Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a633030303a3a2f33352d3335203d3e203631363337.roa
File:                     323830343a316331383a633030303a3a2f33352d3335203d3e203631363337.roa (raw, json)
Hash identifier:          1mk4iIjL4YVexVmvDFHiNpjFl/AfkHUAEBdB3uU3QN0=
Subject key identifier:   86:91:65:49:C7:DE:A4:87:80:F2:F7:4C:4E:CE:F3:B6:B8:11:4C:92
Certificate issuer:       /CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
Certificate serial:       5EC28B68C6FB968AF816CC414FA6BBD267D80621
Authority key identifier: 59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a633030303a3a2f33352d3335203d3e203631363337.roa
Signing time:             Fri 23 Feb 2024 20:36:54 +0000
ROA not before:           Fri 23 Feb 2024 20:31:54 +0000
ROA not after:            Fri 21 Feb 2025 20:36:54 +0000
asID:                     61637
IP address blocks:        2804:1c18:c000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:c2:8b:68:c6:fb:96:8a:f8:16:cc:41:4f:a6:bb:d2:67:d8:06:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
        Validity
            Not Before: Feb 23 20:31:54 2024 GMT
            Not After : Feb 21 20:36:54 2025 GMT
        Subject: CN=86916549C7DEA48780F2F74C4ECEF3B6B8114C92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7c:67:c5:6c:f2:d0:3e:48:76:46:ea:0c:db:
                    a2:d3:3a:8d:43:d7:60:90:a6:44:6e:d1:7a:6d:df:
                    b6:ae:d8:06:2a:73:a5:99:d6:69:ca:c8:07:86:16:
                    73:67:06:ab:ce:a7:fa:55:f4:56:d3:2a:83:85:2b:
                    30:ca:0e:40:87:5d:7f:4a:32:ec:d4:4f:12:6f:a7:
                    58:bd:bb:a6:03:d4:15:8c:8b:f0:82:7b:84:a2:a3:
                    ec:5f:7f:d7:53:58:cd:8a:c2:26:96:08:80:f2:63:
                    6e:49:c6:5c:8d:f1:8d:3d:ba:3d:e5:d7:ab:85:b6:
                    74:90:fe:d8:75:57:5f:d0:9e:5d:22:e3:a7:2d:81:
                    0f:18:f6:84:e9:86:fe:56:33:a2:6d:de:98:3e:56:
                    0c:b1:1a:a3:03:55:e5:94:aa:e4:a6:bc:9f:90:c9:
                    f2:7a:c1:df:d0:5d:fb:ea:c3:0a:79:d0:3d:48:f6:
                    5c:18:78:3b:be:69:08:d9:cd:e5:a4:ef:8b:c3:cf:
                    ec:32:6f:b8:f8:48:9a:27:05:38:95:e3:6f:c4:72:
                    22:9f:20:e0:3f:73:00:64:67:d4:7b:6c:80:07:05:
                    ba:32:96:7d:96:fc:78:11:a4:9d:3f:fc:11:9b:ca:
                    de:4f:cc:88:98:bb:2f:10:67:ed:11:e4:39:f1:d4:
                    82:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:91:65:49:C7:DE:A4:87:80:F2:F7:4C:4E:CE:F3:B6:B8:11:4C:92
            X509v3 Authority Key Identifier:
                keyid:59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a633030303a3a2f33352d3335203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         65:f9:16:2e:e7:b9:38:32:86:94:bc:29:a7:f7:b2:7c:28:de:
         b6:c7:e6:80:94:18:0e:14:f9:82:ea:55:9c:2e:b5:01:8b:56:
         65:57:8e:52:78:63:b4:8f:b6:89:9f:4e:ab:d0:61:6e:b5:4c:
         3d:5d:a1:15:8f:e1:e0:f7:6a:82:4f:31:94:b3:8a:36:39:53:
         9c:35:f1:a3:f9:dc:d8:ef:48:69:31:23:49:c1:08:2b:df:cb:
         ec:50:1c:3a:fc:77:5a:92:50:56:7d:bb:54:b7:45:2e:26:6f:
         73:a8:68:5c:d8:58:38:de:16:00:7c:ee:08:e2:20:25:f4:67:
         20:31:60:8e:29:c4:bf:3c:8f:ac:73:34:79:7f:9a:96:75:02:
         bb:0b:31:01:1b:4a:44:fc:32:42:77:16:d4:71:c8:69:8f:ea:
         6b:6d:7f:bb:0b:76:a7:24:53:42:32:11:0c:35:53:98:97:0d:
         91:79:53:ad:18:89:25:0e:75:65:e1:ca:e4:18:1c:92:6e:94:
         97:58:44:4e:db:3d:f5:33:41:4d:f5:86:b7:ce:17:d8:b6:f6:
         eb:42:4f:f5:2e:d6:76:e0:69:e1:92:76:14:2a:38:a0:45:7a:
         f4:58:72:f4:f6:a5:e3:7a:b9:69:48:a7:4f:2e:f4:2c:95:f9:
         9d:53:a3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----