Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/323830343a356161343a3a2f33322d3332203d3e20323638373836.roa
File:                     323830343a356161343a3a2f33322d3332203d3e20323638373836.roa (raw, json)
Hash identifier:          2Jx4QAURopRUhrZQyAjE4Ri/whNCtCD9smKTE+Pyvcs=
Subject key identifier:   17:3D:3A:FA:35:AE:FB:6C:2B:39:FA:03:D0:19:84:C6:EE:C3:F5:16
Certificate issuer:       /CN=5B0E34B275C876C4B43F01DC71D28BE4396AE47A
Certificate serial:       32F3230B9A82D850021634D2E202F2EB26A82AEB
Authority key identifier: 5B:0E:34:B2:75:C8:76:C4:B4:3F:01:DC:71:D2:8B:E4:39:6A:E4:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B0E34B275C876C4B43F01DC71D28BE4396AE47A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/323830343a356161343a3a2f33322d3332203d3e20323638373836.roa
Signing time:             Fri 05 Jan 2024 20:10:34 +0000
ROA not before:           Fri 05 Jan 2024 20:05:34 +0000
ROA not after:            Fri 03 Jan 2025 20:10:34 +0000
asID:                     268786
IP address blocks:        2804:5aa4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:f3:23:0b:9a:82:d8:50:02:16:34:d2:e2:02:f2:eb:26:a8:2a:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B0E34B275C876C4B43F01DC71D28BE4396AE47A
        Validity
            Not Before: Jan  5 20:05:34 2024 GMT
            Not After : Jan  3 20:10:34 2025 GMT
        Subject: CN=173D3AFA35AEFB6C2B39FA03D01984C6EEC3F516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d7:1b:2b:87:24:68:94:53:56:66:ae:9c:f5:
                    d3:4c:16:77:15:e4:b8:75:4a:fa:d1:cf:a6:ed:66:
                    29:bf:07:78:c8:38:00:62:e9:7b:ac:1a:5c:cd:ab:
                    0d:8b:1e:46:0e:26:57:e9:ef:bb:51:47:d8:1a:78:
                    3c:d4:2c:b3:6f:05:78:c1:4e:d2:d5:30:91:4a:cf:
                    9e:b4:b6:93:81:e4:fa:11:b8:89:23:bb:b7:27:62:
                    42:32:bb:86:36:50:11:16:b9:93:35:a3:db:cc:15:
                    b4:32:1a:18:18:13:42:31:7c:f8:c9:4a:61:c1:90:
                    3a:3d:d6:6e:6d:b2:25:20:6a:00:a5:d6:44:6e:b0:
                    c2:bf:3f:ca:7e:cf:0c:e3:3f:b8:e0:38:1b:d7:f5:
                    bc:80:ce:47:fc:5d:45:cf:2b:09:1e:d0:66:92:79:
                    5f:d3:14:87:f1:43:0e:8c:7c:50:41:84:19:d3:cc:
                    ba:01:3d:1c:e2:49:81:a1:47:fe:bc:7b:8a:7b:95:
                    c9:9b:88:bd:9f:9f:f0:e0:85:0c:46:1b:20:ba:06:
                    78:ed:6b:7f:00:bc:15:50:9d:ae:84:4f:77:40:92:
                    7d:0b:16:df:26:72:c7:e9:e1:50:eb:3d:f7:76:6a:
                    66:8c:a0:d7:2b:80:a9:0d:af:e3:ab:7e:f6:f5:32:
                    94:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:3D:3A:FA:35:AE:FB:6C:2B:39:FA:03:D0:19:84:C6:EE:C3:F5:16
            X509v3 Authority Key Identifier:
                keyid:5B:0E:34:B2:75:C8:76:C4:B4:3F:01:DC:71:D2:8B:E4:39:6A:E4:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/5B0E34B275C876C4B43F01DC71D28BE4396AE47A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B0E34B275C876C4B43F01DC71D28BE4396AE47A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/323830343a356161343a3a2f33322d3332203d3e20323638373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5aa4::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:33:07:43:29:0d:e4:c9:f3:4b:38:8c:bf:37:ec:a1:df:f3:
         fc:ff:cd:7b:47:86:68:c0:57:32:d3:54:a1:94:5f:c9:3b:19:
         eb:ba:62:59:13:5f:77:91:79:de:a8:3d:0d:bd:53:45:11:95:
         18:48:9d:ca:ea:04:00:ce:4f:1b:8d:03:53:e2:3d:0f:e1:bf:
         47:f7:24:73:05:ad:47:fb:21:12:36:10:8d:7b:01:f5:48:4b:
         c8:f4:9c:8a:d1:a5:b2:57:2f:e7:0e:8f:2f:e1:e6:52:c3:ff:
         f2:2f:b6:9c:30:39:f8:d2:d6:80:98:b5:dc:54:9c:b6:df:50:
         ad:30:cd:88:33:89:45:b7:80:97:f5:65:bc:02:a4:8c:63:cc:
         93:dd:dd:77:46:8c:22:a7:fd:2e:22:e2:9b:8e:37:27:3a:15:
         a2:36:d9:00:27:de:a1:34:67:12:54:34:4b:21:52:fe:5e:a4:
         92:58:50:b5:ff:06:4f:47:ab:db:61:00:03:ad:ad:f8:92:b1:
         37:c3:b5:53:99:0d:7d:ae:27:d5:8a:43:05:c1:ba:2d:a4:d1:
         85:e1:72:2a:f8:4d:e8:3e:7e:b7:9e:a5:56:cc:e2:69:ec:35:
         fb:58:a3:83:21:eb:fe:3f:64:4c:b8:49:8d:4e:5c:a8:f9:b1:
         fa:36:03:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----