Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/323830343a336561343a3a2f33322d3332203d3e20323636363131.roa
File:                     323830343a336561343a3a2f33322d3332203d3e20323636363131.roa (raw, json)
Hash identifier:          Sv43n9ITuU4BMDz29UHKFsmtRNIgUJouKWrIbWn1TXQ=
Subject key identifier:   51:80:F3:8C:FC:F9:19:18:5B:88:D3:24:06:BF:4C:4D:3B:94:A3:6E
Certificate issuer:       /CN=128E3DF9D967032A562E804D2E781DB1DC454A79
Certificate serial:       50668E9C2AC764CEE556A7A1A49FA2D3BAAE23E3
Authority key identifier: 12:8E:3D:F9:D9:67:03:2A:56:2E:80:4D:2E:78:1D:B1:DC:45:4A:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/128E3DF9D967032A562E804D2E781DB1DC454A79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/323830343a336561343a3a2f33322d3332203d3e20323636363131.roa
Signing time:             Thu 25 Jan 2024 00:59:10 +0000
ROA not before:           Thu 25 Jan 2024 00:54:10 +0000
ROA not after:            Thu 23 Jan 2025 00:59:10 +0000
asID:                     266611
IP address blocks:        2804:3ea4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:66:8e:9c:2a:c7:64:ce:e5:56:a7:a1:a4:9f:a2:d3:ba:ae:23:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128E3DF9D967032A562E804D2E781DB1DC454A79
        Validity
            Not Before: Jan 25 00:54:10 2024 GMT
            Not After : Jan 23 00:59:10 2025 GMT
        Subject: CN=5180F38CFCF919185B88D32406BF4C4D3B94A36E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:5d:bd:66:de:99:85:8f:9a:d1:51:8f:29:f5:
                    0e:4b:ce:6a:30:d4:1a:7d:de:bd:53:e2:23:31:c7:
                    3a:df:db:cf:6e:3c:e0:34:e5:d2:70:03:15:56:71:
                    c5:1d:13:b2:99:8a:64:88:bb:c6:72:0c:f4:7c:65:
                    20:84:ce:c8:ca:dc:39:5d:b6:6e:06:24:3b:a7:77:
                    63:59:bb:62:b3:fd:82:2e:84:b9:e6:ea:7e:e9:e8:
                    eb:32:16:0c:63:f7:50:cc:26:af:5b:bd:10:f8:c9:
                    89:ce:bc:e1:ed:94:09:45:1c:b4:d6:59:5e:0b:ae:
                    b3:49:24:58:a8:8c:fc:c3:c5:f4:12:03:a4:7f:ab:
                    0b:fb:51:fa:e7:96:19:75:17:c6:2b:d8:32:91:76:
                    d4:03:fb:68:ed:24:1e:e6:56:30:19:7d:7f:6e:73:
                    ed:32:cd:60:c3:71:b7:24:8a:67:f9:07:37:8f:d8:
                    2c:db:01:a7:75:60:0d:55:35:24:ba:c2:c9:69:bb:
                    af:83:9b:77:06:d5:01:84:99:a5:05:4b:bb:af:58:
                    a0:9e:b4:1a:c6:0b:fb:79:c5:7e:64:d4:86:d8:e3:
                    fe:ce:b2:65:d4:6a:2d:37:a9:25:5c:c8:68:fc:06:
                    5e:e5:e3:d6:03:5c:fc:20:c1:d5:16:05:7d:e3:07:
                    dc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:80:F3:8C:FC:F9:19:18:5B:88:D3:24:06:BF:4C:4D:3B:94:A3:6E
            X509v3 Authority Key Identifier:
                keyid:12:8E:3D:F9:D9:67:03:2A:56:2E:80:4D:2E:78:1D:B1:DC:45:4A:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/128E3DF9D967032A562E804D2E781DB1DC454A79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/128E3DF9D967032A562E804D2E781DB1DC454A79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/323830343a336561343a3a2f33322d3332203d3e20323636363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ea4::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:39:d0:c7:f1:ca:11:65:bc:ec:d9:47:e7:5e:89:0d:a5:05:
         6d:57:3d:4a:7f:63:da:b7:fa:82:26:1c:80:73:b1:9b:1e:4a:
         17:f7:f6:07:90:a5:d0:4d:0c:f5:bf:4e:34:71:b9:27:85:3f:
         e7:ad:0c:29:55:59:88:ae:b0:12:91:dd:70:ff:bd:5a:51:45:
         5d:7a:2d:3e:c8:68:b3:93:32:d3:e3:58:37:e0:45:58:0b:fe:
         72:20:1d:2d:92:a9:ec:fb:1b:00:31:cb:cc:4a:35:e9:5f:a9:
         dc:bf:3c:db:9e:82:b0:28:10:37:03:19:3c:74:9a:5e:a0:9b:
         2e:a8:85:4f:95:a9:f7:fb:0e:b1:92:61:fa:60:54:ba:99:4e:
         57:0d:fc:98:ab:f7:ab:ff:bb:c8:7e:90:75:87:7a:09:5f:37:
         67:fe:e8:26:31:8c:30:53:e6:de:9c:2c:1d:bc:92:49:97:84:
         fc:d5:66:8f:ec:2f:6d:29:44:5e:d8:a4:9b:d4:23:00:28:63:
         6d:64:86:a1:f0:d1:1c:24:f6:2f:f0:61:85:ac:5e:5e:6f:23:
         c5:64:51:e5:95:97:3c:5c:bf:2e:22:fe:f5:a5:15:36:ca:c3:
         12:7d:c8:09:94:c3:03:6e:91:38:c9:77:8d:2a:52:f3:a9:83:
         5d:f1:fb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----