Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/0/323830343a386135633a383030303a3a2f33332d3333203d3e20323733363634.roa
File:                     323830343a386135633a383030303a3a2f33332d3333203d3e20323733363634.roa (raw, json)
Hash identifier:          HH+Pn77fRCnqU8LsLI0rLKTlEyfXPao88PuItGr7LT4=
Subject key identifier:   EE:AB:86:4B:70:4D:07:D1:BF:37:52:0B:22:83:9B:AC:D7:F0:FE:90
Certificate issuer:       /CN=31AE16F28BCAEEB3D51A3C45A318CE9A75FA6E69
Certificate serial:       426CF9E5D802DA05AAF3416FA44D212ED282AE20
Authority key identifier: 31:AE:16:F2:8B:CA:EE:B3:D5:1A:3C:45:A3:18:CE:9A:75:FA:6E:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/31AE16F28BCAEEB3D51A3C45A318CE9A75FA6E69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/0/323830343a386135633a383030303a3a2f33332d3333203d3e20323733363634.roa
Signing time:             Fri 22 Dec 2023 16:29:41 +0000
ROA not before:           Fri 22 Dec 2023 16:24:41 +0000
ROA not after:            Fri 20 Dec 2024 16:29:41 +0000
asID:                     273664
IP address blocks:        2804:8a5c:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:6c:f9:e5:d8:02:da:05:aa:f3:41:6f:a4:4d:21:2e:d2:82:ae:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31AE16F28BCAEEB3D51A3C45A318CE9A75FA6E69
        Validity
            Not Before: Dec 22 16:24:41 2023 GMT
            Not After : Dec 20 16:29:41 2024 GMT
        Subject: CN=EEAB864B704D07D1BF37520B22839BACD7F0FE90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:cd:34:7b:5b:24:c9:6a:6c:d2:a5:60:64:3d:
                    e3:07:21:3a:d3:55:8a:e4:50:d0:77:14:54:e8:26:
                    d0:b6:e9:e3:c9:48:69:1b:aa:0a:3e:51:54:5a:6d:
                    11:9a:d5:4d:f4:45:03:b0:d9:e3:77:fe:24:35:a3:
                    0c:7e:ca:92:65:1c:55:4d:0d:a5:8f:2a:b4:32:f8:
                    fb:23:76:45:a3:a9:4c:e1:8f:a0:19:cc:59:cc:6a:
                    8a:18:d8:aa:47:1f:61:dc:ca:fb:f7:ab:29:84:00:
                    f3:90:6f:12:86:f9:88:04:e2:b5:33:92:50:c1:21:
                    af:3c:25:3a:70:b9:b6:63:75:61:45:34:dc:95:df:
                    40:e4:3e:5a:61:d6:45:f4:4f:20:01:06:85:ec:dc:
                    7c:0e:9d:6e:cd:c0:93:cb:5e:75:c0:99:85:b8:e7:
                    05:f9:39:de:c8:a6:37:8d:c7:09:4d:5d:65:7a:8a:
                    99:d5:e0:62:71:65:3f:0d:99:7c:67:8f:01:93:75:
                    2f:71:85:af:8c:a1:27:52:d6:5d:a7:21:68:e6:8c:
                    aa:5e:42:cf:06:e0:f6:a3:81:96:5a:16:f7:54:37:
                    94:e1:22:53:9c:41:0d:42:2c:16:78:af:7c:0f:99:
                    74:10:d9:88:38:0b:2b:17:ef:25:78:c8:b0:8c:35:
                    ec:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:AB:86:4B:70:4D:07:D1:BF:37:52:0B:22:83:9B:AC:D7:F0:FE:90
            X509v3 Authority Key Identifier:
                keyid:31:AE:16:F2:8B:CA:EE:B3:D5:1A:3C:45:A3:18:CE:9A:75:FA:6E:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/0/31AE16F28BCAEEB3D51A3C45A318CE9A75FA6E69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/31AE16F28BCAEEB3D51A3C45A318CE9A75FA6E69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/0/323830343a386135633a383030303a3a2f33332d3333203d3e20323733363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a5c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         c2:b6:c4:a0:23:a9:24:7e:d7:d6:e3:f3:64:38:6e:b5:95:20:
         e7:47:6f:e9:de:03:f4:73:25:f2:4c:56:3e:21:9a:44:58:36:
         4b:44:11:74:61:e8:52:f6:91:b6:21:ca:da:ed:9f:fa:d6:b7:
         56:df:65:90:e9:e5:75:b9:da:c1:8f:98:f0:a3:4a:f0:e3:31:
         5c:c2:2d:85:9a:17:12:d5:c3:83:eb:6a:4c:75:88:5b:ee:ce:
         4a:54:d2:94:63:59:2a:57:3f:c8:68:ba:38:21:92:c3:ba:0f:
         de:51:f4:24:fa:41:b8:d6:1f:83:93:38:e4:0b:ae:de:c6:17:
         c3:50:98:83:4d:31:2c:0f:35:b3:fd:cb:f0:b2:c4:79:7f:42:
         87:b9:92:fb:34:72:ea:d5:72:d7:d4:e9:37:71:87:ad:f4:7a:
         f6:02:ba:9c:06:0b:37:1b:79:cb:ed:a9:16:85:2a:d8:11:88:
         c4:52:c6:f9:3c:3e:c1:5a:f8:90:18:89:1c:1a:c3:79:35:98:
         70:d5:94:21:9f:67:e7:9e:04:3f:dc:17:42:c0:da:14:88:0e:
         c1:1d:52:db:79:88:64:bd:01:c9:57:e8:8c:80:05:12:66:9f:
         e8:c1:65:d0:bb:2d:c5:5e:6c:40:3f:46:19:ca:fc:04:99:07:
         28:0b:a0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----