Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/323830343a3230343a3a2f33322d3438203d3e203238313836.roa
File:                     323830343a3230343a3a2f33322d3438203d3e203238313836.roa (raw, json)
Hash identifier:          h2hPrCbe+ZxrzWBhvZyuKiSHQQCesN93asWbhVaYiMw=
Subject key identifier:   FC:85:7E:8C:48:6B:A4:AE:7C:50:27:17:C1:36:33:B1:26:AB:7C:38
Certificate issuer:       /CN=89E9BA06D5A9468A2AFFB4B51EFB9780D4699056
Certificate serial:       6822F351702D3A48D832EA54264D869A59AFC755
Authority key identifier: 89:E9:BA:06:D5:A9:46:8A:2A:FF:B4:B5:1E:FB:97:80:D4:69:90:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/89E9BA06D5A9468A2AFFB4B51EFB9780D4699056.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/323830343a3230343a3a2f33322d3438203d3e203238313836.roa
Signing time:             Wed 22 Nov 2023 19:54:22 +0000
ROA not before:           Wed 22 Nov 2023 19:49:22 +0000
ROA not after:            Wed 20 Nov 2024 19:54:22 +0000
asID:                     28186
IP address blocks:        2804:204::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:22:f3:51:70:2d:3a:48:d8:32:ea:54:26:4d:86:9a:59:af:c7:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89E9BA06D5A9468A2AFFB4B51EFB9780D4699056
        Validity
            Not Before: Nov 22 19:49:22 2023 GMT
            Not After : Nov 20 19:54:22 2024 GMT
        Subject: CN=FC857E8C486BA4AE7C502717C13633B126AB7C38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:69:90:4d:91:28:24:0f:1f:7b:35:36:0e:03:
                    05:9a:5f:92:8c:f3:cc:77:ba:bb:00:f3:e4:c0:91:
                    e0:e6:b6:9e:5a:b6:84:fd:fb:3f:12:dd:b1:4a:4c:
                    ce:66:8b:8e:d6:8f:11:30:68:c6:b5:3a:1f:f0:34:
                    2c:fe:14:2f:b2:a6:ff:0d:51:b9:c7:b7:7d:f0:d0:
                    2a:77:84:92:0f:87:04:06:df:ce:0e:be:a6:fc:e5:
                    c8:b7:5e:41:97:db:c9:df:ce:74:9e:9b:80:e4:5f:
                    d2:31:d3:fc:c6:b5:f4:8c:8e:8e:e0:c6:b4:08:ae:
                    71:bc:f1:a5:18:68:ff:dd:07:77:ae:08:17:09:9d:
                    30:7f:e8:e4:6f:6e:56:52:53:aa:52:bc:21:f5:81:
                    ea:e2:ce:21:10:b6:64:58:47:da:bf:28:c9:5d:a8:
                    3a:d3:6d:f0:f3:97:02:95:07:2e:58:a5:1c:ea:7c:
                    14:19:02:e5:89:9e:14:21:f3:b7:69:68:ca:5e:75:
                    22:5b:32:1f:84:a5:93:a4:07:05:79:94:15:d5:d8:
                    c7:20:44:61:63:c1:19:8f:5d:1d:ba:8d:06:db:1f:
                    d6:c6:1e:9e:12:53:52:63:02:91:d4:af:62:10:a1:
                    07:fb:15:8a:45:d2:82:e6:e0:d3:89:ba:31:b2:2c:
                    ed:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:85:7E:8C:48:6B:A4:AE:7C:50:27:17:C1:36:33:B1:26:AB:7C:38
            X509v3 Authority Key Identifier:
                keyid:89:E9:BA:06:D5:A9:46:8A:2A:FF:B4:B5:1E:FB:97:80:D4:69:90:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/89E9BA06D5A9468A2AFFB4B51EFB9780D4699056.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/89E9BA06D5A9468A2AFFB4B51EFB9780D4699056.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/323830343a3230343a3a2f33322d3438203d3e203238313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:204::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:d7:af:d5:80:4c:aa:ca:7b:a7:12:c6:9c:99:76:04:cb:e4:
         28:e1:66:2a:2f:52:7c:96:b3:1d:62:d4:7b:d1:ef:3c:31:5a:
         1b:32:a3:d9:43:6e:3d:82:e9:65:df:2c:74:e6:6c:48:63:29:
         60:2f:ed:ce:eb:da:b5:17:52:c1:c6:c3:f3:67:76:e4:62:e9:
         8a:86:66:ed:76:c9:03:72:7b:36:81:41:55:5e:5f:42:1c:85:
         61:0e:c5:e2:cb:6a:07:fa:18:79:a5:35:1f:29:69:26:5f:e2:
         c8:ec:62:9d:da:63:14:d0:8b:f0:46:54:5f:16:b8:b5:46:2d:
         36:1f:af:5c:7a:29:7b:81:dd:f3:b5:fd:a2:04:5e:26:18:ea:
         c7:ac:ac:89:47:08:57:01:48:6a:e6:b6:0a:84:46:63:c6:d1:
         47:37:8a:9a:19:bb:83:0d:9c:10:cf:b7:c9:00:98:28:ca:7e:
         c0:df:fe:d8:09:be:a4:34:88:26:72:a9:46:c4:72:0c:d8:e6:
         b6:58:43:ae:eb:7d:bd:42:f3:e3:e9:57:78:b9:7f:99:bc:08:
         4c:31:4d:a5:0b:27:0b:02:3c:0d:22:48:8b:e2:d4:da:1b:27:
         ca:ed:bb:91:19:95:71:48:55:17:81:b8:1a:06:27:a7:e3:9e:
         55:3b:47:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----