Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a383030303a3a2f33332d3333203d3e20323633393430.roa
File:                     323830343a323831383a383030303a3a2f33332d3333203d3e20323633393430.roa (raw, json)
Hash identifier:          9P6Bb3ZXxSQrk8oVZFRL89uza8Io28VGQRIZdAJ+pI4=
Subject key identifier:   E6:A6:E1:C7:60:56:8B:2B:48:C1:AC:4F:B2:3D:0A:3F:D6:E1:E3:1A
Certificate issuer:       /CN=B554F9183DD50D422F8B2C261FCB73CB7E6FC392
Certificate serial:       2F2365D0C4E16EAEC51D03EA9A6697B2FD8858FD
Authority key identifier: B5:54:F9:18:3D:D5:0D:42:2F:8B:2C:26:1F:CB:73:CB:7E:6F:C3:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B554F9183DD50D422F8B2C261FCB73CB7E6FC392.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a383030303a3a2f33332d3333203d3e20323633393430.roa
Signing time:             Mon 18 Dec 2023 17:26:30 +0000
ROA not before:           Mon 18 Dec 2023 17:21:30 +0000
ROA not after:            Mon 16 Dec 2024 17:26:30 +0000
asID:                     263940
IP address blocks:        2804:2818:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:23:65:d0:c4:e1:6e:ae:c5:1d:03:ea:9a:66:97:b2:fd:88:58:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B554F9183DD50D422F8B2C261FCB73CB7E6FC392
        Validity
            Not Before: Dec 18 17:21:30 2023 GMT
            Not After : Dec 16 17:26:30 2024 GMT
        Subject: CN=E6A6E1C760568B2B48C1AC4FB23D0A3FD6E1E31A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:53:f6:00:e5:df:7d:8f:ad:2e:f3:7e:b2:5b:
                    cd:f3:5e:28:72:a5:07:e7:0b:a9:76:4d:20:1b:99:
                    19:ab:bc:2a:7f:9e:d4:2d:a2:37:46:86:21:9e:dc:
                    6d:e9:dc:2e:c4:0e:e4:9d:a8:2c:45:f9:e1:04:5a:
                    06:9a:17:42:ac:68:27:3b:5e:50:8d:63:4f:88:91:
                    b9:48:57:fe:f8:14:5e:59:02:6e:d5:5b:64:b5:2e:
                    20:7c:0c:21:88:0f:a3:bd:db:35:2a:87:e1:89:02:
                    69:f4:49:3b:72:24:c4:7f:47:4a:32:71:f3:71:33:
                    fc:cb:67:5f:10:5e:3d:b3:97:c7:58:9e:c4:12:15:
                    33:ef:a2:f4:ee:93:6c:80:45:55:f7:5d:af:9e:02:
                    51:81:f7:cf:72:db:f5:40:e4:6b:c5:a7:07:28:8b:
                    24:74:51:32:0e:7c:7d:1e:40:2e:14:09:68:d8:fd:
                    24:ad:f7:12:cf:57:12:7f:33:76:80:d9:e3:51:0b:
                    b1:00:da:df:f3:e0:c9:0b:21:13:04:17:11:bf:42:
                    10:be:27:68:3f:2a:73:ea:1f:25:e3:eb:ca:89:ee:
                    f0:24:54:76:9b:d0:7e:95:87:a0:18:c7:94:68:7e:
                    b5:09:3b:73:32:8c:9b:43:de:e1:d3:ee:8f:35:90:
                    30:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A6:E1:C7:60:56:8B:2B:48:C1:AC:4F:B2:3D:0A:3F:D6:E1:E3:1A
            X509v3 Authority Key Identifier:
                keyid:B5:54:F9:18:3D:D5:0D:42:2F:8B:2C:26:1F:CB:73:CB:7E:6F:C3:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/B554F9183DD50D422F8B2C261FCB73CB7E6FC392.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B554F9183DD50D422F8B2C261FCB73CB7E6FC392.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a383030303a3a2f33332d3333203d3e20323633393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2818:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         4f:2b:43:21:1b:c6:a2:a5:77:01:c5:b8:d5:07:06:d3:e4:43:
         73:78:e6:34:04:86:de:54:01:52:f9:80:0f:e4:d2:1f:73:93:
         80:94:cc:28:0d:cc:fc:a5:79:b6:b7:ae:cd:cd:ad:87:5a:5d:
         52:ad:21:7e:58:42:2c:46:dc:be:71:2b:5b:fe:3d:1f:3c:e0:
         3b:c1:a6:1e:c6:55:3c:5c:9d:7c:65:ff:33:96:f5:82:8f:60:
         0c:3a:2d:09:ac:2e:b7:85:dd:e8:6f:ec:45:5b:d1:ef:63:dd:
         83:03:2a:18:71:b0:bd:fa:73:38:9c:9f:bf:d6:79:46:c9:6f:
         30:68:19:c8:17:10:44:01:53:64:56:8e:29:05:9c:5d:df:b4:
         7f:17:4c:dd:64:b4:43:9d:a9:7d:d4:ab:82:c9:66:33:d1:58:
         40:df:a0:e3:97:45:ac:d9:8d:e8:14:fe:64:f4:34:83:7f:01:
         d2:43:69:bb:d8:56:7e:e6:0a:ad:93:78:85:df:0b:c0:56:88:
         15:42:cb:ff:04:b6:be:2c:46:4b:90:01:8c:c7:de:9e:85:cc:
         ad:93:7d:81:47:0f:0c:45:00:27:59:43:e4:3f:ca:1b:65:23:
         be:72:60:7e:12:79:a3:ce:93:7a:9c:6d:b4:8e:92:73:54:1a:
         b9:a1:ce:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----