Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2FSX6tpVNLyQp2p9YDk58RPZ3CEA2FFyDnRDTJyvVaX/0/323830343a373735383a3a2f33322d3438203d3e20323731313732.roa
File:                     323830343a373735383a3a2f33322d3438203d3e20323731313732.roa (raw, json)
Hash identifier:          eP/UkNcPwbRQyEP8Zi14MzVfXzda5bAFjQGsQHpoR/w=
Subject key identifier:   8E:77:B8:88:DE:A6:B0:8C:08:91:99:B4:26:74:9B:BB:6F:11:89:43
Certificate issuer:       /CN=E5A0E2BFCC7CD4B5FFFE241544B3CA7F46356F56
Certificate serial:       5A9780A305063A08F4FCAF35FA056C9391D2BADD
Authority key identifier: E5:A0:E2:BF:CC:7C:D4:B5:FF:FE:24:15:44:B3:CA:7F:46:35:6F:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5A0E2BFCC7CD4B5FFFE241544B3CA7F46356F56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2FSX6tpVNLyQp2p9YDk58RPZ3CEA2FFyDnRDTJyvVaX/0/323830343a373735383a3a2f33322d3438203d3e20323731313732.roa
Signing time:             Wed 25 Oct 2023 23:01:43 +0000
ROA not before:           Wed 25 Oct 2023 22:56:43 +0000
ROA not after:            Wed 23 Oct 2024 23:01:43 +0000
asID:                     271172
IP address blocks:        2804:7758::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:97:80:a3:05:06:3a:08:f4:fc:af:35:fa:05:6c:93:91:d2:ba:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A0E2BFCC7CD4B5FFFE241544B3CA7F46356F56
        Validity
            Not Before: Oct 25 22:56:43 2023 GMT
            Not After : Oct 23 23:01:43 2024 GMT
        Subject: CN=8E77B888DEA6B08C089199B426749BBB6F118943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4b:e4:64:44:7c:d2:f2:ac:5a:c4:da:9d:49:
                    fb:f2:da:d3:98:11:81:6c:73:83:2b:e4:8d:9d:9d:
                    88:82:1e:e6:31:89:c6:3a:3e:16:cc:6d:08:d2:3c:
                    f6:db:46:7b:d7:8d:23:fd:b3:05:3e:a3:d2:7b:91:
                    74:c7:8f:cf:4d:1c:62:a4:5f:c0:f4:0d:84:03:05:
                    1e:12:ec:26:5e:53:99:21:e2:cb:05:83:17:1e:2f:
                    12:26:66:1a:fd:5a:b7:3a:f8:55:ee:9d:75:70:3f:
                    7b:9f:f7:b4:49:42:43:c5:6e:3c:f5:17:f9:e2:2a:
                    e0:d7:a0:a8:83:d3:7d:30:d3:32:20:75:5a:1d:cc:
                    7e:78:92:db:7c:05:57:2c:13:40:98:51:22:11:02:
                    ea:2c:8d:2e:e9:57:d0:d6:32:dc:27:84:ca:06:b9:
                    67:61:9b:d1:bf:e4:40:03:d2:0f:95:80:1f:54:7f:
                    7e:8d:19:15:2b:78:f1:45:30:dd:4b:c6:5c:96:25:
                    4c:8d:62:7a:91:37:94:34:2b:21:9d:16:b8:7d:67:
                    0b:e1:38:4a:e1:4c:99:ca:ad:57:b2:4f:21:e4:b1:
                    20:9f:98:6f:54:18:d2:85:4e:97:44:ab:f2:5c:29:
                    a4:28:a7:4c:06:b3:fa:0e:39:69:37:e4:6a:39:dc:
                    f8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:77:B8:88:DE:A6:B0:8C:08:91:99:B4:26:74:9B:BB:6F:11:89:43
            X509v3 Authority Key Identifier:
                keyid:E5:A0:E2:BF:CC:7C:D4:B5:FF:FE:24:15:44:B3:CA:7F:46:35:6F:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2FSX6tpVNLyQp2p9YDk58RPZ3CEA2FFyDnRDTJyvVaX/0/E5A0E2BFCC7CD4B5FFFE241544B3CA7F46356F56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5A0E2BFCC7CD4B5FFFE241544B3CA7F46356F56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2FSX6tpVNLyQp2p9YDk58RPZ3CEA2FFyDnRDTJyvVaX/0/323830343a373735383a3a2f33322d3438203d3e20323731313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7758::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:db:05:f4:5c:ec:59:c2:f6:52:08:a3:0b:73:58:81:e9:6f:
         91:35:b5:32:5a:a3:2b:61:c4:a7:1d:a5:79:8d:a3:69:4d:a3:
         4b:c7:85:6b:fb:8e:8d:77:b3:a4:c4:a2:5e:19:f1:49:bf:d4:
         c9:11:d6:35:ae:b5:7f:d8:80:02:84:8b:1a:de:88:a8:a2:f6:
         f0:03:7a:07:e4:80:8c:89:f2:20:04:59:c3:fe:bb:6f:9d:67:
         37:83:30:ed:8c:72:1d:0a:fa:6e:1d:02:3d:07:55:2c:eb:ff:
         b8:53:03:79:64:ab:63:38:05:66:c0:42:49:05:59:31:58:0a:
         f1:a0:4a:f4:10:34:10:d5:30:22:c8:5d:01:c4:13:0f:26:98:
         a6:77:0f:a2:5d:ec:c5:99:f6:1a:10:b7:ae:53:24:da:14:28:
         1d:7b:61:12:18:7e:33:ce:9b:47:3f:15:22:51:6d:e6:a8:9b:
         10:d2:61:c1:c2:55:e6:16:1b:1a:f8:ae:68:60:02:16:9a:9e:
         83:fd:4b:9a:e9:26:25:2e:e1:54:a6:b0:36:ad:60:2f:b4:03:
         d2:98:a4:c5:51:aa:f2:d9:63:44:95:47:d1:63:0b:96:8d:82:
         43:d0:c5:2d:83:8f:c1:63:cd:91:be:60:79:6e:5f:c9:63:ea:
         3d:6f:cb:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----