Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BQndqqMYps4SzyeKamUPGnM7zjXMBHZRizhWkFXYpmPf/0/323830343a356138343a3a2f33322d3332203d3e20323638373739.roa
File:                     323830343a356138343a3a2f33322d3332203d3e20323638373739.roa (raw, json)
Hash identifier:          OPkg93o/5sxAK87MTocjIVseCh5LNKC6TWCwlVxe3+8=
Subject key identifier:   C0:14:93:52:12:7F:5C:25:5D:22:FA:2D:58:7A:AD:79:7D:8B:31:B6
Certificate issuer:       /CN=AB7D5AB80919646E3C28D3DD43EBF003B21C697B
Certificate serial:       36068A1D829118AD3CF09C4AFB96F605BCF79A8D
Authority key identifier: AB:7D:5A:B8:09:19:64:6E:3C:28:D3:DD:43:EB:F0:03:B2:1C:69:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB7D5AB80919646E3C28D3DD43EBF003B21C697B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BQndqqMYps4SzyeKamUPGnM7zjXMBHZRizhWkFXYpmPf/0/323830343a356138343a3a2f33322d3332203d3e20323638373739.roa
Signing time:             Tue 02 Jan 2024 14:13:54 +0000
ROA not before:           Tue 02 Jan 2024 14:08:54 +0000
ROA not after:            Tue 31 Dec 2024 14:13:54 +0000
asID:                     268779
IP address blocks:        2804:5a84::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:06:8a:1d:82:91:18:ad:3c:f0:9c:4a:fb:96:f6:05:bc:f7:9a:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB7D5AB80919646E3C28D3DD43EBF003B21C697B
        Validity
            Not Before: Jan  2 14:08:54 2024 GMT
            Not After : Dec 31 14:13:54 2024 GMT
        Subject: CN=C0149352127F5C255D22FA2D587AAD797D8B31B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:39:4e:27:07:0f:15:6c:89:93:d6:6b:8a:b1:
                    d0:79:94:75:95:d0:fb:00:e6:53:14:11:8b:a0:70:
                    35:c7:9c:83:8b:1b:c7:51:06:f0:ff:68:96:3e:10:
                    04:34:84:3d:81:75:bd:27:b8:f4:91:56:25:fd:19:
                    76:e1:9e:d6:40:1b:83:6a:22:69:a8:39:50:95:ae:
                    42:2d:c6:77:39:18:8c:4c:e2:a4:3b:48:1f:30:ab:
                    be:e1:f2:03:37:56:8e:55:a7:60:ad:1c:ae:40:e4:
                    f4:a4:5a:22:22:fb:a5:07:b9:82:a6:f8:d2:3d:9c:
                    e2:9d:ef:48:26:f0:06:90:6f:c6:64:11:ea:8d:b1:
                    93:06:b6:03:82:9d:52:7d:e4:f4:c4:a1:cb:05:c0:
                    dd:e3:30:eb:68:fc:e8:06:10:f6:d6:6c:9a:91:ef:
                    e6:02:16:a4:67:ca:d7:fc:dc:bd:8d:7a:22:a1:55:
                    5a:98:22:5a:30:4c:52:f2:93:1b:8f:cf:5a:c9:69:
                    e8:06:a7:9b:bc:44:cb:2d:9e:c1:66:03:0f:84:65:
                    2d:15:64:6b:8a:a1:4a:ff:be:6e:6c:9a:a2:38:41:
                    63:a6:4a:30:4d:e6:70:50:5b:b1:cd:b6:fb:f7:fb:
                    f1:ca:e6:e5:b3:c3:51:c9:15:72:96:6e:ed:1d:24:
                    b7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:14:93:52:12:7F:5C:25:5D:22:FA:2D:58:7A:AD:79:7D:8B:31:B6
            X509v3 Authority Key Identifier:
                keyid:AB:7D:5A:B8:09:19:64:6E:3C:28:D3:DD:43:EB:F0:03:B2:1C:69:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BQndqqMYps4SzyeKamUPGnM7zjXMBHZRizhWkFXYpmPf/0/AB7D5AB80919646E3C28D3DD43EBF003B21C697B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB7D5AB80919646E3C28D3DD43EBF003B21C697B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQndqqMYps4SzyeKamUPGnM7zjXMBHZRizhWkFXYpmPf/0/323830343a356138343a3a2f33322d3332203d3e20323638373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5a84::/32

    Signature Algorithm: sha256WithRSAEncryption
         c3:cc:ba:61:98:e7:ae:3f:69:96:eb:d5:e1:d7:42:ab:d6:99:
         d5:9e:f5:c2:2f:7b:f0:89:bb:f8:9d:ea:68:60:50:ce:b1:2b:
         3e:13:79:4f:d1:85:a5:ec:f4:1c:50:a7:f1:7b:df:c2:9c:55:
         47:70:96:05:84:25:62:22:23:6e:07:0f:c1:0e:72:d4:dc:08:
         02:a1:bf:db:43:58:ec:29:60:87:e2:7d:e9:53:68:c8:5b:ed:
         5d:d1:c4:63:96:50:a4:e4:27:93:5c:de:8a:59:46:3d:d1:24:
         ea:3e:1a:3f:e8:46:17:ad:a5:7d:d9:79:cc:90:b5:53:91:b0:
         58:be:4d:c6:e7:dd:45:d9:5b:90:05:d3:59:32:89:c2:40:d0:
         3a:c5:e9:88:bb:60:ac:1c:91:b2:4f:ee:21:3a:f9:f1:ed:e6:
         df:9c:23:51:35:3e:9d:01:aa:ef:91:bf:17:4b:85:e8:52:52:
         cc:fc:13:e5:0a:4d:d0:0f:0f:0e:2e:a7:64:ff:e4:ed:98:58:
         29:f2:f8:8b:ac:12:6c:fb:51:9d:32:48:81:a6:aa:fb:79:0e:
         34:35:ec:46:09:f6:9e:89:b8:75:63:87:e5:c7:dd:3d:8b:66:
         c0:79:54:f7:d2:94:3f:a4:1c:39:35:65:28:d5:31:62:fc:e1:
         3e:75:6c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----