Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/323830343a343530383a3a2f33332d3333203d3e20323637363638.roa
File:                     323830343a343530383a3a2f33332d3333203d3e20323637363638.roa (raw, json)
Hash identifier:          s5Nm2kCfOxSbJuj7GmD5+fZsxXFBEGIb36+apkGCb80=
Subject key identifier:   CE:D8:67:F8:69:C9:5E:6F:C1:EE:25:2A:57:0B:2E:89:E3:FB:69:FF
Certificate issuer:       /CN=D04F30B05726FA543C147DA94BFBD44C1D936300
Certificate serial:       6745811FA4AFEB00881DE3F1F9458A1E6879C65E
Authority key identifier: D0:4F:30:B0:57:26:FA:54:3C:14:7D:A9:4B:FB:D4:4C:1D:93:63:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D04F30B05726FA543C147DA94BFBD44C1D936300.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/323830343a343530383a3a2f33332d3333203d3e20323637363638.roa
Signing time:             Tue 13 Feb 2024 19:17:03 +0000
ROA not before:           Tue 13 Feb 2024 19:12:03 +0000
ROA not after:            Tue 11 Feb 2025 19:17:03 +0000
asID:                     267668
IP address blocks:        2804:4508::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:45:81:1f:a4:af:eb:00:88:1d:e3:f1:f9:45:8a:1e:68:79:c6:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D04F30B05726FA543C147DA94BFBD44C1D936300
        Validity
            Not Before: Feb 13 19:12:03 2024 GMT
            Not After : Feb 11 19:17:03 2025 GMT
        Subject: CN=CED867F869C95E6FC1EE252A570B2E89E3FB69FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:ab:8b:55:5f:0a:31:df:76:0a:77:2e:c2:3f:
                    2a:67:35:fb:f6:f6:78:29:48:ae:98:37:0d:51:15:
                    be:fb:c5:89:14:fb:47:57:fb:2d:e0:89:b4:a9:e4:
                    13:83:b4:81:18:a7:bd:e6:41:db:b8:25:d8:6f:f0:
                    e6:74:57:8f:03:cc:78:a6:10:53:1c:40:82:bd:36:
                    b4:4c:8d:e9:1a:48:70:0b:25:98:6d:dc:71:44:c0:
                    fa:0e:9a:dc:c8:a7:93:de:da:c3:17:1d:d0:61:0d:
                    75:67:2b:92:66:5c:2b:b7:e0:b0:5e:0d:7d:2c:05:
                    4c:60:52:b4:e5:23:b9:7d:73:47:ab:aa:2d:95:04:
                    1a:c8:ae:07:c7:37:98:62:c9:c7:96:ac:b1:77:8e:
                    1a:b9:6a:f7:4b:fc:0a:90:83:67:cc:b0:08:7e:3d:
                    bf:c0:53:71:4b:52:f0:27:60:66:f1:31:c4:42:d2:
                    b3:3f:f6:70:f3:34:9c:96:d6:6f:7a:42:d3:c0:4c:
                    89:3c:44:ef:69:83:20:fd:cb:39:43:f5:8c:31:a0:
                    18:70:bc:a8:16:57:2a:48:e3:e1:be:e1:6e:cb:b8:
                    26:0c:95:97:b5:78:cd:07:fe:3d:42:63:64:f8:18:
                    5b:8f:2c:d4:3e:aa:05:dd:74:9a:bb:ff:a3:7e:55:
                    b4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D8:67:F8:69:C9:5E:6F:C1:EE:25:2A:57:0B:2E:89:E3:FB:69:FF
            X509v3 Authority Key Identifier:
                keyid:D0:4F:30:B0:57:26:FA:54:3C:14:7D:A9:4B:FB:D4:4C:1D:93:63:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/D04F30B05726FA543C147DA94BFBD44C1D936300.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D04F30B05726FA543C147DA94BFBD44C1D936300.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/323830343a343530383a3a2f33332d3333203d3e20323637363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4508::/33

    Signature Algorithm: sha256WithRSAEncryption
         71:24:e2:bf:fb:0a:b6:c2:e2:af:72:cd:86:b9:ab:6e:73:82:
         74:4a:f3:7b:62:72:ec:cc:29:36:6d:aa:b8:cf:19:90:25:c2:
         f4:af:2e:1a:7f:d2:d4:1f:93:97:aa:85:d4:7a:cf:8f:df:9d:
         51:8b:73:d6:f2:e4:5d:cc:25:e1:4b:1d:a6:74:eb:83:3e:ea:
         48:72:dc:00:28:d6:e4:0d:29:9b:7a:9f:6b:c8:8e:56:d2:39:
         8a:a6:df:c4:05:9a:f6:97:e6:3e:6a:f9:1f:5c:c0:a7:40:7d:
         72:5b:0c:9a:4d:90:79:ed:9a:9d:99:27:90:41:87:9c:0c:35:
         76:32:a0:3f:87:69:6d:60:55:4f:75:14:67:03:71:ab:29:b9:
         b3:f7:33:4a:54:fd:50:26:62:eb:6f:87:29:ac:33:2f:6c:04:
         da:7b:f4:23:9a:0d:75:ed:e6:fb:37:37:07:29:76:c5:cf:76:
         95:4a:7d:b7:41:86:02:fd:56:9e:6f:26:24:93:6b:3b:86:59:
         53:5a:f1:96:2f:7c:3f:95:c6:bd:eb:46:c1:d9:f0:a2:76:52:
         81:7c:ab:2f:4c:c8:c0:54:89:bd:5f:cb:2c:fe:b3:02:83:76:
         1e:5d:98:ad:e8:d0:c3:47:30:75:1d:ec:fa:73:6c:4c:fb:60:
         2e:41:16:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----