Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/323830343a326233343a383030303a3a2f33342d3334203d3e20323635313430.roa
File:                     323830343a326233343a383030303a3a2f33342d3334203d3e20323635313430.roa (raw, json)
Hash identifier:          vIYClbyIPf0HoFLS8WyitLQaREKm1Q42+e82nAGV5CY=
Subject key identifier:   9F:42:22:1E:64:A7:3C:4A:39:E7:6F:61:FB:1F:09:29:B2:C3:EF:69
Certificate issuer:       /CN=5116EB855CD239DCD4FE641CE53B61BA406A6AB8
Certificate serial:       185A980CBD4F88A529FE257A33FB09BDE735103B
Authority key identifier: 51:16:EB:85:5C:D2:39:DC:D4:FE:64:1C:E5:3B:61:BA:40:6A:6A:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5116EB855CD239DCD4FE641CE53B61BA406A6AB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/323830343a326233343a383030303a3a2f33342d3334203d3e20323635313430.roa
Signing time:             Thu 22 Feb 2024 13:41:41 +0000
ROA not before:           Thu 22 Feb 2024 13:36:41 +0000
ROA not after:            Thu 20 Feb 2025 13:41:41 +0000
asID:                     265140
IP address blocks:        2804:2b34:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:5a:98:0c:bd:4f:88:a5:29:fe:25:7a:33:fb:09:bd:e7:35:10:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5116EB855CD239DCD4FE641CE53B61BA406A6AB8
        Validity
            Not Before: Feb 22 13:36:41 2024 GMT
            Not After : Feb 20 13:41:41 2025 GMT
        Subject: CN=9F42221E64A73C4A39E76F61FB1F0929B2C3EF69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a3:be:6d:6f:6d:1a:77:e8:8c:ea:21:b8:0b:
                    16:66:df:b1:6f:92:d9:0b:d7:69:e9:7b:43:74:76:
                    ec:94:80:4a:17:e2:f2:45:2a:f5:58:5b:71:b4:8c:
                    9d:5d:d3:96:f8:8b:f9:69:6f:ff:33:1c:29:0a:15:
                    4a:23:c6:31:6b:ba:75:57:08:09:6f:7d:1f:55:ad:
                    ca:fb:73:f7:e1:42:1b:fe:6f:dd:14:f5:66:36:f1:
                    e2:d0:13:67:18:58:80:f0:b7:b5:a8:7f:68:11:83:
                    8b:a5:02:8d:ad:2e:0f:54:c4:42:b9:cd:49:a8:24:
                    74:e7:13:6c:f1:8c:ce:5f:86:aa:d7:33:1b:ee:50:
                    bd:22:98:23:fb:e7:e0:2c:1d:c4:ab:51:bc:48:9b:
                    69:3e:fb:5d:11:dd:50:4d:a8:a9:29:a6:29:15:ca:
                    db:96:a0:29:44:8b:04:c2:aa:be:84:f1:b0:26:ee:
                    96:90:d2:52:6c:ab:27:90:f4:8a:f9:d4:ac:28:33:
                    95:37:b3:51:ef:e4:80:c3:36:e6:de:5c:e9:c8:7a:
                    c3:96:7d:86:f0:17:17:51:1a:ab:27:df:6b:1e:30:
                    35:ef:46:73:ea:be:28:cb:a7:85:50:ea:1f:88:22:
                    58:aa:c5:0f:8f:28:ee:db:e9:13:c0:2e:7f:49:24:
                    51:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:42:22:1E:64:A7:3C:4A:39:E7:6F:61:FB:1F:09:29:B2:C3:EF:69
            X509v3 Authority Key Identifier:
                keyid:51:16:EB:85:5C:D2:39:DC:D4:FE:64:1C:E5:3B:61:BA:40:6A:6A:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/5116EB855CD239DCD4FE641CE53B61BA406A6AB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5116EB855CD239DCD4FE641CE53B61BA406A6AB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/323830343a326233343a383030303a3a2f33342d3334203d3e20323635313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b34:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         35:e2:4c:77:c8:74:65:fe:61:bb:26:de:05:89:aa:64:44:ce:
         c6:b9:b6:69:cd:04:3e:4b:e1:13:ce:c0:cb:13:1c:d0:95:c2:
         78:c4:0d:83:03:1b:bd:38:fd:a3:de:ab:0c:fa:8f:20:c5:d2:
         06:49:32:eb:f4:75:00:d6:21:c6:2c:5f:99:89:9d:09:9a:7e:
         92:e6:ec:64:70:14:4a:53:ae:35:ef:33:81:26:7d:f7:07:20:
         86:ee:80:e8:71:ae:7f:7a:61:53:a3:42:43:68:3f:a3:cb:f1:
         bf:14:2d:1a:22:92:70:49:53:27:f0:1c:e0:5a:7b:e0:59:38:
         1e:1c:26:80:3c:fe:cb:4e:43:9d:94:1b:e3:16:6f:cd:0f:7c:
         ae:7b:d3:75:3b:b7:28:cd:ca:ae:39:2b:54:eb:2e:9b:26:23:
         c2:8a:d8:6a:36:cd:8a:fd:9c:60:9c:5f:30:7c:53:6d:21:4a:
         8d:5c:f8:4a:76:42:94:a7:41:55:e5:85:de:d3:f4:68:99:ae:
         b3:ec:30:5d:0a:c8:2d:3e:9b:ee:61:c0:ec:1d:d5:e1:3e:81:
         c9:d8:14:87:99:d0:92:9a:56:5a:9b:6f:a8:64:fa:59:40:4f:
         a7:be:d7:af:08:e7:d6:b9:ed:e4:ad:38:34:a1:06:53:16:5c:
         8f:8a:12:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----