Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BWQYQjGeR5orB8ZAFbnAeWUVyjwkUnjKMaUX3UxeYPC5/0/323830343a323933633a3a2f33322d3438203d3e20323634303035.roa
File:                     323830343a323933633a3a2f33322d3438203d3e20323634303035.roa (raw, json)
Hash identifier:          CMclamYm60DaTc80RlL+uJvCoepD7J0q/sI04gK8ACg=
Subject key identifier:   6E:CF:CA:52:B7:AE:C8:4C:0A:2B:AC:3A:18:CF:C1:45:9F:28:6F:EA
Certificate issuer:       /CN=86F4F5F3F82C697369F8DC3463D628990698CCBA
Certificate serial:       11D33A46E64D5B208A0A394E566BB0188AF66DBC
Authority key identifier: 86:F4:F5:F3:F8:2C:69:73:69:F8:DC:34:63:D6:28:99:06:98:CC:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86F4F5F3F82C697369F8DC3463D628990698CCBA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BWQYQjGeR5orB8ZAFbnAeWUVyjwkUnjKMaUX3UxeYPC5/0/323830343a323933633a3a2f33322d3438203d3e20323634303035.roa
Signing time:             Thu 17 Aug 2023 16:26:01 +0000
ROA not before:           Thu 17 Aug 2023 16:21:01 +0000
ROA not after:            Thu 15 Aug 2024 16:26:01 +0000
asID:                     264005
IP address blocks:        2804:293c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:d3:3a:46:e6:4d:5b:20:8a:0a:39:4e:56:6b:b0:18:8a:f6:6d:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86F4F5F3F82C697369F8DC3463D628990698CCBA
        Validity
            Not Before: Aug 17 16:21:01 2023 GMT
            Not After : Aug 15 16:26:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c9:b6:6a:5e:c1:c0:b8:2b:40:7b:c1:25:33:
                    99:72:0e:a2:b9:d0:fb:27:16:a1:cd:66:58:11:63:
                    ce:55:0e:bf:40:b9:c3:db:9e:56:dc:35:cb:43:d4:
                    d3:8e:b8:d8:d8:0b:55:5a:db:7f:da:74:07:f3:4b:
                    ed:b6:10:f4:fa:87:f6:f2:73:77:12:81:b8:8b:04:
                    e4:ab:fd:d3:b3:5c:3f:6a:50:e7:5e:5f:a4:91:30:
                    99:12:72:71:bf:3a:65:3c:c5:5a:2b:83:8b:c1:04:
                    61:6b:33:d4:6a:3a:ac:60:0b:88:b1:6b:f3:78:59:
                    55:47:8f:38:21:03:c1:48:bc:70:60:ff:b0:76:3e:
                    0e:b8:3b:8b:b8:3e:a2:f3:de:60:56:53:a4:6f:9c:
                    2b:eb:60:81:25:03:d7:db:88:66:b5:42:5e:12:0e:
                    a9:6b:be:21:99:ad:49:6b:42:86:61:e8:8c:ee:c0:
                    96:c0:dd:33:fa:66:4c:ac:66:7b:d9:60:30:b0:0c:
                    05:14:7e:84:d7:4a:ad:82:4f:46:3f:20:f5:63:6e:
                    d1:66:5c:82:35:62:77:d6:5c:c9:22:64:de:c3:52:
                    2b:e2:1a:8b:ad:22:43:e7:bd:70:54:1f:51:77:f4:
                    be:51:1a:fc:82:60:cf:ab:7e:bb:da:52:bf:f0:1a:
                    d3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:CF:CA:52:B7:AE:C8:4C:0A:2B:AC:3A:18:CF:C1:45:9F:28:6F:EA
            X509v3 Authority Key Identifier:
                keyid:86:F4:F5:F3:F8:2C:69:73:69:F8:DC:34:63:D6:28:99:06:98:CC:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BWQYQjGeR5orB8ZAFbnAeWUVyjwkUnjKMaUX3UxeYPC5/0/86F4F5F3F82C697369F8DC3463D628990698CCBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86F4F5F3F82C697369F8DC3463D628990698CCBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BWQYQjGeR5orB8ZAFbnAeWUVyjwkUnjKMaUX3UxeYPC5/0/323830343a323933633a3a2f33322d3438203d3e20323634303035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:293c::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:89:d7:2c:73:c9:6b:63:91:c9:bc:e1:2a:c0:47:4a:c4:02:
         b4:c0:aa:ee:18:a2:93:2e:7d:a7:06:81:86:83:57:7c:29:10:
         17:03:dc:7b:f6:d0:f4:21:eb:d7:ad:bf:5d:9d:48:ea:f2:b3:
         2b:ca:02:ea:82:00:57:ea:c8:4b:24:d6:7b:a6:0e:dd:5f:f6:
         61:c6:be:49:06:cf:1b:d0:02:a4:d2:1d:c9:66:e7:c6:b3:2a:
         d7:35:00:ac:fc:d3:19:bd:2e:63:94:6a:a0:88:f2:cd:9e:d6:
         d8:32:9d:53:c2:ca:f5:c4:d6:a1:2d:07:cc:ad:b8:cc:07:18:
         b0:b5:d8:88:70:8e:7d:0a:0c:88:9c:6b:16:a1:48:65:5c:d9:
         4d:ff:7b:28:3c:fc:52:7f:35:01:6d:0d:70:e2:06:0c:1a:a2:
         59:e7:9f:9c:f5:fc:10:f3:b0:dd:55:44:52:3a:c4:99:cd:c6:
         53:16:75:37:41:92:b2:2d:ca:37:29:1f:09:e1:4f:46:bb:bb:
         bd:af:07:79:7f:6b:e4:0f:40:a9:37:8a:69:2b:1d:ef:75:31:
         f6:8c:1a:c0:26:32:22:19:9a:61:e8:a8:fe:cf:4c:29:97:74:
         a5:ee:47:5b:68:9b:d2:79:da:8c:af:06:66:71:2a:25:f7:88:
         32:60:cb:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----