Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/323830343a353330303a3a2f33322d3334203d3e20323638353536.roa
File:                     323830343a353330303a3a2f33322d3334203d3e20323638353536.roa (raw, json)
Hash identifier:          vcl6fSMhdbV2F5Jg5fvjaEl7D36zDCSSc/pJh+wsTws=
Subject key identifier:   5F:21:93:14:7C:47:60:BA:FD:F6:83:0D:58:3A:9C:E1:84:FA:C1:67
Certificate issuer:       /CN=95F57133EC6083B0C1B4A375D38D6EF5EA38DAD5
Certificate serial:       519E9CD8B828219185F0143BE8602BB35D960C95
Authority key identifier: 95:F5:71:33:EC:60:83:B0:C1:B4:A3:75:D3:8D:6E:F5:EA:38:DA:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95F57133EC6083B0C1B4A375D38D6EF5EA38DAD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/323830343a353330303a3a2f33322d3334203d3e20323638353536.roa
Signing time:             Wed 20 Sep 2023 16:38:26 +0000
ROA not before:           Wed 20 Sep 2023 16:33:26 +0000
ROA not after:            Wed 18 Sep 2024 16:38:26 +0000
asID:                     268556
IP address blocks:        2804:5300::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:9e:9c:d8:b8:28:21:91:85:f0:14:3b:e8:60:2b:b3:5d:96:0c:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95F57133EC6083B0C1B4A375D38D6EF5EA38DAD5
        Validity
            Not Before: Sep 20 16:33:26 2023 GMT
            Not After : Sep 18 16:38:26 2024 GMT
        Subject: CN=5F2193147C4760BAFDF6830D583A9CE184FAC167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b5:0d:2e:11:0a:07:e3:41:72:1c:fc:0f:97:
                    ba:65:1a:41:bf:71:9c:ac:5c:e3:6b:6d:fe:73:eb:
                    37:3d:4c:03:c7:c8:2a:cf:f2:ff:0e:b8:8c:58:42:
                    67:c6:ae:51:dd:bf:ba:09:df:f1:08:61:56:62:e8:
                    c1:6d:fc:db:2f:76:99:47:7f:1e:03:57:a9:02:31:
                    c5:f8:c9:2b:36:8a:6f:f6:07:ac:7f:77:de:70:18:
                    c4:8d:56:9b:11:91:29:a6:27:0d:ab:b5:6e:97:27:
                    fd:6d:87:c0:b8:7d:c3:b7:a2:8a:93:77:46:4c:91:
                    00:6a:c3:ec:43:a0:20:e9:2c:54:72:d1:38:58:1a:
                    25:48:f3:bd:03:f1:a4:50:72:2a:ff:b5:41:15:43:
                    e4:68:2e:82:e2:2d:1a:b7:6b:40:f5:c2:06:e7:33:
                    2f:21:8b:a9:3a:69:db:9f:cf:4b:66:86:ad:77:99:
                    8b:89:c5:03:c3:9c:32:f2:33:58:b9:81:b4:6b:3a:
                    61:db:7d:e9:bd:e8:2c:09:62:12:7b:eb:2e:a7:a9:
                    da:d7:6d:8f:54:b2:ab:4b:1b:c4:3e:b8:3c:26:e9:
                    d5:8a:00:a2:f6:0f:de:bc:3d:ec:c0:1c:8b:01:cf:
                    f9:13:a3:78:b9:6a:47:be:d9:ac:3e:42:c6:ab:c8:
                    bc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:21:93:14:7C:47:60:BA:FD:F6:83:0D:58:3A:9C:E1:84:FA:C1:67
            X509v3 Authority Key Identifier:
                keyid:95:F5:71:33:EC:60:83:B0:C1:B4:A3:75:D3:8D:6E:F5:EA:38:DA:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/95F57133EC6083B0C1B4A375D38D6EF5EA38DAD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95F57133EC6083B0C1B4A375D38D6EF5EA38DAD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/323830343a353330303a3a2f33322d3334203d3e20323638353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5300::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:61:7c:97:6c:d3:62:45:ef:c7:14:b2:9b:6a:60:3a:3d:28:
         ce:7d:97:52:28:16:5b:33:a1:c5:8f:b2:c8:91:0a:f6:fd:f2:
         f6:41:67:45:dc:a3:fe:b8:cc:ab:32:d9:c4:cd:b5:18:b3:36:
         6b:e4:12:d7:9d:d5:cb:3e:c2:06:ca:e1:ee:ec:01:f3:d8:55:
         5e:43:6a:7a:6b:88:50:66:43:50:b4:f8:81:5a:5b:5e:94:61:
         06:62:d4:3b:8d:c2:c3:f5:1a:b3:32:99:06:25:b0:14:a8:c5:
         17:31:c0:d1:96:be:b5:56:70:f2:60:f2:12:02:51:3e:81:4b:
         26:41:d5:10:d5:f3:40:63:5d:b2:0c:d8:5a:c4:57:c1:16:27:
         f2:0a:01:4b:03:bb:c1:b0:21:2c:28:ed:3c:fa:3f:8f:68:61:
         6d:d7:b5:98:a3:54:10:7d:e1:70:db:fc:e4:25:68:ae:19:87:
         5c:a8:98:c8:f8:8d:19:5d:c7:36:b9:40:59:ef:30:bb:97:a4:
         5c:20:16:af:f1:55:3b:3f:ba:c7:8b:0f:f9:6b:fb:a5:02:2d:
         60:e7:09:e9:d5:e7:20:13:67:24:f4:2f:ca:57:a8:9c:a0:93:
         64:26:52:d0:81:fe:e1:55:e5:c2:43:5c:d5:19:97:d5:71:f8:
         39:2b:1f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----