Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ttRqzEcbxTFw4Qz8G6bMbyzBfhqm8R61TYw5PQ1FHdK/0/323830343a6662343a3a2f33322d3438203d3e20323633353939.roa
File:                     323830343a6662343a3a2f33322d3438203d3e20323633353939.roa (raw, json)
Hash identifier:          GMgP7N2Z0L7Vz4fFEjQbNkbTjAv05HJNBzorXAe/8yU=
Subject key identifier:   EF:33:D2:28:BA:15:4A:01:23:67:EC:07:52:72:56:97:35:E0:BC:03
Certificate issuer:       /CN=F2150C97A0C5F33344CC2EF6EADB59C0D7C1EF32
Certificate serial:       0E34505D84EE35B4DF44DD79DB19CE4EF6BB95AF
Authority key identifier: F2:15:0C:97:A0:C5:F3:33:44:CC:2E:F6:EA:DB:59:C0:D7:C1:EF:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2150C97A0C5F33344CC2EF6EADB59C0D7C1EF32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ttRqzEcbxTFw4Qz8G6bMbyzBfhqm8R61TYw5PQ1FHdK/0/323830343a6662343a3a2f33322d3438203d3e20323633353939.roa
Signing time:             Thu 19 Oct 2023 19:11:24 +0000
ROA not before:           Thu 19 Oct 2023 19:06:24 +0000
ROA not after:            Thu 17 Oct 2024 19:11:24 +0000
asID:                     263599
IP address blocks:        2804:fb4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:34:50:5d:84:ee:35:b4:df:44:dd:79:db:19:ce:4e:f6:bb:95:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2150C97A0C5F33344CC2EF6EADB59C0D7C1EF32
        Validity
            Not Before: Oct 19 19:06:24 2023 GMT
            Not After : Oct 17 19:11:24 2024 GMT
        Subject: CN=EF33D228BA154A012367EC075272569735E0BC03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b5:31:e4:5c:18:ab:95:59:c1:a8:4d:b5:74:
                    4a:ae:d4:91:76:fa:8e:0f:95:5e:08:ff:d3:8b:b0:
                    85:d2:17:87:1a:3b:f3:b1:2c:9b:ec:2a:d8:94:bf:
                    18:1c:1b:ca:00:15:2e:ba:44:e3:d3:dc:e7:10:70:
                    7d:fe:7c:f2:8e:31:80:a3:c1:b7:f9:b4:e7:fa:2b:
                    c8:6b:d7:09:85:9d:8c:95:3b:88:44:31:18:ec:2c:
                    d6:e9:28:7f:7b:b4:e2:1d:8b:d1:82:12:d5:2b:a2:
                    0a:a1:53:27:be:6f:57:2e:64:cc:eb:e2:50:d4:44:
                    c4:96:7e:c7:46:03:2a:24:ad:8a:df:8d:f3:67:cc:
                    da:f4:c6:f2:97:2a:e2:c1:93:ac:80:bc:53:54:f8:
                    ff:b1:e9:2f:83:b5:25:d8:05:b2:a5:e4:de:08:8b:
                    a7:fc:65:d3:da:26:ce:c6:9d:36:5e:c0:07:6d:8b:
                    54:6e:4f:1c:9c:0e:d3:fd:0d:60:9d:59:7b:12:e3:
                    5c:31:7e:8a:6c:25:5f:e9:07:86:e0:01:07:6d:1e:
                    5e:a6:42:1b:63:70:df:cb:e7:3c:27:19:cd:c4:1a:
                    e7:a7:26:de:5f:75:49:1b:18:cd:8b:e2:b5:89:da:
                    dd:2d:f3:4a:13:1a:36:4e:00:b5:6d:c3:ef:86:a1:
                    77:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:33:D2:28:BA:15:4A:01:23:67:EC:07:52:72:56:97:35:E0:BC:03
            X509v3 Authority Key Identifier:
                keyid:F2:15:0C:97:A0:C5:F3:33:44:CC:2E:F6:EA:DB:59:C0:D7:C1:EF:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ttRqzEcbxTFw4Qz8G6bMbyzBfhqm8R61TYw5PQ1FHdK/0/F2150C97A0C5F33344CC2EF6EADB59C0D7C1EF32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2150C97A0C5F33344CC2EF6EADB59C0D7C1EF32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ttRqzEcbxTFw4Qz8G6bMbyzBfhqm8R61TYw5PQ1FHdK/0/323830343a6662343a3a2f33322d3438203d3e20323633353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fb4::/32

    Signature Algorithm: sha256WithRSAEncryption
         c8:f5:a4:68:34:c9:e5:47:a2:f2:46:dd:0b:a0:50:b3:dd:b9:
         a6:13:af:d6:7f:01:de:bd:04:94:0c:3f:7c:23:b3:c4:ee:9c:
         13:77:c3:29:89:3c:60:15:4f:bc:91:e7:a7:d1:0a:89:3a:82:
         34:6b:4e:81:85:61:da:61:69:5f:11:dd:ab:c5:e3:32:57:e5:
         03:eb:27:e5:88:29:e1:71:4d:c7:27:10:e8:d3:1c:48:a6:d1:
         75:25:09:8f:20:1e:1e:a7:ef:61:9a:29:2d:c6:97:74:ef:d5:
         84:12:fa:41:3e:2c:94:f0:93:b2:a0:c9:ee:30:d1:4a:bf:7a:
         16:d0:74:dd:c4:75:7c:3b:b1:a7:c7:f7:3c:5b:a6:7b:d7:ef:
         16:be:8e:73:25:23:04:ab:f8:bc:97:ae:da:3c:b4:04:1a:cc:
         77:ad:4c:f4:04:39:7c:d1:d9:28:6a:de:a9:9d:92:7f:26:23:
         8c:dd:7c:e5:ba:73:e3:09:f9:6d:36:f5:88:d7:20:bd:8e:9d:
         67:dc:39:0b:d3:8a:76:37:79:28:c0:a1:56:97:d9:97:b6:2a:
         81:36:fc:ac:15:ef:90:5b:0a:46:0f:eb:cf:3f:9f:08:d6:d7:
         8e:dd:98:07:0c:8d:01:95:c9:6c:f3:a1:73:da:98:7a:33:12:
         88:ff:9a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----