Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bad3nK4i3jvPmNFbV3Js5nCtTgbAGrBG1upiTnVaR96y/0/323830343a356335383a3a2f33322d313238203d3e20323638393033.roa
File:                     323830343a356335383a3a2f33322d313238203d3e20323638393033.roa (raw, json)
Hash identifier:          20LQ/Eh+qBYE21a8B4Ekj06Nfszi35cJ43sT0Tu3CVs=
Subject key identifier:   2B:97:61:9E:46:33:80:BC:B9:57:9F:2D:9E:F3:23:97:8E:E7:69:8E
Certificate issuer:       /CN=8F2560C554C1178E2CF5C57F4B74A54A6C826DC8
Certificate serial:       559998826FFE5241B0138A14D511814C2DE0817E
Authority key identifier: 8F:25:60:C5:54:C1:17:8E:2C:F5:C5:7F:4B:74:A5:4A:6C:82:6D:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F2560C554C1178E2CF5C57F4B74A54A6C826DC8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bad3nK4i3jvPmNFbV3Js5nCtTgbAGrBG1upiTnVaR96y/0/323830343a356335383a3a2f33322d313238203d3e20323638393033.roa
Signing time:             Tue 30 Jan 2024 15:08:50 +0000
ROA not before:           Tue 30 Jan 2024 15:03:50 +0000
ROA not after:            Tue 28 Jan 2025 15:08:50 +0000
asID:                     268903
IP address blocks:        2804:5c58::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:99:98:82:6f:fe:52:41:b0:13:8a:14:d5:11:81:4c:2d:e0:81:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F2560C554C1178E2CF5C57F4B74A54A6C826DC8
        Validity
            Not Before: Jan 30 15:03:50 2024 GMT
            Not After : Jan 28 15:08:50 2025 GMT
        Subject: CN=2B97619E463380BCB9579F2D9EF323978EE7698E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2d:24:37:bc:82:5e:55:4c:3b:aa:d6:ae:8c:
                    33:d7:03:9b:ec:10:a6:e3:e3:9b:9c:e2:a9:84:b7:
                    0f:d5:23:c8:56:f2:82:56:80:4c:a3:18:9d:6f:8e:
                    60:d9:ab:46:d3:8b:df:c9:bb:9b:4b:f2:07:1c:70:
                    85:0e:d1:a5:c8:c3:c5:ff:3d:b5:05:61:e0:c0:e4:
                    40:9b:3f:71:d9:80:d1:ed:55:7f:d1:96:5f:6e:e5:
                    66:2d:c2:4e:a7:bd:46:eb:3c:23:6e:f1:3e:92:be:
                    65:cc:a5:5f:fd:1d:d1:6f:99:e9:bf:1b:0c:88:ae:
                    96:44:5e:b6:ef:43:bd:fa:08:bb:d5:3c:31:9d:64:
                    bd:da:2b:4d:f5:64:5f:5c:24:f6:87:df:68:96:5d:
                    01:21:69:fb:0c:8b:a1:b8:74:f7:58:c8:1c:55:99:
                    8e:c2:0c:d1:ef:da:97:d0:14:6e:59:2a:5a:1b:da:
                    c3:4e:9c:37:40:ab:aa:ee:21:81:a1:9a:86:d6:1c:
                    dd:49:26:2a:07:6c:5f:ab:f6:95:2d:f1:4b:41:a2:
                    e3:b2:dc:f3:85:14:53:41:8c:32:05:8a:f2:7a:b0:
                    70:32:87:fa:7d:ac:eb:11:ce:cb:c2:b2:41:9b:a0:
                    15:0e:e7:24:3d:68:79:93:b7:d8:5b:a3:5c:9a:eb:
                    9b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:97:61:9E:46:33:80:BC:B9:57:9F:2D:9E:F3:23:97:8E:E7:69:8E
            X509v3 Authority Key Identifier:
                keyid:8F:25:60:C5:54:C1:17:8E:2C:F5:C5:7F:4B:74:A5:4A:6C:82:6D:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bad3nK4i3jvPmNFbV3Js5nCtTgbAGrBG1upiTnVaR96y/0/8F2560C554C1178E2CF5C57F4B74A54A6C826DC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F2560C554C1178E2CF5C57F4B74A54A6C826DC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bad3nK4i3jvPmNFbV3Js5nCtTgbAGrBG1upiTnVaR96y/0/323830343a356335383a3a2f33322d313238203d3e20323638393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5c58::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:c9:43:94:c9:12:1e:a6:40:d3:86:38:56:dd:49:4e:c3:00:
         15:a0:6d:b4:d8:9b:e8:69:66:2f:90:fd:f0:66:21:9f:f0:21:
         26:5c:20:7b:c5:cf:46:6d:b9:f2:95:06:1c:fb:a3:9d:a7:5c:
         4b:05:9e:b8:56:9d:10:d8:ae:72:92:15:32:54:a3:8f:09:17:
         cc:6b:53:fc:e3:a9:e9:bd:65:52:f8:36:09:ed:7a:ca:16:07:
         58:46:46:75:f2:12:43:47:d6:a9:b7:01:93:26:9a:d1:4c:ed:
         50:68:68:9b:a4:92:23:f1:5c:04:b8:44:a2:a4:97:9b:46:18:
         a7:9b:8b:3e:f5:7d:a7:23:c8:36:79:b1:66:5a:c0:e0:6e:0e:
         19:24:27:9f:9c:61:3c:bf:33:d1:56:66:d3:31:11:9f:da:a6:
         ed:91:8f:79:93:79:94:56:0d:81:f6:e9:3c:14:a0:b2:0b:76:
         3b:a0:b3:05:a3:e4:80:15:b4:99:3f:9d:ad:b1:ab:18:29:f9:
         8f:29:5e:56:ff:7d:66:be:9e:b0:eb:34:fd:12:79:bb:42:36:
         52:07:2a:e5:b2:7c:6e:c1:3d:36:43:f5:dc:c7:c6:26:b5:fb:
         3f:c4:12:56:4e:45:d9:de:62:e8:4c:80:84:b5:4b:ea:d6:c7:
         4e:a7:8b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----