Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/0/323830343a3264303a3a2f33322d313238203d3e203533323330.roa
File:                     323830343a3264303a3a2f33322d313238203d3e203533323330.roa (raw, json)
Hash identifier:          42xhQWyRUXWYm9TweXq8CLSKwfkw2fx2YzqKj/EW6LQ=
Subject key identifier:   EB:42:65:E9:97:18:38:17:A8:70:76:49:E8:51:80:91:14:4F:9B:9D
Certificate issuer:       /CN=C5BAC057CD6E7D6B4475B5D275E1DB63F3B8B963
Certificate serial:       010CDF87CA487EA4F361EB0F39056615DEEEA087
Authority key identifier: C5:BA:C0:57:CD:6E:7D:6B:44:75:B5:D2:75:E1:DB:63:F3:B8:B9:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C5BAC057CD6E7D6B4475B5D275E1DB63F3B8B963.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/0/323830343a3264303a3a2f33322d313238203d3e203533323330.roa
Signing time:             Tue 19 Mar 2024 18:21:25 +0000
ROA not before:           Tue 19 Mar 2024 18:16:25 +0000
ROA not after:            Tue 18 Mar 2025 18:21:25 +0000
asID:                     53230
IP address blocks:        2804:2d0::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0c:df:87:ca:48:7e:a4:f3:61:eb:0f:39:05:66:15:de:ee:a0:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5BAC057CD6E7D6B4475B5D275E1DB63F3B8B963
        Validity
            Not Before: Mar 19 18:16:25 2024 GMT
            Not After : Mar 18 18:21:25 2025 GMT
        Subject: CN=EB4265E997183817A8707649E8518091144F9B9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e2:13:81:50:d0:8f:d8:ab:bb:1a:70:a0:dd:
                    eb:f3:c8:8d:02:93:ea:b4:f2:35:01:62:40:6a:aa:
                    e2:23:97:91:e4:22:4c:20:0c:f4:fd:b8:ce:9b:3e:
                    34:79:1b:f2:68:9d:14:c0:83:8e:81:80:5b:79:8f:
                    e4:1e:ce:b0:4e:b0:09:a2:92:0f:d9:3b:31:3f:0d:
                    c6:9a:c3:95:43:3f:c7:42:90:63:e1:1f:26:31:46:
                    7c:d4:08:7d:c9:27:4c:0d:68:e6:12:78:b8:b8:60:
                    2f:48:ec:7f:65:3c:56:f3:1e:f6:b2:b8:cd:ec:5b:
                    a1:a8:30:0f:c0:1e:89:dd:94:f7:b2:8f:1c:5d:1e:
                    5f:d3:73:4a:4e:6b:36:f7:bb:c4:bb:48:ce:bb:6d:
                    01:35:e5:5d:77:33:46:08:ca:cb:b5:99:40:92:20:
                    b7:6a:62:a1:de:5f:20:c8:68:80:f2:88:a4:ff:78:
                    b7:31:cd:de:30:a3:01:22:bf:3c:8f:8d:e2:fd:1f:
                    7e:e7:4b:13:b3:73:ed:c4:93:04:51:8c:b0:73:d5:
                    e0:e9:96:61:ab:e3:f5:15:e8:f8:87:f2:07:bb:b7:
                    ac:c7:75:44:8c:e6:24:3d:de:6b:1a:c2:15:25:b5:
                    41:a3:0d:80:ae:0d:58:75:cb:19:bd:bf:22:ba:89:
                    b9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:42:65:E9:97:18:38:17:A8:70:76:49:E8:51:80:91:14:4F:9B:9D
            X509v3 Authority Key Identifier:
                keyid:C5:BA:C0:57:CD:6E:7D:6B:44:75:B5:D2:75:E1:DB:63:F3:B8:B9:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/0/C5BAC057CD6E7D6B4475B5D275E1DB63F3B8B963.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C5BAC057CD6E7D6B4475B5D275E1DB63F3B8B963.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/0/323830343a3264303a3a2f33322d313238203d3e203533323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:81:7d:90:7c:c4:33:d5:2c:2a:d7:c3:23:ea:3c:3b:d6:86:
         f7:fc:1b:be:c7:4b:94:07:59:58:47:c7:f8:6f:1a:82:33:cc:
         79:b6:8e:4a:79:b1:6b:3d:f6:39:76:93:2b:7f:53:26:12:3b:
         49:22:bc:4b:53:eb:a9:2a:7a:4a:24:31:13:8a:bb:32:fa:52:
         97:d9:5b:cd:fd:43:c2:b5:c5:e0:51:c2:8d:c3:f7:2c:a9:6d:
         43:14:b6:3c:29:db:ff:2b:fa:a8:9b:13:9b:c9:de:a7:4d:7b:
         81:d1:5e:31:68:ad:84:b2:cd:6c:00:30:b6:52:76:c2:04:81:
         ca:84:3c:94:93:89:08:35:e6:75:d1:9a:e3:d5:42:bf:a3:61:
         8e:e7:5d:20:5f:ca:41:74:1f:92:e9:36:ab:49:28:d7:03:79:
         b4:17:52:23:76:7d:12:13:11:58:48:d8:5c:d3:80:c3:7a:c2:
         ec:03:f7:d9:89:39:57:fe:f9:8d:1c:90:7c:33:17:13:0d:ba:
         94:35:d0:35:45:4c:40:01:e2:2a:d1:1a:7c:a6:08:c0:93:d6:
         72:1a:02:97:ce:89:61:48:c0:5d:c2:f0:dc:e1:1c:9c:24:21:
         c0:cb:00:dd:75:41:ba:0b:7e:20:02:e7:2b:ff:50:5b:85:9a:
         39:0f:86:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----