Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/323830343a356562633a383030303a3a2f33332d3333203d3e20323639303533.roa
File:                     323830343a356562633a383030303a3a2f33332d3333203d3e20323639303533.roa (raw, json)
Hash identifier:          5vO8Y8wA/0dOnBkLjTLV1LaJILB/+SGISdAHg3UTQGs=
Subject key identifier:   91:D3:BF:AD:E3:07:CF:DA:3E:3E:FE:CF:04:76:36:1B:AC:1A:02:AF
Certificate issuer:       /CN=FEF8DD8F52EEF03FF2CD9C97A831813044AADE9C
Certificate serial:       4CD09C99E3C6A53639449992CEE8AFC0BC279E16
Authority key identifier: FE:F8:DD:8F:52:EE:F0:3F:F2:CD:9C:97:A8:31:81:30:44:AA:DE:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEF8DD8F52EEF03FF2CD9C97A831813044AADE9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/323830343a356562633a383030303a3a2f33332d3333203d3e20323639303533.roa
Signing time:             Sun 04 Feb 2024 03:16:26 +0000
ROA not before:           Sun 04 Feb 2024 03:11:26 +0000
ROA not after:            Sun 02 Feb 2025 03:16:26 +0000
asID:                     269053
IP address blocks:        2804:5ebc:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:d0:9c:99:e3:c6:a5:36:39:44:99:92:ce:e8:af:c0:bc:27:9e:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEF8DD8F52EEF03FF2CD9C97A831813044AADE9C
        Validity
            Not Before: Feb  4 03:11:26 2024 GMT
            Not After : Feb  2 03:16:26 2025 GMT
        Subject: CN=91D3BFADE307CFDA3E3EFECF0476361BAC1A02AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b6:ef:ac:ff:4c:64:fe:b0:d7:f2:d6:d7:ff:
                    fd:0f:7d:12:28:7e:ed:a7:e6:a9:aa:e2:38:22:a0:
                    7e:73:1f:64:e3:ba:01:49:50:ac:9e:8d:78:ad:82:
                    6c:ca:b0:43:c8:27:7e:e4:45:75:a0:fd:58:39:3b:
                    8a:6f:63:42:3d:7a:eb:a5:dd:d6:c7:b2:19:3f:11:
                    d2:48:b9:5d:83:97:37:d2:f7:e7:7f:96:54:4e:d1:
                    f1:91:b6:a9:26:0c:e3:26:9d:a9:ff:d4:89:0b:e8:
                    b1:97:9a:28:0d:50:6e:7c:ae:f6:1c:86:ca:20:ae:
                    73:d0:ef:62:46:84:38:fd:73:1b:3f:a3:68:e5:2e:
                    09:0d:ab:99:aa:26:61:81:af:f4:a2:7f:e6:85:6c:
                    7c:e8:c9:06:93:c2:4a:34:b7:a5:ac:af:30:b3:02:
                    72:f2:74:6e:37:5b:9e:97:89:4a:7b:2c:34:8b:ee:
                    75:b8:8f:bf:60:3d:d3:4c:ef:fc:b9:47:20:e1:56:
                    25:41:35:4a:f5:15:b7:37:1d:8d:ff:7c:df:76:77:
                    9f:01:02:62:56:ae:10:7a:4a:9d:e6:4c:72:f1:89:
                    e0:31:ad:4a:cd:55:98:d4:f2:a3:d3:95:c0:2c:af:
                    d0:de:fc:fd:44:10:ea:8a:e8:0c:48:f9:b8:11:e4:
                    dc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:D3:BF:AD:E3:07:CF:DA:3E:3E:FE:CF:04:76:36:1B:AC:1A:02:AF
            X509v3 Authority Key Identifier:
                keyid:FE:F8:DD:8F:52:EE:F0:3F:F2:CD:9C:97:A8:31:81:30:44:AA:DE:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/FEF8DD8F52EEF03FF2CD9C97A831813044AADE9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEF8DD8F52EEF03FF2CD9C97A831813044AADE9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/323830343a356562633a383030303a3a2f33332d3333203d3e20323639303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ebc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         5a:ab:8f:7f:7c:57:b6:df:7d:b3:10:d7:f0:c2:0c:59:db:59:
         9d:77:62:f1:99:c7:34:ac:b6:27:ef:fa:45:8a:c6:6b:58:6e:
         35:d8:a5:a6:d6:b5:2a:f0:ca:b4:ab:01:06:d8:39:9f:a0:0b:
         42:ee:e8:91:74:3e:d5:2b:62:17:cd:f7:2d:5f:dd:e1:14:8e:
         56:01:50:14:2d:cb:8f:5f:8b:a0:1e:b2:88:31:ff:a2:ed:1a:
         89:30:7c:52:bb:cc:49:86:55:88:ef:a4:85:e4:27:7d:5f:c8:
         83:2c:03:d3:06:f5:25:b9:5d:11:34:e6:13:21:07:8b:39:07:
         c5:85:18:b7:d3:ab:b7:cb:13:16:52:c8:35:72:62:e6:f5:57:
         1c:92:81:9a:29:a7:d4:84:10:24:86:49:dc:79:ca:71:72:c7:
         34:52:c0:a1:bf:15:79:12:39:2a:be:6f:f9:bc:07:c8:a6:d7:
         6f:c9:63:21:86:c1:3f:2c:28:c6:20:df:3a:9f:2c:97:d6:e8:
         e0:e7:91:38:6b:a9:2d:cf:4d:8e:6d:40:35:e8:46:da:4d:36:
         b2:76:08:11:eb:b4:57:6f:a8:ce:dc:ac:de:4a:78:3f:bc:47:
         2e:b7:18:7a:17:e5:b1:23:42:7b:64:55:27:cc:3b:79:8a:31:
         12:27:1e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----