Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0/323830343a323931633a3a2f33322d3430203d3e20323633393938.roa
File:                     323830343a323931633a3a2f33322d3430203d3e20323633393938.roa (raw, json)
Hash identifier:          X+K2F50KU6fMxcvaYD3huK/BeARAdBJoh1Zhzm+X5dE=
Subject key identifier:   C5:81:D9:F0:18:B1:97:9B:29:63:C2:E5:60:05:71:18:75:73:1D:40
Certificate issuer:       /CN=458B0DFA16A8C630CACC3AE2F4E4CAB234C09299
Certificate serial:       53D4D5DAD5ABB4E795A25F0257E066679914CB6C
Authority key identifier: 45:8B:0D:FA:16:A8:C6:30:CA:CC:3A:E2:F4:E4:CA:B2:34:C0:92:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/458B0DFA16A8C630CACC3AE2F4E4CAB234C09299.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0/323830343a323931633a3a2f33322d3430203d3e20323633393938.roa
Signing time:             Thu 02 Feb 2023 14:01:09 +0000
ROA not before:           Thu 02 Feb 2023 13:56:09 +0000
ROA not after:            Thu 01 Feb 2024 14:01:09 +0000
asID:                     263998
IP address blocks:        2804:291c::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d4:d5:da:d5:ab:b4:e7:95:a2:5f:02:57:e0:66:67:99:14:cb:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458B0DFA16A8C630CACC3AE2F4E4CAB234C09299
        Validity
            Not Before: Feb  2 13:56:09 2023 GMT
            Not After : Feb  1 14:01:09 2024 GMT
        Subject: CN=C581D9F018B1979B2963C2E56005711875731D40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7f:46:b1:16:45:1a:9c:67:a5:da:2f:de:c0:
                    ec:49:ab:cd:c0:fc:b0:2f:23:ca:8f:2c:98:a0:a7:
                    ca:1c:d4:95:e7:d1:fe:98:0a:dc:22:1d:45:43:a1:
                    e8:f3:a1:85:18:94:7c:98:09:88:ab:3b:20:8e:23:
                    71:2e:03:79:64:ff:94:0e:6e:1f:a3:5c:cc:1b:ba:
                    db:c0:70:97:0a:41:af:c1:f2:c5:74:75:cd:96:ce:
                    7d:a6:c5:10:6a:f4:39:32:5e:71:f3:3d:3d:0e:ad:
                    62:fa:eb:06:df:49:78:49:7f:32:63:8d:4b:f9:06:
                    13:05:a5:1e:01:ae:0f:18:cc:f8:ce:35:50:74:c9:
                    9b:c6:49:1b:5f:57:a2:3d:c1:6a:29:04:31:cd:4c:
                    80:87:b1:95:32:dc:6b:bd:c7:67:21:f9:34:7e:cb:
                    89:53:32:b9:ef:72:5e:29:c0:b9:19:94:f3:b9:94:
                    22:19:7f:f2:c4:9f:b7:49:d0:3f:b1:e6:94:18:38:
                    65:1f:36:31:48:20:e7:79:7a:ff:ff:c6:e0:8f:15:
                    4b:c3:dd:97:82:80:00:db:32:3a:cb:d9:22:78:45:
                    b9:f4:7c:78:bb:bd:ef:42:a2:e6:92:df:b3:8e:f0:
                    b0:89:1e:fa:15:c6:9b:d4:1e:c7:c0:5b:64:0e:6b:
                    ce:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:81:D9:F0:18:B1:97:9B:29:63:C2:E5:60:05:71:18:75:73:1D:40
            X509v3 Authority Key Identifier:
                keyid:45:8B:0D:FA:16:A8:C6:30:CA:CC:3A:E2:F4:E4:CA:B2:34:C0:92:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0/458B0DFA16A8C630CACC3AE2F4E4CAB234C09299.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/458B0DFA16A8C630CACC3AE2F4E4CAB234C09299.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0/323830343a323931633a3a2f33322d3430203d3e20323633393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:291c::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:37:c9:cb:df:5b:64:a6:53:84:70:58:f5:be:f3:34:77:2d:
         49:55:5a:e6:a2:a0:a2:e1:7f:f2:64:d4:ad:7c:c3:e7:6d:0b:
         6b:78:1a:0f:b8:c4:82:d0:0a:dd:da:8b:50:a9:6b:24:87:3d:
         d2:b7:95:16:27:60:cc:be:c3:0b:b8:41:8c:34:92:0f:09:a0:
         30:53:8a:24:dc:50:47:b8:f5:55:39:73:ea:fa:12:66:1c:72:
         68:8b:62:1e:8b:81:89:f6:e9:30:48:ff:6b:4c:04:e9:83:ee:
         6b:8d:29:24:fb:b5:7c:ac:58:b6:30:44:b4:a2:fc:f0:56:90:
         62:f1:a1:83:ac:6d:e4:1b:46:ed:b2:e1:23:7c:5f:6b:bd:d8:
         be:6b:bf:52:54:46:7b:7f:c1:b4:7c:27:2a:d3:9c:e2:8c:5d:
         5a:13:fa:a3:42:18:a5:62:6c:f1:07:ce:dc:2c:07:17:6f:9e:
         f2:5f:cc:54:9a:f4:cb:7d:87:37:a7:5f:8b:2a:2f:e5:7b:b0:
         33:06:2f:3f:53:e0:ed:fd:be:52:f1:e3:bb:02:1e:99:c9:32:
         20:f8:3e:59:cd:2e:69:4a:b9:67:40:13:84:32:e2:b3:21:1d:
         47:7d:ac:d1:17:78:a1:33:d3:2a:a5:1a:b5:28:33:3f:01:87:
         fd:38:15:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----