Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/0/323830343a363662633a3a2f33322d3332203d3e20323639353739.roa
File:                     323830343a363662633a3a2f33322d3332203d3e20323639353739.roa (raw, json)
Hash identifier:          E6Cd6alM/6U2s/+kQ2lCOpdORWVEO9zVexbTYI0jmag=
Subject key identifier:   2D:06:57:94:8F:AE:B1:C5:0E:2F:80:18:07:AB:0F:09:23:4E:BF:17
Certificate issuer:       /CN=167F10BEB1FC319906571ABA7B9A3B442F748CB5
Certificate serial:       11792B881C9C999F2BE26D1FE89082117A03CC1D
Authority key identifier: 16:7F:10:BE:B1:FC:31:99:06:57:1A:BA:7B:9A:3B:44:2F:74:8C:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167F10BEB1FC319906571ABA7B9A3B442F748CB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/0/323830343a363662633a3a2f33322d3332203d3e20323639353739.roa
Signing time:             Sat 26 Aug 2023 20:14:19 +0000
ROA not before:           Sat 26 Aug 2023 20:09:19 +0000
ROA not after:            Sat 24 Aug 2024 20:14:19 +0000
asID:                     269579
IP address blocks:        2804:66bc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:79:2b:88:1c:9c:99:9f:2b:e2:6d:1f:e8:90:82:11:7a:03:cc:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167F10BEB1FC319906571ABA7B9A3B442F748CB5
        Validity
            Not Before: Aug 26 20:09:19 2023 GMT
            Not After : Aug 24 20:14:19 2024 GMT
        Subject: CN=2D0657948FAEB1C50E2F801807AB0F09234EBF17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:26:37:c4:bc:b4:52:ad:29:54:8c:e8:25:99:
                    8e:34:3b:eb:bb:e4:c6:02:a6:fe:6f:96:87:3b:b0:
                    fb:87:7e:fa:93:e4:1d:52:ae:e3:71:38:e7:64:5a:
                    01:44:1c:0a:86:88:d1:10:aa:b9:ca:4c:f5:87:59:
                    5c:cc:94:9f:b2:f5:d2:fc:49:4a:57:cf:e3:81:08:
                    45:66:1e:29:6a:5a:ae:c8:79:5b:41:da:35:5b:b1:
                    0b:ba:c1:1e:d5:07:b0:4a:16:fe:f5:8a:8d:e0:6e:
                    bc:69:36:44:12:23:20:5e:1d:39:9e:1b:1e:bc:ca:
                    8f:a2:7c:72:fc:7c:3f:e4:84:2e:df:7a:eb:d3:03:
                    83:22:64:9a:df:20:bf:2f:5e:9b:a1:42:d5:39:bd:
                    37:0f:62:e6:b1:51:f5:8e:31:bb:16:2e:a9:54:b4:
                    c0:0c:75:e2:98:82:fa:b0:2f:51:a8:b0:9e:3e:8e:
                    52:bb:5e:aa:ad:69:58:73:74:af:42:6b:07:15:7d:
                    8e:d3:7e:74:ec:8f:07:ae:6b:f6:87:cf:7b:37:56:
                    c8:23:20:88:f2:c9:89:35:57:2a:c4:89:81:cf:1d:
                    39:f1:56:42:93:9e:61:3c:9a:f2:f3:5a:98:c7:8d:
                    00:2b:00:b3:0f:10:96:34:4b:34:aa:5b:b3:87:57:
                    29:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:06:57:94:8F:AE:B1:C5:0E:2F:80:18:07:AB:0F:09:23:4E:BF:17
            X509v3 Authority Key Identifier:
                keyid:16:7F:10:BE:B1:FC:31:99:06:57:1A:BA:7B:9A:3B:44:2F:74:8C:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/0/167F10BEB1FC319906571ABA7B9A3B442F748CB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167F10BEB1FC319906571ABA7B9A3B442F748CB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/0/323830343a363662633a3a2f33322d3332203d3e20323639353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:66bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:6d:60:87:18:3c:1a:cc:18:56:60:1a:94:45:cc:e1:11:92:
         77:e2:fd:33:77:43:a7:ea:fa:45:26:53:43:b3:cb:e8:e8:cd:
         b2:d2:02:41:80:fc:e1:3c:65:dd:d5:0f:73:d1:71:34:80:7e:
         e0:9e:72:68:19:bb:93:14:69:1d:7b:b7:13:42:df:94:3d:7e:
         0f:cd:2c:1f:cb:8d:f9:f8:97:85:2b:76:89:be:22:1e:45:b7:
         c3:a9:39:1b:75:e4:8d:8c:75:f5:71:54:47:b3:6c:a6:e0:16:
         4b:59:92:b3:5b:c2:cd:d7:fb:88:62:b5:0a:5a:ea:7a:83:aa:
         ae:12:08:8a:b3:03:a5:45:3c:82:c7:52:87:fe:25:cc:a0:d3:
         1c:06:73:e9:be:84:d9:b7:d9:98:f3:0a:1d:4a:7e:27:2f:32:
         9e:e7:65:af:6e:86:12:05:c9:22:a5:f4:16:ab:77:b7:a0:d8:
         74:8f:75:92:5d:64:a4:5c:f8:e9:a0:42:5f:24:3b:f7:7d:9d:
         92:e0:ca:d5:72:05:58:9b:d3:de:1e:e2:a8:07:be:8a:f4:95:
         f7:54:43:66:f7:f4:51:70:01:4b:49:5d:96:e6:1c:27:ed:85:
         b3:d3:e6:4a:40:bf:dc:e1:ff:00:4e:40:2f:5b:11:e7:5f:e3:
         dd:b7:d7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----