Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ASipeTL7apH2NCaHUJ3Nu7heXcouCsMxT6vcujqwUcMi/0/323830343a386163343a3a2f33322d3438203d3e20323733363931.roa
File:                     323830343a386163343a3a2f33322d3438203d3e20323733363931.roa (raw, json)
Hash identifier:          oK2IVdi9xjuZ9eFgBW3sQBhB2eM4mAB+jQgnx9qoups=
Subject key identifier:   F5:F9:B8:F3:93:BB:8B:2F:59:4D:CA:12:55:04:1E:7C:D2:A8:8B:64
Certificate issuer:       /CN=E8A7437AF4AE5C7941AC3596DC385F13E6034DAD
Certificate serial:       045F1517DBC5C93A770BEB03F1C557D0D77DF11D
Authority key identifier: E8:A7:43:7A:F4:AE:5C:79:41:AC:35:96:DC:38:5F:13:E6:03:4D:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8A7437AF4AE5C7941AC3596DC385F13E6034DAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ASipeTL7apH2NCaHUJ3Nu7heXcouCsMxT6vcujqwUcMi/0/323830343a386163343a3a2f33322d3438203d3e20323733363931.roa
Signing time:             Thu 08 Feb 2024 12:55:42 +0000
ROA not before:           Thu 08 Feb 2024 12:50:42 +0000
ROA not after:            Thu 06 Feb 2025 12:55:42 +0000
asID:                     273691
IP address blocks:        2804:8ac4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:5f:15:17:db:c5:c9:3a:77:0b:eb:03:f1:c5:57:d0:d7:7d:f1:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8A7437AF4AE5C7941AC3596DC385F13E6034DAD
        Validity
            Not Before: Feb  8 12:50:42 2024 GMT
            Not After : Feb  6 12:55:42 2025 GMT
        Subject: CN=F5F9B8F393BB8B2F594DCA1255041E7CD2A88B64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:58:dd:c2:bd:03:15:13:f8:d3:37:9a:ec:a8:
                    fc:4d:78:ab:68:a1:09:e0:6a:a8:4f:02:85:4b:93:
                    3f:6e:ce:9b:6b:82:a1:14:c8:c9:3c:29:f2:13:07:
                    e2:84:6a:ec:e9:ce:13:36:aa:65:1e:90:b4:3a:49:
                    a5:db:f5:cb:9e:3c:de:f5:5c:50:09:db:26:74:b7:
                    df:55:75:a8:92:ce:2c:22:b5:01:06:f7:55:34:d6:
                    09:52:23:0a:e7:c5:3d:33:b4:c9:ea:b9:10:8e:35:
                    2a:43:fc:e2:b9:a9:3e:6c:9e:45:60:ac:2e:d7:cc:
                    49:75:df:04:a6:b3:1b:b7:42:c8:f3:4f:b1:1d:60:
                    11:53:aa:c7:ce:bf:b5:26:ce:70:cd:01:09:1d:60:
                    30:ad:ea:a0:75:76:49:0f:7c:c9:95:40:a0:96:fb:
                    40:d1:72:f0:2f:93:87:ba:fd:bb:f4:2c:58:52:5d:
                    f8:d3:50:75:7d:59:9c:3f:c6:59:99:fb:5b:61:64:
                    ba:bc:c0:da:6d:47:55:12:5d:2f:73:a8:03:af:85:
                    2e:3c:bb:bb:70:22:ee:d6:46:68:fa:28:bc:14:28:
                    d6:e8:62:bb:79:2d:91:00:63:19:88:6f:0f:12:d5:
                    1c:20:f4:dd:04:c3:76:2f:e2:ec:ec:ce:d8:07:85:
                    b7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F9:B8:F3:93:BB:8B:2F:59:4D:CA:12:55:04:1E:7C:D2:A8:8B:64
            X509v3 Authority Key Identifier:
                keyid:E8:A7:43:7A:F4:AE:5C:79:41:AC:35:96:DC:38:5F:13:E6:03:4D:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ASipeTL7apH2NCaHUJ3Nu7heXcouCsMxT6vcujqwUcMi/0/E8A7437AF4AE5C7941AC3596DC385F13E6034DAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8A7437AF4AE5C7941AC3596DC385F13E6034DAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ASipeTL7apH2NCaHUJ3Nu7heXcouCsMxT6vcujqwUcMi/0/323830343a386163343a3a2f33322d3438203d3e20323733363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ac4::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:84:f3:bc:96:11:7f:d1:bd:6f:7d:b5:87:90:0b:62:7f:b1:
         47:39:7f:54:c0:30:99:34:42:68:50:81:70:52:7e:e1:66:a3:
         e7:ef:7e:2e:54:c0:88:e4:dd:88:66:ff:f1:82:2f:b0:1b:64:
         ff:65:be:f6:4f:51:05:97:51:f8:81:46:4a:e0:a0:a2:ff:b6:
         93:84:5d:8a:fc:55:01:f1:0e:cb:38:75:41:15:19:a4:b9:a0:
         dc:40:67:0b:c9:3e:af:b5:04:d0:83:a7:3d:1b:46:44:17:68:
         bc:b5:38:0c:28:47:bd:e8:22:4b:5c:d5:6a:db:bf:17:d5:ec:
         62:08:95:0c:46:17:32:5d:da:82:8c:71:e9:70:86:1b:d0:56:
         b6:ec:d4:a5:97:d6:21:af:88:01:c8:12:5a:f9:40:1f:50:fa:
         ee:ca:60:a6:0b:01:f7:11:d1:a9:5f:ba:4f:b2:21:8a:3d:4a:
         0c:94:49:2e:b8:8e:f9:14:83:1e:1a:bf:1d:e1:4d:28:8c:fa:
         f0:c4:b3:fb:2d:62:39:fd:6a:f7:e3:d5:68:25:e3:25:2e:71:
         e9:30:a6:44:36:6b:6c:53:df:da:d6:d1:a0:1e:b2:cd:bd:40:
         c0:87:43:18:c1:2c:c3:cb:3e:7f:24:c7:fe:77:3f:5a:25:4c:
         ad:dc:73:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----