Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/323830343a3362383a343a31363a3a3262302f3132362d313236203d3e203532393635.roa
File:                     323830343a3362383a343a31363a3a3262302f3132362d313236203d3e203532393635.roa (raw, json)
Hash identifier:          PUbLsWxg+t/e8CbVjcgBpK/6ssKTtqHGlqOH2+aAuIY=
Subject key identifier:   B8:DA:CF:5D:0B:5A:F5:0F:D6:89:21:21:AF:6B:AD:86:01:1A:0D:D4
Certificate issuer:       /CN=143582F75704EEF8880AF5E444EE85042913D47D
Certificate serial:       2FB0528E543FD6479973A0432C006F1240857B10
Authority key identifier: 14:35:82:F7:57:04:EE:F8:88:0A:F5:E4:44:EE:85:04:29:13:D4:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/143582F75704EEF8880AF5E444EE85042913D47D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/323830343a3362383a343a31363a3a3262302f3132362d313236203d3e203532393635.roa
Signing time:             Mon 16 Oct 2023 16:42:31 +0000
ROA not before:           Mon 16 Oct 2023 16:37:31 +0000
ROA not after:            Mon 14 Oct 2024 16:42:31 +0000
asID:                     52965
IP address blocks:        2804:3b8:4:16::2b0/126 maxlen: 126

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:b0:52:8e:54:3f:d6:47:99:73:a0:43:2c:00:6f:12:40:85:7b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143582F75704EEF8880AF5E444EE85042913D47D
        Validity
            Not Before: Oct 16 16:37:31 2023 GMT
            Not After : Oct 14 16:42:31 2024 GMT
        Subject: CN=B8DACF5D0B5AF50FD6892121AF6BAD86011A0DD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:80:ba:3f:6e:5c:fe:0e:a6:6f:f3:de:4a:12:
                    07:94:ce:4d:31:2e:f0:66:3a:1e:7d:39:ad:d7:89:
                    20:51:c7:aa:e4:7c:b9:73:b3:f6:d7:9a:dd:bf:06:
                    7a:30:55:79:aa:63:49:06:7c:7d:64:20:e2:31:49:
                    23:62:9e:4c:3a:d1:1d:d3:e4:30:d7:ed:9a:a3:53:
                    35:f8:01:1d:b7:e6:43:1c:92:d0:f0:10:5c:fa:ef:
                    3f:b5:8c:c4:7d:ed:11:83:68:48:07:26:34:e0:0f:
                    45:6b:82:25:b6:20:70:99:ab:7c:f2:93:1c:d7:e2:
                    50:ee:78:4a:a3:50:4e:7e:99:06:50:be:0a:07:65:
                    0f:54:04:bb:e6:47:6e:d7:98:ca:37:69:56:74:0e:
                    cd:21:f4:c5:fe:cc:5c:4c:a8:5f:04:9e:d8:70:e1:
                    41:71:ea:7e:fc:68:8f:b9:49:fc:2f:76:28:c7:16:
                    45:cc:f7:2c:67:fd:73:6d:5a:00:a4:5b:75:a8:b0:
                    56:32:d5:ef:90:95:ec:52:81:a5:0c:d8:95:33:38:
                    77:04:90:cf:7d:7b:87:94:2f:ab:9a:ee:82:37:7f:
                    76:78:be:e8:5c:6a:9b:62:71:9a:41:32:27:d5:02:
                    35:f4:0f:be:e4:50:0c:df:6b:fd:d7:4b:37:26:06:
                    ca:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:DA:CF:5D:0B:5A:F5:0F:D6:89:21:21:AF:6B:AD:86:01:1A:0D:D4
            X509v3 Authority Key Identifier:
                keyid:14:35:82:F7:57:04:EE:F8:88:0A:F5:E4:44:EE:85:04:29:13:D4:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/143582F75704EEF8880AF5E444EE85042913D47D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/143582F75704EEF8880AF5E444EE85042913D47D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/323830343a3362383a343a31363a3a3262302f3132362d313236203d3e203532393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b8:4:16:0:0:0:2b0/126

    Signature Algorithm: sha256WithRSAEncryption
         54:96:6a:20:b9:dc:31:91:e4:ad:f0:01:23:be:b1:75:d3:83:
         f3:70:9e:7a:78:2d:f9:4e:a2:52:43:48:d6:fb:12:1d:b1:50:
         39:d9:65:f7:a0:d8:01:1f:06:2c:c9:4c:de:bf:ef:42:08:55:
         06:9a:f5:31:e4:b5:6c:ef:b2:31:86:47:20:45:a9:9a:9b:f8:
         3a:e1:ea:b0:56:78:92:69:d0:1e:4a:d7:68:08:4f:8f:14:be:
         ef:15:58:1d:25:9e:9a:5b:b4:a5:63:d3:e7:7a:63:ce:ad:67:
         43:95:b4:b6:d9:a8:13:73:a6:12:13:5c:76:d1:c8:df:fc:57:
         2e:2b:68:63:ac:ce:14:f0:e2:df:d9:ea:6a:a8:ed:77:35:5a:
         b3:e3:3c:12:a9:34:e1:29:fb:c3:ae:99:57:6d:d1:f9:76:70:
         79:df:89:fd:8d:18:ca:97:27:0f:c0:75:90:f9:ec:05:2a:17:
         3d:21:df:23:35:6c:c5:00:6f:c6:96:f0:b5:46:c2:87:5e:ff:
         0c:e9:d7:65:67:7e:ee:f7:ed:0a:71:46:72:d9:c9:1d:16:02:
         bf:24:34:8a:df:3e:1d:37:83:18:64:5b:0e:9f:f2:43:68:83:
         af:61:04:2a:04:23:c7:02:bc:e3:22:b7:b9:42:7b:96:65:3c:
         f5:63:46:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----