Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/323830343a326162633a3a2f33332d313238203d3e20323634303931.roa
File:                     323830343a326162633a3a2f33332d313238203d3e20323634303931.roa (raw, json)
Hash identifier:          UyPbmH/LCNemyurVUpGfcD8urT8a7jKBCLhNUkJ9izM=
Subject key identifier:   08:2C:65:4B:E8:B5:8F:46:8A:E7:39:4C:88:A3:25:26:2F:80:C3:8B
Certificate issuer:       /CN=E5F0271EE77B00E3F2BA75BEEAE90D557A4E3102
Certificate serial:       0B89C6B0C644948A0B4E7533CB0F611DE8DD220E
Authority key identifier: E5:F0:27:1E:E7:7B:00:E3:F2:BA:75:BE:EA:E9:0D:55:7A:4E:31:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5F0271EE77B00E3F2BA75BEEAE90D557A4E3102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/323830343a326162633a3a2f33332d313238203d3e20323634303931.roa
Signing time:             Thu 21 Mar 2024 19:51:06 +0000
ROA not before:           Thu 21 Mar 2024 19:46:06 +0000
ROA not after:            Thu 20 Mar 2025 19:51:06 +0000
asID:                     264091
IP address blocks:        2804:2abc::/33 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:89:c6:b0:c6:44:94:8a:0b:4e:75:33:cb:0f:61:1d:e8:dd:22:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5F0271EE77B00E3F2BA75BEEAE90D557A4E3102
        Validity
            Not Before: Mar 21 19:46:06 2024 GMT
            Not After : Mar 20 19:51:06 2025 GMT
        Subject: CN=082C654BE8B58F468AE7394C88A325262F80C38B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ad:fb:cf:9b:07:11:c7:7a:7d:06:63:af:a5:
                    90:bc:e4:4d:91:3f:d6:88:6e:db:df:50:d0:3a:e7:
                    34:46:94:19:81:51:08:18:a2:39:ba:fa:56:e6:5a:
                    46:fe:e8:f6:ba:d9:45:87:88:f6:6e:8d:d8:b7:92:
                    00:41:c8:23:9a:5a:00:c9:98:65:61:df:ff:f4:0f:
                    56:f6:f5:fd:48:1c:fb:a3:79:58:44:3f:f7:18:87:
                    ee:6b:9c:cb:ef:2e:28:ab:06:fc:fc:7a:cd:0a:15:
                    77:d9:ab:bb:b6:72:61:8f:23:d4:c0:87:75:ad:07:
                    fe:b3:6e:a4:1d:a1:ca:97:f9:37:13:63:3e:ae:e7:
                    c3:74:17:1d:6e:22:08:75:c1:02:53:90:03:2b:ca:
                    76:e8:39:65:26:30:0e:06:e5:42:36:99:58:68:d2:
                    72:81:31:86:16:a3:ce:79:c0:58:44:6c:64:18:ce:
                    ca:a1:13:a9:19:7f:27:8c:0a:1b:eb:36:9a:5c:87:
                    91:8c:50:06:a6:bb:61:f3:22:e4:d2:85:c8:41:66:
                    1f:f4:87:b8:8a:e7:7e:a9:7d:d2:a7:b8:5a:b7:03:
                    c6:2d:2a:d6:ad:5f:8e:ac:3e:8a:1c:c0:2a:e9:2a:
                    aa:b8:f4:66:e2:67:d0:d6:6a:d1:90:cd:46:7f:f5:
                    5a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:2C:65:4B:E8:B5:8F:46:8A:E7:39:4C:88:A3:25:26:2F:80:C3:8B
            X509v3 Authority Key Identifier:
                keyid:E5:F0:27:1E:E7:7B:00:E3:F2:BA:75:BE:EA:E9:0D:55:7A:4E:31:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/E5F0271EE77B00E3F2BA75BEEAE90D557A4E3102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5F0271EE77B00E3F2BA75BEEAE90D557A4E3102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/323830343a326162633a3a2f33332d313238203d3e20323634303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2abc::/33

    Signature Algorithm: sha256WithRSAEncryption
         bf:8b:fe:7c:f6:8e:96:30:f0:37:b7:9a:69:e2:de:95:3f:63:
         bf:ae:ca:c8:a3:1d:0c:4a:ef:11:08:b5:f0:ac:bb:c6:f0:4b:
         31:0c:23:6d:f4:3c:aa:a5:7f:2b:18:fb:85:61:8a:b4:c2:e7:
         25:2f:ed:c2:df:da:f7:9e:4b:f5:85:bf:a9:74:ab:b9:db:d6:
         d9:5f:39:72:2e:f3:e8:97:7d:b5:42:87:ed:6d:a1:f7:67:03:
         b1:62:10:92:1b:a2:8c:1a:30:82:41:28:75:8d:16:ea:e5:4f:
         c4:a3:2a:d3:83:21:17:4e:0e:67:b4:e8:f3:8c:d2:12:97:39:
         bf:96:07:03:d9:4d:e1:25:1e:c3:90:bf:b6:72:64:be:e1:01:
         96:10:cd:86:f5:17:8f:41:31:6f:d7:4e:49:03:f9:76:c4:04:
         7f:fa:f1:e1:dd:ae:d5:ad:f2:cc:53:4a:0d:9c:56:5f:60:59:
         09:ae:e0:a4:3e:4d:bf:a3:ab:20:90:49:f0:bd:83:f2:a9:d5:
         b2:50:74:f6:00:77:79:38:34:10:2f:ec:34:d8:06:da:0a:34:
         28:87:5e:b1:3b:23:c6:4e:ea:9b:36:33:67:ef:cb:c7:7c:22:
         3f:02:aa:80:97:3c:f6:6a:64:9e:0d:7b:cb:0f:73:3c:85:3a:
         46:60:48:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----