Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kgtiefyaB7o3dEFUmRSv3Li7XLHhjkqR4bWRfMUrxAE/0/323830343a356662383a383030303a3a2f33332d3333203d3e20323639313139.roa
File:                     323830343a356662383a383030303a3a2f33332d3333203d3e20323639313139.roa (raw, json)
Hash identifier:          5s00Ccw2gowEYCpiS2Z48YpvZexOuwioh04EPFm9JZw=
Subject key identifier:   F9:37:75:8D:EF:C6:B4:B4:98:5C:7D:30:AA:47:AD:BF:AE:DC:99:D4
Certificate issuer:       /CN=93EB58C11DA4DA24D1CE358FCF7DC9E5FF891CE8
Certificate serial:       2B14EFC838807993364470BFEBE6B051B0CD83BB
Authority key identifier: 93:EB:58:C1:1D:A4:DA:24:D1:CE:35:8F:CF:7D:C9:E5:FF:89:1C:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93EB58C11DA4DA24D1CE358FCF7DC9E5FF891CE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kgtiefyaB7o3dEFUmRSv3Li7XLHhjkqR4bWRfMUrxAE/0/323830343a356662383a383030303a3a2f33332d3333203d3e20323639313139.roa
Signing time:             Sun 21 May 2023 20:57:44 +0000
ROA not before:           Sun 21 May 2023 20:52:44 +0000
ROA not after:            Tue 21 May 2024 20:57:44 +0000
asID:                     269119
IP address blocks:        2804:5fb8:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:14:ef:c8:38:80:79:93:36:44:70:bf:eb:e6:b0:51:b0:cd:83:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93EB58C11DA4DA24D1CE358FCF7DC9E5FF891CE8
        Validity
            Not Before: May 21 20:52:44 2023 GMT
            Not After : May 21 20:57:44 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f1:3d:8d:9b:2d:9c:71:d3:b0:24:cc:3a:34:
                    4f:ce:86:1c:cb:4a:46:13:2d:9d:7a:85:35:b7:ba:
                    f1:50:a9:0c:31:e6:8f:3d:3a:4e:3c:c7:0f:a4:a9:
                    fc:09:66:4f:62:32:4b:64:8b:c3:52:ec:6d:85:72:
                    42:09:40:b5:77:73:f1:c0:89:f5:df:cd:1a:88:f0:
                    29:6f:b6:11:45:0a:09:fa:f5:60:9b:3e:e7:27:de:
                    53:45:5d:92:57:3c:a0:21:01:e5:e1:cc:a1:2b:ef:
                    7b:8d:8e:0b:23:d3:a7:95:44:09:3f:c1:1c:cf:9e:
                    3a:e0:93:7f:a2:ed:3f:84:1b:2f:14:7d:ea:0c:b7:
                    42:48:c4:4d:ee:3a:09:a1:9d:a0:c6:4c:af:6d:78:
                    8a:b5:05:92:7d:c4:14:78:21:f5:4e:9c:d6:dd:02:
                    45:25:e4:0c:56:a9:6d:0f:cd:90:c8:3d:23:bc:bf:
                    e7:0e:fc:69:7a:4b:0d:69:d8:24:1a:6e:34:29:c8:
                    d6:24:cd:d7:7b:8d:31:3e:9a:f8:44:24:4c:19:a4:
                    32:9d:d1:46:1b:65:3f:49:d7:dd:68:d3:78:db:73:
                    af:75:ca:41:31:ec:05:fe:3e:e7:55:ec:e3:e3:64:
                    17:40:1d:35:8a:f7:4b:67:b8:88:d6:22:88:c6:78:
                    b6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:37:75:8D:EF:C6:B4:B4:98:5C:7D:30:AA:47:AD:BF:AE:DC:99:D4
            X509v3 Authority Key Identifier:
                keyid:93:EB:58:C1:1D:A4:DA:24:D1:CE:35:8F:CF:7D:C9:E5:FF:89:1C:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kgtiefyaB7o3dEFUmRSv3Li7XLHhjkqR4bWRfMUrxAE/0/93EB58C11DA4DA24D1CE358FCF7DC9E5FF891CE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93EB58C11DA4DA24D1CE358FCF7DC9E5FF891CE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kgtiefyaB7o3dEFUmRSv3Li7XLHhjkqR4bWRfMUrxAE/0/323830343a356662383a383030303a3a2f33332d3333203d3e20323639313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5fb8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         55:1c:cf:4f:01:d7:4f:fb:54:64:84:d4:25:7d:70:f8:98:a0:
         73:45:b7:82:ff:09:a6:02:13:7b:76:a8:72:2c:79:59:86:ef:
         43:6b:5f:fb:64:b8:7e:50:45:43:ca:88:05:75:2d:07:b5:e6:
         1f:76:28:1f:a2:49:30:9e:b1:66:f5:54:60:84:2a:bd:6b:e3:
         77:ac:cd:cf:dd:60:47:55:b4:2b:a9:5d:3a:cc:d6:9f:e5:2d:
         21:53:19:b8:07:50:81:f8:d9:a5:77:0a:10:e1:f2:be:d7:8d:
         06:b7:fc:82:75:0a:0b:5e:ae:66:87:22:24:a3:44:8d:76:a4:
         39:e1:80:be:b8:2e:2b:58:73:92:62:9d:1b:6c:5a:a7:93:0b:
         4c:86:9a:4b:e5:51:2c:b2:c1:c4:87:5a:ac:11:a5:f8:ed:52:
         ce:ba:fd:1a:df:c6:4a:6e:a1:c9:a5:0e:e7:85:7d:e6:b0:eb:
         a1:36:3f:30:72:c3:ab:77:af:6b:03:93:e8:5b:8a:de:ff:96:
         95:6f:85:93:0a:a9:73:6d:50:a4:a7:cc:db:99:ad:c3:d6:03:
         6e:ec:00:36:65:9d:f6:81:5f:cf:bc:fc:b7:e8:f8:c4:a4:37:
         5a:a0:64:78:9f:f4:e2:49:34:cd:c5:83:2f:34:08:f2:1e:1a:
         3b:14:59:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----