Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/323830343a326233343a3a2f33322d3332203d3e20323635313430.roa
File:                     323830343a326233343a3a2f33322d3332203d3e20323635313430.roa (raw, json)
Hash identifier:          rEE/ZboMBBplVAcSwM/KMWVieiQS6qioHSfSizofs9U=
Subject key identifier:   CA:57:03:54:A6:76:60:6A:70:1A:6E:69:78:03:87:D9:1E:97:1F:3A
Certificate issuer:       /CN=5116EB855CD239DCD4FE641CE53B61BA406A6AB8
Certificate serial:       737A0183EF2B4AD106DE0F65097A5EE5C6A92237
Authority key identifier: 51:16:EB:85:5C:D2:39:DC:D4:FE:64:1C:E5:3B:61:BA:40:6A:6A:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5116EB855CD239DCD4FE641CE53B61BA406A6AB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/323830343a326233343a3a2f33322d3332203d3e20323635313430.roa
Signing time:             Thu 22 Feb 2024 13:41:26 +0000
ROA not before:           Thu 22 Feb 2024 13:36:26 +0000
ROA not after:            Thu 20 Feb 2025 13:41:26 +0000
asID:                     265140
IP address blocks:        2804:2b34::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:7a:01:83:ef:2b:4a:d1:06:de:0f:65:09:7a:5e:e5:c6:a9:22:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5116EB855CD239DCD4FE641CE53B61BA406A6AB8
        Validity
            Not Before: Feb 22 13:36:26 2024 GMT
            Not After : Feb 20 13:41:26 2025 GMT
        Subject: CN=CA570354A676606A701A6E69780387D91E971F3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8d:78:7e:e3:3b:ca:b2:36:ca:94:ef:77:bd:
                    13:d7:f5:53:43:a3:df:38:4c:9d:9f:e4:d3:47:79:
                    95:63:c5:f3:36:c5:e5:f7:40:fd:87:c5:ad:8d:68:
                    23:54:97:da:f8:92:51:62:75:60:28:44:54:8c:ad:
                    1e:12:cd:af:a6:94:e6:b2:ad:24:05:0c:36:36:ba:
                    cc:7c:65:f8:8e:b8:e0:67:42:ea:99:15:2b:1c:8d:
                    94:79:f0:26:0c:fd:16:24:94:e3:53:da:f8:66:04:
                    ce:cd:33:3b:56:82:3c:24:5f:0d:a3:20:36:0c:93:
                    c3:de:ac:81:09:e2:f1:b0:da:c3:cb:cb:83:1f:3a:
                    de:31:db:07:86:d5:84:c2:fa:46:4e:cb:c3:47:b7:
                    3f:97:2d:77:11:19:3a:50:53:5c:e1:f5:00:f9:62:
                    0b:ce:93:f7:8a:16:c0:63:29:c1:29:cd:45:57:d4:
                    90:bb:f0:da:53:f5:7c:78:ac:e1:3f:96:dc:bc:a2:
                    0a:2d:24:19:0a:53:b4:72:0f:33:56:f2:9d:c1:bd:
                    98:ca:f5:f3:6d:5d:29:9b:1d:1f:16:18:4c:94:1c:
                    ce:90:73:ae:22:83:15:eb:ea:95:fe:97:77:5f:3d:
                    7b:03:bc:7a:ed:2d:f4:42:3f:eb:9d:3d:fb:5e:0a:
                    b3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:57:03:54:A6:76:60:6A:70:1A:6E:69:78:03:87:D9:1E:97:1F:3A
            X509v3 Authority Key Identifier:
                keyid:51:16:EB:85:5C:D2:39:DC:D4:FE:64:1C:E5:3B:61:BA:40:6A:6A:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/5116EB855CD239DCD4FE641CE53B61BA406A6AB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5116EB855CD239DCD4FE641CE53B61BA406A6AB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/323830343a326233343a3a2f33322d3332203d3e20323635313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b34::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:24:11:f5:43:82:86:ba:ef:8a:0b:16:7d:04:c4:84:1f:02:
         59:96:77:be:c3:75:b4:fa:1f:f2:e9:df:7d:62:11:22:1d:ba:
         3b:b3:f0:69:40:a9:5e:28:a0:90:0c:6e:2a:15:d8:14:f2:00:
         ea:2c:12:e2:d3:34:46:dc:7b:8b:77:41:ef:10:e6:25:ed:33:
         96:49:e0:4b:46:b3:32:56:eb:df:f3:87:97:92:74:d9:2f:8f:
         77:9e:40:b7:e9:e9:09:30:f0:84:75:7d:2d:fe:d9:25:bb:af:
         33:29:5f:2d:77:54:34:3b:82:79:a6:3d:37:e0:9a:4f:0d:ee:
         64:fc:32:25:05:b7:cc:2c:a1:9f:14:61:77:a6:02:01:28:1e:
         42:7c:98:59:4f:a1:86:00:63:cf:d4:e2:93:b0:f0:df:a1:40:
         60:f6:f9:61:db:fa:e3:22:33:47:13:6d:66:bd:fc:0c:d9:41:
         95:40:23:fd:c7:ad:35:84:93:0f:3f:d8:b0:6f:47:1d:34:c7:
         4e:8b:47:5b:8c:9a:df:4b:2a:cb:5b:d9:3f:3c:26:0e:3b:e8:
         ea:71:d6:71:7d:b0:dd:ef:b6:37:06:e9:7a:8c:06:84:29:7d:
         d0:d0:ef:a9:c9:60:de:8b:1d:7b:13:8e:2e:74:7c:1f:12:07:
         41:c3:b6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----