Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/323830343a336137383a3a2f33322d3332203d3e20323636303931.roa
File:                     323830343a336137383a3a2f33322d3332203d3e20323636303931.roa (raw, json)
Hash identifier:          OMBptiwvbeb3pJ6JMbQuBq8kGGH2ghUELgHx6R0hjx4=
Subject key identifier:   DE:7F:61:1C:CD:12:2C:CC:EA:6A:5B:D4:F3:81:B7:4D:8E:4C:D7:C2
Certificate issuer:       /CN=5450FAFA57000D5AA61AEF7BE39D21C01883EA85
Certificate serial:       1580E55EFA5CE9534DAC3B48424E22819030E251
Authority key identifier: 54:50:FA:FA:57:00:0D:5A:A6:1A:EF:7B:E3:9D:21:C0:18:83:EA:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5450FAFA57000D5AA61AEF7BE39D21C01883EA85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/323830343a336137383a3a2f33322d3332203d3e20323636303931.roa
Signing time:             Wed 28 Feb 2024 14:11:16 +0000
ROA not before:           Wed 28 Feb 2024 14:06:16 +0000
ROA not after:            Wed 26 Feb 2025 14:11:16 +0000
asID:                     266091
IP address blocks:        2804:3a78::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:80:e5:5e:fa:5c:e9:53:4d:ac:3b:48:42:4e:22:81:90:30:e2:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5450FAFA57000D5AA61AEF7BE39D21C01883EA85
        Validity
            Not Before: Feb 28 14:06:16 2024 GMT
            Not After : Feb 26 14:11:16 2025 GMT
        Subject: CN=DE7F611CCD122CCCEA6A5BD4F381B74D8E4CD7C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a5:ea:c8:32:40:9d:07:df:e9:d3:d0:02:66:
                    25:32:09:d9:ed:14:11:8b:c9:d5:31:a1:da:5a:48:
                    0b:fb:d2:ca:cf:33:20:f3:3d:7a:17:e0:92:a3:2c:
                    e7:65:0f:48:4d:71:5f:73:59:36:9c:da:0f:2a:b1:
                    c2:f8:ed:2a:3b:19:6f:c0:b9:84:a8:5a:73:fa:4d:
                    6f:1a:f0:8f:fd:51:e9:31:95:d0:23:8a:9a:84:a5:
                    d9:fb:65:26:45:16:ad:e4:7f:81:ce:64:0e:b4:f7:
                    3d:72:10:61:75:92:fc:a7:cb:84:34:30:1d:5c:78:
                    93:81:26:7d:1b:ea:90:12:28:08:18:e8:6d:f6:9b:
                    42:6b:ed:ca:e5:ed:37:35:8f:52:0f:16:81:bd:86:
                    d7:b5:07:45:a4:c9:d2:36:96:f7:f1:6a:dd:59:e5:
                    5c:54:78:70:b1:62:0b:2a:8c:1a:f2:60:2d:1a:10:
                    ec:dd:f8:b4:68:c8:7a:99:5f:36:73:87:ce:97:c6:
                    f3:37:4d:36:1b:c0:cb:d2:b4:14:9c:b6:fd:8e:c5:
                    94:a4:7b:4e:52:c3:19:d2:43:f1:00:f5:bd:60:9a:
                    3d:8f:64:a6:e5:40:40:f5:33:7d:ad:3a:3c:75:2b:
                    54:74:ea:a7:9e:d7:3c:fe:75:6b:66:c2:79:cf:9f:
                    4f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:7F:61:1C:CD:12:2C:CC:EA:6A:5B:D4:F3:81:B7:4D:8E:4C:D7:C2
            X509v3 Authority Key Identifier:
                keyid:54:50:FA:FA:57:00:0D:5A:A6:1A:EF:7B:E3:9D:21:C0:18:83:EA:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/5450FAFA57000D5AA61AEF7BE39D21C01883EA85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5450FAFA57000D5AA61AEF7BE39D21C01883EA85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/323830343a336137383a3a2f33322d3332203d3e20323636303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a78::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:39:ef:b3:ba:cf:8e:eb:7b:86:b1:f7:bf:c0:c4:3b:12:db:
         0c:51:4e:94:8f:a4:7f:36:92:9a:67:f1:e3:62:fb:76:3f:94:
         61:d7:19:4d:9a:8c:f8:e7:05:66:63:3d:10:4f:20:5a:a0:a6:
         48:18:f0:99:16:c7:17:95:6d:ba:9d:f2:09:19:a1:2d:d1:1d:
         a1:d2:3e:04:f4:f4:82:a2:c5:35:41:50:4d:ef:50:2e:fb:59:
         37:bb:e7:91:10:5e:e5:49:66:3b:1e:a4:16:88:08:55:53:2d:
         a7:e7:78:19:7d:3d:ab:d2:4b:0a:36:fc:30:a1:78:b0:63:19:
         28:08:1a:26:80:ab:ad:3e:c7:ed:34:0e:84:99:aa:b3:94:5b:
         46:4e:36:9a:46:45:7f:b1:9a:95:ef:a1:33:e8:61:23:a2:bd:
         81:76:5f:7d:06:8f:51:b8:c9:98:82:84:47:24:0c:32:a3:57:
         66:5a:af:f6:5f:2b:97:6e:80:48:c5:32:59:39:76:c8:00:c3:
         05:72:bc:9d:8f:91:3a:d6:c1:3a:83:a9:c0:ce:0f:21:43:61:
         2e:cb:61:d0:c4:12:b5:4c:2b:b4:30:08:ff:40:65:a0:2e:69:
         81:52:a5:ed:87:0b:de:0c:42:d6:4e:16:b6:f2:cf:26:73:54:
         bf:91:95:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----