Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/323830343a363461303a3a2f33322d313238203d3e20323639343339.roa
File:                     323830343a363461303a3a2f33322d313238203d3e20323639343339.roa (raw, json)
Hash identifier:          KBi9JD63GGBN5oUlxh6dMIYzws/l4sQy+aKNbiD3vbk=
Subject key identifier:   C4:6F:5D:39:7D:21:C7:95:69:EE:A0:DA:56:9D:7B:7E:32:34:E9:14
Certificate issuer:       /CN=975CB8DB1CE95D0A375C7E8DE07D0D7835BBB54D
Certificate serial:       5A1F76868E4EBD7A632F8A8A093711F5F14FAAE9
Authority key identifier: 97:5C:B8:DB:1C:E9:5D:0A:37:5C:7E:8D:E0:7D:0D:78:35:BB:B5:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/975CB8DB1CE95D0A375C7E8DE07D0D7835BBB54D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/323830343a363461303a3a2f33322d313238203d3e20323639343339.roa
Signing time:             Fri 01 Mar 2024 15:21:34 +0000
ROA not before:           Fri 01 Mar 2024 15:16:34 +0000
ROA not after:            Fri 28 Feb 2025 15:21:34 +0000
asID:                     269439
IP address blocks:        2804:64a0::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:1f:76:86:8e:4e:bd:7a:63:2f:8a:8a:09:37:11:f5:f1:4f:aa:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=975CB8DB1CE95D0A375C7E8DE07D0D7835BBB54D
        Validity
            Not Before: Mar  1 15:16:34 2024 GMT
            Not After : Feb 28 15:21:34 2025 GMT
        Subject: CN=C46F5D397D21C79569EEA0DA569D7B7E3234E914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ea:1b:d5:f8:35:00:5d:4d:65:21:4f:ec:42:
                    02:8f:8d:78:5e:7a:cc:97:d6:99:da:ed:f6:e7:75:
                    e7:df:c4:9c:c1:a8:f3:72:3e:0a:c5:da:54:38:d8:
                    bf:18:2e:1a:2b:f4:17:9a:42:f6:91:43:cd:5f:f2:
                    52:ab:aa:91:2b:37:66:3d:94:a0:12:75:5e:db:2f:
                    05:2c:cc:26:a9:38:44:46:08:2c:d9:ea:69:c2:b0:
                    42:aa:75:59:33:dd:f7:ca:4f:70:a2:9e:90:9f:6c:
                    06:1f:39:01:83:3d:96:8d:c5:f3:b3:12:a4:30:73:
                    aa:ee:c9:c5:dc:86:dd:3d:56:76:93:a3:a6:56:49:
                    db:db:86:46:98:c0:3c:f4:c2:64:31:89:59:37:89:
                    33:62:6e:06:d1:9a:c6:22:c1:d8:4f:0a:37:48:f4:
                    a8:bd:0b:92:ee:c4:09:c3:29:ca:a3:eb:8a:8a:eb:
                    a4:38:8f:05:82:1d:65:1f:29:c6:98:03:79:d3:14:
                    9a:a3:6d:95:4d:16:c4:07:e6:a1:22:33:53:71:50:
                    50:60:ed:df:97:36:b0:5c:d2:41:3f:99:61:64:4c:
                    ce:2e:61:e4:d0:c5:ab:4e:00:38:93:06:96:2a:8a:
                    ba:54:5f:f5:8e:ca:c2:4a:de:5f:59:0c:fd:1f:b5:
                    60:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:6F:5D:39:7D:21:C7:95:69:EE:A0:DA:56:9D:7B:7E:32:34:E9:14
            X509v3 Authority Key Identifier:
                keyid:97:5C:B8:DB:1C:E9:5D:0A:37:5C:7E:8D:E0:7D:0D:78:35:BB:B5:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/975CB8DB1CE95D0A375C7E8DE07D0D7835BBB54D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/975CB8DB1CE95D0A375C7E8DE07D0D7835BBB54D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/323830343a363461303a3a2f33322d313238203d3e20323639343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:64a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         cb:13:05:1d:6d:3b:2a:96:16:a9:de:53:58:8d:f8:ad:f4:6f:
         d8:f6:8b:ef:04:e5:52:6b:95:27:03:f9:4e:3f:eb:43:6b:4c:
         6b:0e:ba:1a:4b:ba:c4:6d:88:fb:08:ab:20:82:e6:43:3d:77:
         07:c5:b0:7c:59:48:68:40:7d:83:94:b6:01:6d:f6:5d:ad:a7:
         e6:0c:c5:69:8d:f7:5d:61:96:12:d3:4a:bc:95:d4:0c:9f:30:
         c8:67:94:5f:10:37:17:c5:e7:21:ca:21:b1:40:59:dd:c0:29:
         b5:ec:33:69:05:27:cb:b1:88:54:da:64:15:b2:b1:05:39:6b:
         fc:4c:e1:f1:f3:fa:d5:61:a5:d0:28:98:fd:42:45:11:6e:4e:
         ef:16:b1:8c:3b:b5:80:f2:33:9f:e9:3d:d6:90:43:77:12:3a:
         90:ea:10:fd:f2:21:7f:9a:60:4a:48:ec:a7:c4:74:9f:d8:5f:
         e1:59:31:88:10:a4:46:87:59:63:41:ec:01:05:29:28:92:8b:
         c3:91:60:a9:fa:bf:53:7f:16:7c:4c:31:00:84:b6:9a:4a:86:
         73:3f:b3:2e:d2:ad:e9:6f:5d:59:60:06:3a:75:bb:21:e2:66:
         8a:c1:87:90:ef:17:90:5d:67:4f:6f:fb:27:ee:9e:a0:a5:f7:
         ab:fa:7b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----