Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dwn9i12M51hSX1ZGCtC74QDHMRQTQc9x2SDhT8YYpzWZ/0/323830343a353066343a633030303a636166653a3a2f36342d3634203d3e20323638343231.roa
File:                     323830343a353066343a633030303a636166653a3a2f36342d3634203d3e20323638343231.roa (raw, json)
Hash identifier:          n64t5DWoqr4F4kN8OMKIhv1R/X+Y/KMzWVXexg3u/Wk=
Subject key identifier:   D2:3D:EC:A5:92:50:E3:73:96:1D:C8:35:25:E3:7D:7E:3E:D8:9A:A9
Certificate issuer:       /CN=CFA5D2D31FF7C5652C6CCC8C08D9F11EF9DECE5E
Certificate serial:       0C1E75501544B59E1799F26ACBE8B5DDF7B4474C
Authority key identifier: CF:A5:D2:D3:1F:F7:C5:65:2C:6C:CC:8C:08:D9:F1:1E:F9:DE:CE:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFA5D2D31FF7C5652C6CCC8C08D9F11EF9DECE5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dwn9i12M51hSX1ZGCtC74QDHMRQTQc9x2SDhT8YYpzWZ/0/323830343a353066343a633030303a636166653a3a2f36342d3634203d3e20323638343231.roa
Signing time:             Mon 22 May 2023 00:31:54 +0000
ROA not before:           Mon 22 May 2023 00:26:54 +0000
ROA not after:            Mon 20 May 2024 00:31:54 +0000
asID:                     268421
IP address blocks:        2804:50f4:c000:cafe::/64 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:1e:75:50:15:44:b5:9e:17:99:f2:6a:cb:e8:b5:dd:f7:b4:47:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFA5D2D31FF7C5652C6CCC8C08D9F11EF9DECE5E
        Validity
            Not Before: May 22 00:26:54 2023 GMT
            Not After : May 20 00:31:54 2024 GMT
        Subject: CN=D23DECA59250E373961DC83525E37D7E3ED89AA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:7c:de:f0:72:1a:41:53:a3:c9:fc:2a:82:ff:
                    98:dc:6e:ae:69:91:cf:1c:9f:82:db:8f:62:58:2b:
                    a0:3e:b3:e5:34:8f:dc:28:c2:22:f5:df:ec:ac:b2:
                    61:37:1d:9e:7e:e4:29:a4:f9:9e:00:71:72:0f:a2:
                    70:44:c8:fb:45:e1:12:78:37:f2:5d:0e:d0:9e:6a:
                    f9:3a:b2:fc:9d:f2:a0:77:0c:56:2d:f8:44:54:f2:
                    0f:e3:03:44:10:37:dd:a8:07:1c:ad:d3:be:86:01:
                    41:b9:8f:6f:11:e1:02:fc:86:16:a1:22:0a:ae:39:
                    fe:66:15:c5:ce:0d:50:b7:53:ae:69:f9:4c:89:a3:
                    22:8f:f9:16:48:77:0e:59:b5:dd:6d:cd:e3:de:d4:
                    ba:4f:3e:aa:ed:0b:db:d4:51:0c:25:4e:30:da:d4:
                    12:4c:48:9f:dd:e2:1f:e4:83:90:34:a5:49:fa:21:
                    23:6c:e7:45:c1:34:74:a1:f9:70:c4:09:da:72:78:
                    39:4e:90:11:2e:27:d7:bd:48:c2:9f:f1:f4:01:17:
                    e9:ff:13:b8:cd:26:9b:85:0f:dc:63:dc:c8:8f:7d:
                    d5:16:c4:bc:c1:df:ee:c6:f8:15:3f:f8:34:28:8f:
                    3c:ba:08:07:bf:81:09:ad:cc:a6:d4:6a:4a:e5:6a:
                    06:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:3D:EC:A5:92:50:E3:73:96:1D:C8:35:25:E3:7D:7E:3E:D8:9A:A9
            X509v3 Authority Key Identifier:
                keyid:CF:A5:D2:D3:1F:F7:C5:65:2C:6C:CC:8C:08:D9:F1:1E:F9:DE:CE:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dwn9i12M51hSX1ZGCtC74QDHMRQTQc9x2SDhT8YYpzWZ/0/CFA5D2D31FF7C5652C6CCC8C08D9F11EF9DECE5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFA5D2D31FF7C5652C6CCC8C08D9F11EF9DECE5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dwn9i12M51hSX1ZGCtC74QDHMRQTQc9x2SDhT8YYpzWZ/0/323830343a353066343a633030303a636166653a3a2f36342d3634203d3e20323638343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:50f4:c000:cafe::/64

    Signature Algorithm: sha256WithRSAEncryption
         4b:6d:31:73:72:aa:99:8d:33:34:2f:6d:17:55:b4:60:fc:bd:
         9c:86:f1:8e:d3:60:92:16:2a:3a:a4:1c:4e:48:bc:ea:6d:9a:
         13:4a:71:18:a8:ac:c1:43:46:54:ea:eb:b3:d9:e1:8c:0c:9d:
         70:5f:fc:47:19:8a:22:86:0e:09:10:62:b2:a9:78:ba:ee:8c:
         bb:f6:b5:d4:5c:ec:c7:9d:4f:0c:c4:2d:5a:c9:c3:52:08:f9:
         13:b0:68:4d:f6:5d:71:ba:7d:7b:83:43:65:d6:c8:66:ea:c3:
         16:42:38:e4:25:f7:0e:3c:49:e0:a9:45:6f:d3:53:b9:a1:2d:
         d0:b7:0c:c3:31:bc:39:76:91:d7:7c:31:7d:e3:4c:0f:e2:14:
         92:b4:7e:ec:cb:3a:cd:d7:88:4b:09:38:a3:37:ca:ab:25:19:
         28:10:95:0d:dd:b8:c8:d4:e8:a3:1b:0d:a2:bc:08:7c:82:91:
         b1:1b:75:64:5e:56:12:6c:05:e3:c3:bd:1e:0d:f1:45:cd:5f:
         f6:7e:76:eb:5a:95:80:f1:e4:cb:a1:9c:73:36:3c:a3:82:2b:
         69:b7:21:4e:1c:5a:7a:44:da:69:94:9c:ec:55:09:b4:2c:1d:
         61:17:6f:66:26:ec:1c:e2:08:cd:4b:67:f6:5b:fc:46:b6:a2:
         39:2b:9d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----