Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GqCiZyTFjrnhyuYEfcEzU8SSdg5pkMxChK4KLtQQsbB2/1/323830343a373535343a3a2f33322d3334203d3e20323731303339.roa
File:                     323830343a373535343a3a2f33322d3334203d3e20323731303339.roa (raw, json)
Hash identifier:          HzUYZpLhprOSzAvXto+AVfb9IOPR9KppCWOgbOhYqO0=
Subject key identifier:   B8:2A:9D:FA:2B:88:88:DE:52:20:A8:B3:8B:C5:BD:C9:7F:36:6D:9D
Certificate issuer:       /CN=5383BF99B2733CCC526E037139293C3DBCEA9DF5
Certificate serial:       33DB72EC3FA671EE01343E75EA9BCB42364FD9E9
Authority key identifier: 53:83:BF:99:B2:73:3C:CC:52:6E:03:71:39:29:3C:3D:BC:EA:9D:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5383BF99B2733CCC526E037139293C3DBCEA9DF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GqCiZyTFjrnhyuYEfcEzU8SSdg5pkMxChK4KLtQQsbB2/1/323830343a373535343a3a2f33322d3334203d3e20323731303339.roa
Signing time:             Thu 04 Apr 2024 08:31:29 +0000
ROA not before:           Thu 04 Apr 2024 08:26:29 +0000
ROA not after:            Thu 03 Apr 2025 08:31:29 +0000
asID:                     271039
IP address blocks:        2804:7554::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:db:72:ec:3f:a6:71:ee:01:34:3e:75:ea:9b:cb:42:36:4f:d9:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5383BF99B2733CCC526E037139293C3DBCEA9DF5
        Validity
            Not Before: Apr  4 08:26:29 2024 GMT
            Not After : Apr  3 08:31:29 2025 GMT
        Subject: CN=B82A9DFA2B8888DE5220A8B38BC5BDC97F366D9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c1:2f:23:54:b5:34:20:a7:75:1e:7d:55:2f:
                    e9:5d:2e:75:f3:1f:04:09:23:25:3a:5f:25:98:58:
                    5e:d7:fe:15:cc:1e:a2:3f:66:de:c9:d4:1b:a3:aa:
                    1c:cd:dd:7f:62:54:5e:fd:de:0e:52:b1:6c:77:d8:
                    fa:9d:e1:ef:91:d5:90:86:4a:cd:76:86:a2:0b:cd:
                    ca:d2:aa:07:dc:a0:db:aa:f4:e5:22:fe:6b:4f:85:
                    5a:18:a4:7e:91:48:4c:f7:e8:a5:a5:54:6e:f7:09:
                    d8:c7:77:78:e6:78:1a:ae:15:31:c6:4e:f6:3c:91:
                    1c:06:3a:cb:df:ca:d1:f4:70:ab:28:49:01:bd:c7:
                    7a:79:8c:64:f7:e8:6e:34:a3:0c:e1:ed:56:28:64:
                    c7:55:70:28:3d:17:fd:ba:a3:18:2d:39:66:47:e8:
                    0e:bf:95:6e:f3:75:3c:b6:6e:73:31:96:f3:83:54:
                    6a:1c:23:0e:a7:9f:fe:50:a3:2d:9d:38:bc:58:39:
                    57:73:06:c4:61:d6:a0:0e:61:2e:d1:83:50:40:fc:
                    ec:e5:02:22:4a:73:03:f0:79:ca:dc:2f:06:e7:b7:
                    41:04:d4:ea:95:91:ee:05:e7:31:38:7c:bb:3b:b8:
                    82:15:c5:af:6e:ff:42:1d:ef:d1:6a:1c:ba:70:36:
                    49:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:2A:9D:FA:2B:88:88:DE:52:20:A8:B3:8B:C5:BD:C9:7F:36:6D:9D
            X509v3 Authority Key Identifier:
                keyid:53:83:BF:99:B2:73:3C:CC:52:6E:03:71:39:29:3C:3D:BC:EA:9D:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GqCiZyTFjrnhyuYEfcEzU8SSdg5pkMxChK4KLtQQsbB2/1/5383BF99B2733CCC526E037139293C3DBCEA9DF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5383BF99B2733CCC526E037139293C3DBCEA9DF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GqCiZyTFjrnhyuYEfcEzU8SSdg5pkMxChK4KLtQQsbB2/1/323830343a373535343a3a2f33322d3334203d3e20323731303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7554::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:67:01:db:90:57:49:5b:33:7a:35:ff:fb:4a:a1:a7:7d:82:
         c9:43:f0:91:e2:7a:76:b3:9a:62:92:30:41:ba:d0:a5:20:ec:
         43:05:67:bc:72:90:42:bd:96:77:7a:ed:04:29:e0:d3:d4:8c:
         85:8a:12:c3:df:97:d2:a6:67:41:56:82:eb:ca:1d:1d:20:f0:
         58:b1:0e:42:e1:b2:12:64:2a:3d:03:7a:66:0a:5e:bf:cc:ab:
         dc:ac:9f:79:bc:7a:78:fb:87:13:30:05:84:c8:ad:05:0e:65:
         b9:c8:8c:89:1c:72:7c:a1:e1:5e:24:e3:69:de:40:e5:55:18:
         b4:85:dc:cf:dd:38:f9:93:6d:aa:09:5b:28:9f:52:16:3b:91:
         f5:2b:36:ff:e8:38:82:0a:a8:42:9e:a1:32:f8:06:c3:7d:d1:
         75:37:f7:96:1f:2b:fb:f8:52:44:a1:1f:33:d4:00:a2:cf:b7:
         11:cf:71:59:68:32:37:da:82:64:7e:65:5f:24:dc:05:8f:2c:
         c9:5c:bb:ff:6e:43:9f:48:e4:95:e3:89:cb:8b:d7:89:ac:b3:
         7f:66:6b:aa:c7:3f:33:bc:32:e5:1e:c4:5c:08:40:35:1f:8b:
         28:e5:c1:f1:04:fd:9f:0d:84:8f:90:78:b3:6e:ab:47:d0:43:
         5a:cf:ef:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----