Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/0/323830343a353934303a3a2f33322d3332203d3e20323638313739.roa
File:                     323830343a353934303a3a2f33322d3332203d3e20323638313739.roa (raw, json)
Hash identifier:          EamdukQpmdtjKjMmJVxDu39EM11nc7hE7mTgFPXPTR0=
Subject key identifier:   51:04:97:9A:79:E6:26:32:69:BA:D4:FD:E3:19:57:29:8F:6E:FB:35
Certificate issuer:       /CN=16F65EAA11DD3B8E94D66F07F54C44D5DA97A09E
Certificate serial:       6F9DCBF594661C5DEBCB4BB192770581543CAD83
Authority key identifier: 16:F6:5E:AA:11:DD:3B:8E:94:D6:6F:07:F5:4C:44:D5:DA:97:A0:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16F65EAA11DD3B8E94D66F07F54C44D5DA97A09E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/0/323830343a353934303a3a2f33322d3332203d3e20323638313739.roa
Signing time:             Wed 29 Nov 2023 21:18:35 +0000
ROA not before:           Wed 29 Nov 2023 21:13:35 +0000
ROA not after:            Wed 27 Nov 2024 21:18:35 +0000
asID:                     268179
IP address blocks:        2804:5940::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:9d:cb:f5:94:66:1c:5d:eb:cb:4b:b1:92:77:05:81:54:3c:ad:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16F65EAA11DD3B8E94D66F07F54C44D5DA97A09E
        Validity
            Not Before: Nov 29 21:13:35 2023 GMT
            Not After : Nov 27 21:18:35 2024 GMT
        Subject: CN=5104979A79E6263269BAD4FDE31957298F6EFB35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:58:c6:41:7a:93:07:bf:1b:cd:10:e0:ad:31:
                    8a:e7:87:5c:48:99:92:43:3d:3a:7f:c4:e4:00:51:
                    52:8a:70:9e:78:2a:84:0a:6a:6e:97:89:64:67:25:
                    1b:f8:67:8c:8d:12:c6:77:42:a5:d1:39:3d:d8:9d:
                    59:0d:b2:be:a6:5f:a0:30:c6:fe:6f:5a:d6:f5:4f:
                    84:e5:6a:b6:66:69:44:58:30:28:05:9c:ce:a9:12:
                    08:51:66:5f:63:6e:e4:49:40:ac:20:91:76:f2:ed:
                    c4:d4:13:d8:b1:79:22:0b:ac:7f:62:04:f0:d6:70:
                    a9:1a:0b:4f:0e:7f:11:a0:83:d8:c9:ba:a4:f7:ad:
                    6a:52:b4:71:15:b9:c6:99:2d:93:6b:2e:de:73:56:
                    63:a9:dc:3e:ab:17:cd:b6:06:a4:3d:06:4f:bf:11:
                    c5:d7:21:ec:59:bd:df:7c:b1:16:c2:c7:c2:8d:ae:
                    3d:49:cb:72:8c:dd:46:42:85:2e:42:4f:fb:06:77:
                    86:4b:89:77:74:38:2f:47:07:ca:49:d8:bc:30:84:
                    1b:94:61:49:a0:ea:87:14:a4:80:fa:d3:0d:d3:b9:
                    97:1d:43:cc:96:d0:66:7d:2f:3b:6d:4a:40:b5:6f:
                    76:10:13:56:ea:f8:04:2c:e8:34:f3:89:48:d4:37:
                    b9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:04:97:9A:79:E6:26:32:69:BA:D4:FD:E3:19:57:29:8F:6E:FB:35
            X509v3 Authority Key Identifier:
                keyid:16:F6:5E:AA:11:DD:3B:8E:94:D6:6F:07:F5:4C:44:D5:DA:97:A0:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/0/16F65EAA11DD3B8E94D66F07F54C44D5DA97A09E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16F65EAA11DD3B8E94D66F07F54C44D5DA97A09E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/0/323830343a353934303a3a2f33322d3332203d3e20323638313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5940::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:9e:8d:2e:1e:19:c2:2d:65:ed:64:c7:e7:13:38:b7:7a:20:
         19:32:7d:b1:97:2b:6a:13:58:d9:1b:7d:db:70:22:27:72:16:
         a9:02:60:e9:02:b7:16:69:de:fe:1c:fa:8e:6a:84:a7:68:e2:
         2b:7a:04:16:91:14:70:96:c9:a8:e2:a9:ab:6c:74:33:21:11:
         3a:c5:f4:21:82:7b:a7:8b:5c:b3:7c:74:5c:cb:90:09:a9:34:
         c2:d7:8e:c2:b0:f6:af:0d:9a:04:54:e1:08:f6:ec:27:ea:f4:
         73:55:86:a1:b7:08:56:22:3c:2a:2a:c3:b8:ac:2b:7c:99:b6:
         02:2d:1d:3d:bd:4a:0d:5c:8e:cc:b3:d8:de:35:d5:a1:1d:24:
         5d:c9:fe:74:c7:dd:88:28:87:69:20:88:a5:d4:6a:aa:43:e3:
         5a:6c:e8:81:ef:e7:dd:cc:e5:b7:07:1a:43:07:99:63:51:60:
         10:3e:63:c6:53:c2:fa:7f:0e:7a:bc:4f:97:f5:80:fd:66:2a:
         a7:ac:c3:28:e8:c5:9d:6a:61:97:f3:d3:98:29:a0:de:52:f4:
         54:f9:5a:5c:09:b9:b8:4a:d3:63:c6:c9:7e:21:b1:4a:fa:0a:
         fd:9e:39:1b:7f:9c:bf:41:c3:ab:9b:88:ad:b0:91:e8:09:02:
         a3:30:97:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----