Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kgtiefyaB7o3dEFUmRSv3Li7XLHhjkqR4bWRfMUrxAE/0/323830343a356662383a3a2f33322d3332203d3e20323639313139.roa
File:                     323830343a356662383a3a2f33322d3332203d3e20323639313139.roa (raw, json)
Hash identifier:          Xij1vYmTlZFMWlbdZMkDSi6qtKvF+vUN1pAr7XD8T5g=
Subject key identifier:   5D:D6:0B:F2:EE:82:07:3D:8F:11:92:0A:E5:10:C3:45:17:23:B6:20
Certificate issuer:       /CN=93EB58C11DA4DA24D1CE358FCF7DC9E5FF891CE8
Certificate serial:       3DFFBB25B74A0380380DD50B171B760AAD79AA57
Authority key identifier: 93:EB:58:C1:1D:A4:DA:24:D1:CE:35:8F:CF:7D:C9:E5:FF:89:1C:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93EB58C11DA4DA24D1CE358FCF7DC9E5FF891CE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kgtiefyaB7o3dEFUmRSv3Li7XLHhjkqR4bWRfMUrxAE/0/323830343a356662383a3a2f33322d3332203d3e20323639313139.roa
Signing time:             Fri 22 Mar 2024 17:00:00 +0000
ROA not before:           Fri 22 Mar 2024 16:55:00 +0000
ROA not after:            Sat 22 Mar 2025 17:00:00 +0000
asID:                     269119
IP address blocks:        2804:5fb8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:ff:bb:25:b7:4a:03:80:38:0d:d5:0b:17:1b:76:0a:ad:79:aa:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93EB58C11DA4DA24D1CE358FCF7DC9E5FF891CE8
        Validity
            Not Before: Mar 22 16:55:00 2024 GMT
            Not After : Mar 22 17:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b9:06:7c:b5:c2:a5:8d:a8:09:76:28:39:01:
                    0d:06:d3:cf:fa:f3:82:0d:dd:1a:69:bb:9f:d0:a9:
                    8b:56:4e:ae:2e:47:3e:a4:cc:b0:67:fb:91:6c:96:
                    92:59:a3:d4:f8:80:28:a5:73:5d:a3:a4:04:ea:66:
                    f8:f8:9f:21:df:33:c0:fa:66:cd:fa:7b:c8:c3:99:
                    01:40:60:4b:9c:d0:fe:c0:82:90:c7:66:96:7d:b2:
                    86:7c:ee:8d:42:8e:4c:d9:b6:35:0a:31:55:52:c3:
                    d9:f9:c0:4c:a8:21:04:64:65:f2:c2:b2:c2:70:b5:
                    1f:ce:6b:13:9d:5f:33:3e:b5:a2:6a:1e:6d:ea:44:
                    11:8f:51:fc:cb:55:95:7c:ac:54:a1:56:99:69:5f:
                    7c:42:c2:b9:ad:e2:d3:90:3c:4e:06:44:0b:6c:68:
                    62:25:cf:02:de:86:82:e3:2f:91:32:9e:f1:73:8b:
                    fb:cb:99:2b:14:04:51:67:ed:0c:56:a6:ca:c5:30:
                    3b:80:00:c1:5e:f4:4a:a1:5f:1c:3e:5a:b0:d6:8b:
                    52:0f:dc:34:6b:55:05:e0:b7:1d:81:5a:5d:56:ba:
                    77:74:7c:e9:93:d3:19:83:77:2c:ec:62:99:70:6e:
                    69:74:a0:c1:11:00:a8:ff:aa:dc:fb:a9:46:f3:91:
                    b3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D6:0B:F2:EE:82:07:3D:8F:11:92:0A:E5:10:C3:45:17:23:B6:20
            X509v3 Authority Key Identifier:
                keyid:93:EB:58:C1:1D:A4:DA:24:D1:CE:35:8F:CF:7D:C9:E5:FF:89:1C:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kgtiefyaB7o3dEFUmRSv3Li7XLHhjkqR4bWRfMUrxAE/0/93EB58C11DA4DA24D1CE358FCF7DC9E5FF891CE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93EB58C11DA4DA24D1CE358FCF7DC9E5FF891CE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kgtiefyaB7o3dEFUmRSv3Li7XLHhjkqR4bWRfMUrxAE/0/323830343a356662383a3a2f33322d3332203d3e20323639313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5fb8::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:00:fc:07:6f:c1:60:54:5b:74:7d:0b:6b:a3:fc:94:ab:65:
         ba:2e:ae:80:62:bc:95:28:d9:c7:8e:35:9b:72:2a:c8:c3:6b:
         e2:38:76:74:76:65:d6:ca:60:14:94:66:59:91:58:02:40:82:
         96:de:bd:4c:ca:2d:ed:9c:fb:ee:12:96:10:56:71:a3:53:30:
         22:42:2a:c5:30:37:da:46:44:22:ff:85:ad:49:7f:dc:83:3d:
         c7:82:5f:9d:74:59:2a:01:a6:d5:c5:57:b2:a7:5d:6e:5d:49:
         15:b1:36:40:4d:66:b2:e2:da:86:2b:c4:26:2a:61:ae:d8:40:
         69:df:97:cd:f0:64:4f:9f:69:ea:ec:60:17:58:b5:77:e0:67:
         de:99:2d:c0:c5:53:b1:a8:cb:76:3e:0e:ef:27:8b:99:fa:28:
         e3:5e:0a:46:06:20:f5:52:83:22:12:2e:cb:84:99:17:8a:63:
         9d:36:ad:61:b5:61:f7:71:5f:51:6b:ef:0f:cc:ae:f2:29:db:
         82:e6:d5:86:d1:d0:e0:08:0a:d3:47:34:51:87:9c:8d:87:47:
         2e:38:7c:c2:67:96:d9:04:92:47:ba:b2:d5:25:85:31:75:32:
         18:1b:bc:df:1d:cb:fd:ec:db:fd:e1:13:b6:27:5a:81:6c:a2:
         a0:a3:ca:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----