Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/323830343a356265383a3a2f33322d313238203d3e20323638383736.roa
File:                     323830343a356265383a3a2f33322d313238203d3e20323638383736.roa (raw, json)
Hash identifier:          9Z0f3JTAXs2YcXC48hhKXpqaK8BLu438jyQgmPt+Kl0=
Subject key identifier:   AF:7F:85:5D:01:E6:B7:3E:34:98:34:62:2F:55:43:9E:30:FC:3E:13
Certificate issuer:       /CN=C5B9910C7B4E71FD2BF9FC1A66967A2B7D758786
Certificate serial:       51220CDF1110DED7F5B7FC8E3CEE33CA9AF578BF
Authority key identifier: C5:B9:91:0C:7B:4E:71:FD:2B:F9:FC:1A:66:96:7A:2B:7D:75:87:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C5B9910C7B4E71FD2BF9FC1A66967A2B7D758786.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/323830343a356265383a3a2f33322d313238203d3e20323638383736.roa
Signing time:             Wed 20 Mar 2024 14:44:26 +0000
ROA not before:           Wed 20 Mar 2024 14:39:26 +0000
ROA not after:            Wed 19 Mar 2025 14:44:26 +0000
asID:                     268876
IP address blocks:        2804:5be8::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:22:0c:df:11:10:de:d7:f5:b7:fc:8e:3c:ee:33:ca:9a:f5:78:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5B9910C7B4E71FD2BF9FC1A66967A2B7D758786
        Validity
            Not Before: Mar 20 14:39:26 2024 GMT
            Not After : Mar 19 14:44:26 2025 GMT
        Subject: CN=AF7F855D01E6B73E349834622F55439E30FC3E13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:65:0e:34:81:3b:07:dc:e3:6b:10:cf:97:b0:
                    da:d1:b2:62:75:07:eb:d3:1a:a2:b3:b9:38:82:74:
                    23:de:be:8c:d8:87:6d:a1:9a:2a:71:9e:9c:ef:f6:
                    c4:cf:8b:cb:15:7b:73:19:a7:1e:22:d2:94:ab:86:
                    47:ba:df:66:7e:c9:36:e3:9c:93:a5:8f:6c:7d:16:
                    4a:04:93:4c:42:a8:ef:cc:f9:8d:80:38:b6:7c:1c:
                    ff:4b:77:53:23:40:30:bc:24:7f:31:95:a3:e3:ad:
                    ea:e2:46:7f:d5:04:ec:fc:a6:0a:5c:81:cf:e6:a5:
                    ae:dc:3c:f1:9c:bf:83:2f:62:af:8d:24:c2:6b:ae:
                    3f:2c:fe:70:64:f7:6d:74:74:83:1c:02:7e:40:8e:
                    7f:3a:91:79:05:69:da:2a:54:ae:22:bb:f8:52:3b:
                    7a:5a:3e:a4:d7:61:7b:34:b7:5b:1d:e1:b0:45:1c:
                    f8:46:fe:68:94:a7:6a:d1:e1:c4:9c:23:60:fc:4e:
                    78:98:69:3f:a2:5a:13:79:9c:15:76:b6:6a:75:c4:
                    75:9f:c7:90:40:17:f8:c6:06:45:83:89:0c:a8:b2:
                    b9:6a:aa:fa:8f:77:9e:01:fa:10:66:54:22:23:09:
                    4f:39:8c:df:a1:83:4a:01:20:e6:d8:44:67:3b:c6:
                    53:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:7F:85:5D:01:E6:B7:3E:34:98:34:62:2F:55:43:9E:30:FC:3E:13
            X509v3 Authority Key Identifier:
                keyid:C5:B9:91:0C:7B:4E:71:FD:2B:F9:FC:1A:66:96:7A:2B:7D:75:87:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/C5B9910C7B4E71FD2BF9FC1A66967A2B7D758786.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C5B9910C7B4E71FD2BF9FC1A66967A2B7D758786.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/323830343a356265383a3a2f33322d313238203d3e20323638383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5be8::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:a8:68:7c:d6:fa:d6:5d:2c:63:49:5d:e9:bf:16:e5:17:35:
         78:ac:72:2d:8a:0d:ef:e7:7a:0b:86:20:da:e1:04:4f:32:56:
         9d:17:17:be:62:de:64:08:a0:9e:23:7c:43:5c:3a:22:4a:99:
         4b:f5:ab:7d:f1:fd:6c:4d:70:f4:f3:ca:a3:34:3a:4f:56:6f:
         6c:7d:57:21:94:76:f5:5f:64:4b:8f:5f:f4:fb:fa:b5:92:ba:
         b1:79:93:20:e9:9b:18:6d:5a:9f:8f:f3:fc:1e:ca:bd:e8:f8:
         26:9e:98:75:99:87:b0:f0:87:19:42:00:fb:db:c0:64:d3:c1:
         42:7b:04:32:f5:ad:59:44:0f:05:cc:43:a2:1d:d8:b5:12:9b:
         77:b0:f7:8c:cd:68:76:40:b7:30:7c:d6:6c:ea:e3:26:8e:5e:
         29:ac:68:4e:ab:48:ee:89:c9:26:bc:f4:65:4d:d4:41:13:72:
         00:3d:76:c2:f7:ad:b4:5f:03:46:b9:2a:7a:8b:d7:b1:d5:86:
         ff:74:d7:33:d3:89:c4:03:72:c4:8a:40:7c:65:26:c2:7a:8e:
         0c:bf:2f:a0:69:da:2c:c9:5e:00:e6:f7:f7:f2:3a:68:27:2b:
         0d:f2:37:2d:72:f0:7f:1c:d0:83:db:06:ee:23:b5:0a:30:9f:
         0b:54:05:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----