:e8:51:df:dd:7c:d6:75:0b:
         05:c0:6b:60:a7:73:25:cd:cf:28:d0:28:ac:e9:bf:36:a6:ab:
         75:61:77:3b:71:c3:11:df:6b:a5:26:f3:03:b9:60:ab:ba:81:
         ae:a3:fe:33:d3:f9:ae:dc:48:64:f2:b1:63:9c:c0:0d:19:48:
         c4:73:4c:3f:f8:ef:4a:e6:49:78:93:62:84:1a:1a:40:6c:76:
         75:59:7d:08:be:b5:48:62:02:b8:65:67:b4:d5:1b:06:31:9b:
         bd:e5:57:fe:c9:33:7b:83:7c:8a:48:54:76:19:df:c8:46:d4:
         68:91:e7:a1:fa:f1:a4:15:8b:f6:4f:f8:4e:6d:58:30:d4:e2:
         50:42:ab:31:28:19:22:20:95:aa:a4:d5:d8:82:b9:e7:27:93:
         76:39:b3:5d:13:1c:41:ce:f4:2a:52:02:2a:e9:23:f0:3f:16:
         23:10:d9:33:b1:5d:36:c4:4f:b1:35:e7:11:7b:04:e8:a6:30:
         98:f5:18:76:50:65:b6:92:b8:d6:fe:f9:e0:b7:ca:b5:e0:ab:
         7d:e7:04:09:d8:3a:3d:46:44:33:b0:8b:f2:97:be:7f:c9:cd:
         db:bd:1a:73:12:8b:44:0f:a3:6d:71:2c:bc:62:4e:6e:2f:5c:
         8e:8b:17:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----