Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BUFbugTBqSv2cQYDnL9dzn192cMLX1MBYPkiBDecoVRM/0/323830343a363332633a3a2f33322d3438203d3e20323639333433.roa
File:                     323830343a363332633a3a2f33322d3438203d3e20323639333433.roa (raw, json)
Hash identifier:          i9kOrC/QCeb9JjEG25Rb+Csd/AwujvCfFvgdZia8H74=
Subject key identifier:   B4:61:7C:A3:A8:2D:AD:73:4D:82:8C:F5:BC:AF:EB:FD:23:62:32:1F
Certificate issuer:       /CN=5AE72D5BF2F268D9B2E465B549705E334171A62A
Certificate serial:       2004C90FBEFF73A3594AF84AE3DFC2890283A5B0
Authority key identifier: 5A:E7:2D:5B:F2:F2:68:D9:B2:E4:65:B5:49:70:5E:33:41:71:A6:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AE72D5BF2F268D9B2E465B549705E334171A62A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BUFbugTBqSv2cQYDnL9dzn192cMLX1MBYPkiBDecoVRM/0/323830343a363332633a3a2f33322d3438203d3e20323639333433.roa
Signing time:             Fri 20 Oct 2023 08:31:10 +0000
ROA not before:           Fri 20 Oct 2023 08:26:10 +0000
ROA not after:            Fri 18 Oct 2024 08:31:10 +0000
asID:                     269343
IP address blocks:        2804:632c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:04:c9:0f:be:ff:73:a3:59:4a:f8:4a:e3:df:c2:89:02:83:a5:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AE72D5BF2F268D9B2E465B549705E334171A62A
        Validity
            Not Before: Oct 20 08:26:10 2023 GMT
            Not After : Oct 18 08:31:10 2024 GMT
        Subject: CN=B4617CA3A82DAD734D828CF5BCAFEBFD2362321F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:29:36:39:d5:8b:5f:ab:6d:e7:30:4a:9c:b1:
                    62:84:ad:9d:6b:37:c7:c4:7c:7d:6c:3a:5d:13:97:
                    09:5f:46:4b:84:ab:a2:20:74:a2:0b:de:40:a2:b4:
                    5f:d0:b0:b2:0e:44:8a:7e:33:89:e9:d0:63:7a:b7:
                    cd:7f:5b:ba:e5:49:bf:0b:32:5f:9e:84:e0:ef:19:
                    4e:6d:74:4a:9f:7d:54:32:21:f0:38:77:a7:88:ee:
                    2c:6b:37:fc:92:9f:2e:50:93:8d:fb:67:ef:de:68:
                    46:8e:d5:d9:02:69:f4:2b:19:7b:98:8d:97:3b:6a:
                    1f:7a:d5:59:39:97:4d:e7:22:48:b9:80:86:f4:23:
                    5d:c5:0c:11:53:29:7c:91:ee:52:2c:f9:31:68:b5:
                    54:1f:17:60:67:6c:e4:2e:97:4a:81:0f:ef:ab:18:
                    03:ec:92:30:0b:84:f3:28:78:86:0e:6a:89:88:ce:
                    6a:15:de:a3:38:5a:1f:6f:85:4c:88:52:38:15:62:
                    da:6b:da:61:fa:94:71:0f:38:bf:b4:ea:2c:01:03:
                    99:2b:50:f7:19:62:43:15:8a:c7:3d:51:19:f3:3c:
                    8d:de:0c:cf:ac:e8:e2:79:24:f7:8c:cf:4d:60:6e:
                    ae:b5:a6:54:9f:15:54:90:3f:87:11:1d:f9:e3:8e:
                    51:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:61:7C:A3:A8:2D:AD:73:4D:82:8C:F5:BC:AF:EB:FD:23:62:32:1F
            X509v3 Authority Key Identifier:
                keyid:5A:E7:2D:5B:F2:F2:68:D9:B2:E4:65:B5:49:70:5E:33:41:71:A6:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BUFbugTBqSv2cQYDnL9dzn192cMLX1MBYPkiBDecoVRM/0/5AE72D5BF2F268D9B2E465B549705E334171A62A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AE72D5BF2F268D9B2E465B549705E334171A62A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BUFbugTBqSv2cQYDnL9dzn192cMLX1MBYPkiBDecoVRM/0/323830343a363332633a3a2f33322d3438203d3e20323639333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:632c::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:a5:ea:c6:1e:8c:c3:58:5b:01:a3:8c:4f:e0:e6:75:62:37:
         c8:9e:a9:29:ba:1e:95:ab:5a:d0:1c:5d:2d:29:46:f9:01:48:
         c9:eb:1e:10:27:e1:2d:a0:e3:4c:82:49:1d:4e:c2:6d:80:b5:
         5c:b1:5c:6e:6b:18:f7:0c:9e:d7:8e:ba:44:52:7b:39:1a:f2:
         04:56:aa:fe:c5:d7:73:28:90:bf:35:d5:dc:5c:b2:0e:9d:15:
         e8:28:ec:c0:e1:e7:28:75:14:ee:ec:f2:82:25:9b:6e:b4:ec:
         05:5b:cf:df:f1:66:1d:0b:85:81:1a:6e:7b:27:f6:9d:16:43:
         13:18:9b:01:b3:5f:04:71:5f:26:f0:6d:16:33:6c:6e:bb:d4:
         e0:99:eb:0b:ab:b3:7e:5e:77:3e:59:e3:4e:8f:cf:37:e3:c9:
         cf:a4:3b:12:96:bd:1c:3a:56:db:d6:e7:cb:fc:27:f0:a9:59:
         50:d0:b0:b6:88:3f:b9:d4:b7:13:9e:f6:dc:49:65:fa:cc:e4:
         1b:a7:bf:c7:54:b4:f1:fc:74:47:0d:f0:c1:b1:5c:cb:b7:8e:
         59:7d:bb:88:15:5c:f4:70:48:cc:02:13:e8:54:2b:61:09:85:
         9d:bd:26:4f:3e:7f:cc:9e:9a:5e:a6:6b:62:6f:84:e1:fa:5d:
         18:24:61:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----