Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G5FHFXawCVaGbiCVnjkahT9FEgax4R5WwFUVtMGzaF4h/0/323830343a383239343a3a2f33322d3438203d3e20323732353237.roa
File:                     323830343a383239343a3a2f33322d3438203d3e20323732353237.roa (raw, json)
Hash identifier:          I2M6WuHPpa3OK/yipXF9nhxfVhJ4+DEolU8TkYs1Skc=
Subject key identifier:   BD:D8:A5:1E:60:DF:4D:0C:A9:7D:DE:35:C8:FA:E9:33:99:B1:9E:6D
Certificate issuer:       /CN=FADBD7889A78AFB3295D84B6C512D98FE7FDB7E3
Certificate serial:       44C1F9444C0DA2198559500E8F4DB34212E57E3A
Authority key identifier: FA:DB:D7:88:9A:78:AF:B3:29:5D:84:B6:C5:12:D9:8F:E7:FD:B7:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FADBD7889A78AFB3295D84B6C512D98FE7FDB7E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G5FHFXawCVaGbiCVnjkahT9FEgax4R5WwFUVtMGzaF4h/0/323830343a383239343a3a2f33322d3438203d3e20323732353237.roa
Signing time:             Wed 07 Feb 2024 17:23:31 +0000
ROA not before:           Wed 07 Feb 2024 17:18:31 +0000
ROA not after:            Wed 05 Feb 2025 17:23:31 +0000
asID:                     272527
IP address blocks:        2804:8294::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:c1:f9:44:4c:0d:a2:19:85:59:50:0e:8f:4d:b3:42:12:e5:7e:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FADBD7889A78AFB3295D84B6C512D98FE7FDB7E3
        Validity
            Not Before: Feb  7 17:18:31 2024 GMT
            Not After : Feb  5 17:23:31 2025 GMT
        Subject: CN=BDD8A51E60DF4D0CA97DDE35C8FAE93399B19E6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:58:ac:51:c8:1e:2b:fa:c5:ab:3f:b1:54:10:
                    71:a7:a1:04:2c:c4:2a:92:10:80:ad:67:47:8b:6d:
                    8e:5e:20:44:0c:6f:7e:7a:91:32:3a:60:a5:91:42:
                    78:02:b4:5e:0e:64:38:f4:61:30:7a:ce:37:6b:d0:
                    b0:dd:e8:28:a4:fe:f9:36:69:15:be:9a:da:bf:d6:
                    05:68:ec:f4:bf:cc:d4:1b:ea:b3:6e:47:b3:dd:25:
                    43:86:56:8f:07:21:8a:e7:b9:2b:27:90:6b:75:26:
                    e5:2f:2d:f3:f4:2f:8f:a3:5c:c5:6a:91:2c:c6:5c:
                    2b:40:55:e0:52:37:8a:5b:8c:0f:6b:2b:3f:32:30:
                    7e:63:8b:55:45:5d:d3:07:32:92:26:da:8e:4b:07:
                    23:c0:53:ee:9e:a3:0c:df:e1:04:ed:15:ca:62:88:
                    c9:fe:7c:a3:6d:c7:6c:f8:62:6e:45:f5:60:54:04:
                    12:94:f2:59:ba:07:04:cf:32:8f:c1:d4:dd:4c:af:
                    46:2b:ac:af:f1:07:63:92:5a:02:da:ff:d2:d9:3a:
                    ee:83:fb:c5:92:4b:52:a6:e8:a8:1b:0d:3c:60:66:
                    91:e8:24:de:8d:0a:21:b0:4e:83:ce:70:2e:d3:e0:
                    8a:97:df:e4:9f:b2:56:c4:88:d0:be:57:21:28:0a:
                    5f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D8:A5:1E:60:DF:4D:0C:A9:7D:DE:35:C8:FA:E9:33:99:B1:9E:6D
            X509v3 Authority Key Identifier:
                keyid:FA:DB:D7:88:9A:78:AF:B3:29:5D:84:B6:C5:12:D9:8F:E7:FD:B7:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G5FHFXawCVaGbiCVnjkahT9FEgax4R5WwFUVtMGzaF4h/0/FADBD7889A78AFB3295D84B6C512D98FE7FDB7E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FADBD7889A78AFB3295D84B6C512D98FE7FDB7E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5FHFXawCVaGbiCVnjkahT9FEgax4R5WwFUVtMGzaF4h/0/323830343a383239343a3a2f33322d3438203d3e20323732353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8294::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:3c:e6:92:a3:49:49:49:93:c7:b4:30:ab:39:7c:d5:99:64:
         41:c9:17:e8:f1:75:73:a5:53:1c:cb:6f:f7:b0:2c:9c:0f:6d:
         ff:e0:27:b3:d9:9b:7b:59:28:32:c7:45:14:fd:a9:70:b4:3f:
         85:d3:06:9b:76:f7:ad:77:bb:aa:ad:79:25:37:67:08:f1:7b:
         51:2a:fb:87:88:4d:3b:7d:15:20:56:99:e9:87:5a:8a:2d:fc:
         4e:ce:59:c4:b5:13:b2:21:6c:3e:2b:ce:b1:22:8b:f1:bb:72:
         e2:cc:c1:a2:99:7d:1f:27:14:ee:5c:cb:82:fe:e3:0e:ec:e4:
         5f:12:2b:be:44:11:86:97:2c:49:c3:b2:47:ee:b3:23:c0:3d:
         18:32:53:09:a3:cb:ef:10:97:32:1d:80:ff:0f:4a:ee:aa:10:
         57:e4:93:d2:83:c0:99:ea:5f:8c:e9:1e:9a:10:40:e8:1f:fa:
         97:b6:b8:9a:0c:40:a2:de:3b:5d:22:a8:77:61:ed:04:73:9b:
         bd:8e:c9:7d:29:a3:9a:bd:4d:f7:30:df:76:1e:bc:a7:1a:55:
         34:e7:8a:72:e6:3f:e7:9e:b8:8c:db:06:31:48:84:e8:33:03:
         12:86:ea:aa:f1:9d:b5:8e:62:c6:75:e0:5d:d0:c2:ae:00:d6:
         7b:77:a8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----