Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a3a2f33332d3333203d3e20323633393430.roa
File:                     323830343a323831383a3a2f33332d3333203d3e20323633393430.roa (raw, json)
Hash identifier:          DQ3jSJz83XTW5TKiMyoL7gDG7ankEKpsqSpRCEyV4lg=
Subject key identifier:   0B:4A:94:F6:DE:B4:42:4C:8E:BF:3D:F2:40:68:E0:14:06:BB:22:DC
Certificate issuer:       /CN=B554F9183DD50D422F8B2C261FCB73CB7E6FC392
Certificate serial:       7718FE2D9A07F55F2810F994B3F59B5EC7FF070C
Authority key identifier: B5:54:F9:18:3D:D5:0D:42:2F:8B:2C:26:1F:CB:73:CB:7E:6F:C3:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B554F9183DD50D422F8B2C261FCB73CB7E6FC392.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a3a2f33332d3333203d3e20323633393430.roa
Signing time:             Mon 18 Dec 2023 17:26:31 +0000
ROA not before:           Mon 18 Dec 2023 17:21:31 +0000
ROA not after:            Mon 16 Dec 2024 17:26:31 +0000
asID:                     263940
IP address blocks:        2804:2818::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:18:fe:2d:9a:07:f5:5f:28:10:f9:94:b3:f5:9b:5e:c7:ff:07:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B554F9183DD50D422F8B2C261FCB73CB7E6FC392
        Validity
            Not Before: Dec 18 17:21:31 2023 GMT
            Not After : Dec 16 17:26:31 2024 GMT
        Subject: CN=0B4A94F6DEB4424C8EBF3DF24068E01406BB22DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c7:fd:b5:a5:60:23:5c:e1:ff:71:82:2d:55:
                    f2:f3:15:ec:91:cb:15:a7:fc:71:d2:f2:ec:21:87:
                    f1:cc:60:5d:e9:bc:02:74:af:81:5c:b2:ef:a3:5d:
                    c0:2d:f4:82:f9:a3:9b:48:9b:5c:60:d2:40:c4:fd:
                    dd:d9:3a:fd:a8:e4:ae:0c:21:be:df:5e:c6:e1:b9:
                    77:ba:99:0a:78:ba:4a:16:c2:1d:e4:50:13:1f:ad:
                    f9:d9:89:94:61:c0:bd:4d:0c:2c:97:be:b5:9d:c1:
                    68:ac:dd:b0:0d:f1:10:f0:00:21:2a:ee:33:99:14:
                    d6:77:31:c9:3a:b7:f9:19:77:ff:5a:53:39:85:f7:
                    8e:8b:14:68:2e:70:c1:7b:87:9f:e1:75:7d:80:15:
                    01:a0:89:a9:65:e7:dd:1f:ae:79:db:c9:df:99:4e:
                    a4:21:a0:eb:15:01:72:f7:b3:26:1e:a0:f7:e5:84:
                    ad:8f:08:e4:6b:7b:a2:ca:68:bf:6b:c2:4e:0c:79:
                    e3:ae:81:28:4b:d8:d1:b4:e1:bb:68:ea:d3:ed:40:
                    e3:cc:02:36:d3:fb:61:d6:bf:19:8b:c1:bb:6b:35:
                    8d:25:1f:cf:55:84:90:6a:ff:ca:66:08:c9:e2:0a:
                    ca:a5:53:d7:b9:00:d0:4e:67:45:5c:73:ce:3d:93:
                    24:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:4A:94:F6:DE:B4:42:4C:8E:BF:3D:F2:40:68:E0:14:06:BB:22:DC
            X509v3 Authority Key Identifier:
                keyid:B5:54:F9:18:3D:D5:0D:42:2F:8B:2C:26:1F:CB:73:CB:7E:6F:C3:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/B554F9183DD50D422F8B2C261FCB73CB7E6FC392.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B554F9183DD50D422F8B2C261FCB73CB7E6FC392.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a3a2f33332d3333203d3e20323633393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2818::/33

    Signature Algorithm: sha256WithRSAEncryption
         0d:0f:80:ea:f3:19:b6:c4:f1:e0:1e:8f:98:0f:b8:27:56:82:
         f9:fa:6d:5c:7f:a9:29:f5:cf:bc:36:d7:40:d9:ac:9e:6d:ac:
         c6:72:ba:28:6a:53:aa:59:bc:de:2c:2c:3c:1a:4f:a8:75:c4:
         fd:ef:df:c5:4d:ec:25:f0:67:45:e4:cc:ab:51:7d:58:1c:b1:
         8f:d9:8d:a0:0b:a2:84:00:97:1c:ba:85:73:5e:11:8a:ef:de:
         b2:ee:4a:60:2b:e5:dd:b2:27:89:2e:15:f8:21:70:d7:fd:38:
         6e:02:a2:51:af:d4:f0:42:29:30:f8:f3:83:45:b8:fe:62:e1:
         a5:1d:c3:c6:2a:4c:08:e1:aa:77:c3:07:6d:55:16:04:2d:c3:
         d6:c8:60:39:d4:de:b2:49:c4:a8:be:0b:b3:58:bc:53:08:83:
         4d:97:5d:f2:96:79:45:1b:e0:82:af:d2:db:d2:0e:8c:71:98:
         88:4d:70:48:d4:73:96:63:bd:c3:cf:47:db:df:8e:f5:fc:9d:
         ea:d4:e2:7a:d4:df:95:11:17:b7:de:aa:79:f2:5e:7b:05:ba:
         d6:3f:9c:83:d9:29:dc:cd:c7:23:63:2a:36:aa:bc:d9:04:e4:
         4c:74:c2:dc:88:d7:f8:b9:94:c2:b7:3c:f4:44:cb:93:6b:24:
         db:d9:53:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----