Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/323830343a316537303a3a2f33322d3334203d3e20323634343239.roa
File:                     323830343a316537303a3a2f33322d3334203d3e20323634343239.roa (raw, json)
Hash identifier:          fCcwWKRVhFYG/SzJm5sPTqgnsyixODA62yciBMCwybw=
Subject key identifier:   33:42:7A:FD:1E:B9:A5:67:77:AD:40:A2:8E:AE:B0:2A:44:C0:67:F1
Certificate issuer:       /CN=B96FEADF9316E231DB8131B9B3B6E87DC86A4517
Certificate serial:       02F51A694E10F9353932261BE95707AE94EE55F3
Authority key identifier: B9:6F:EA:DF:93:16:E2:31:DB:81:31:B9:B3:B6:E8:7D:C8:6A:45:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B96FEADF9316E231DB8131B9B3B6E87DC86A4517.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/323830343a316537303a3a2f33322d3334203d3e20323634343239.roa
Signing time:             Tue 16 May 2023 22:45:09 +0000
ROA not before:           Tue 16 May 2023 22:40:09 +0000
ROA not after:            Tue 14 May 2024 22:45:09 +0000
asID:                     264429
IP address blocks:        2804:1e70::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:f5:1a:69:4e:10:f9:35:39:32:26:1b:e9:57:07:ae:94:ee:55:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B96FEADF9316E231DB8131B9B3B6E87DC86A4517
        Validity
            Not Before: May 16 22:40:09 2023 GMT
            Not After : May 14 22:45:09 2024 GMT
        Subject: CN=33427AFD1EB9A56777AD40A28EAEB02A44C067F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d3:03:61:99:13:f3:23:e4:e5:0c:0c:3a:d8:
                    4e:b7:c9:e8:1d:f3:bd:60:6e:b3:24:c1:10:e4:b6:
                    02:2d:32:da:b7:34:dd:aa:72:c9:41:e9:7a:87:23:
                    0a:32:12:96:f4:6e:ba:19:92:16:70:80:21:76:c2:
                    63:36:71:15:82:19:34:9d:6f:d3:dd:f5:55:08:4b:
                    db:d9:c9:8a:28:34:68:ec:88:6f:4f:26:47:f5:77:
                    fc:80:e0:ac:4a:a9:cc:cb:d8:58:0e:44:c5:50:c6:
                    b7:66:d7:2f:70:7c:95:0a:6c:b6:e5:14:86:f1:f4:
                    ae:45:be:c5:84:7c:77:17:8a:5c:f3:9b:bd:cc:5e:
                    dd:f8:40:dc:bd:23:0f:1b:36:b6:5a:e4:f3:e4:28:
                    be:3b:56:a1:a9:dc:79:70:69:c1:a0:a8:11:47:c7:
                    e0:5d:73:08:cb:4a:cf:41:04:0a:29:51:e1:5b:07:
                    72:04:c3:a8:5a:3c:38:28:14:de:1a:e5:0a:2f:d1:
                    af:f6:f5:8b:ba:c3:2d:84:c1:40:1e:7b:30:4f:69:
                    54:6d:f2:65:44:20:85:24:00:e8:1f:4b:87:d6:75:
                    77:c9:8f:66:8e:93:ea:91:0b:c6:dc:a6:9c:0c:8d:
                    f6:d2:f4:1d:14:7e:96:c9:f7:c9:88:7d:e6:60:67:
                    f1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:42:7A:FD:1E:B9:A5:67:77:AD:40:A2:8E:AE:B0:2A:44:C0:67:F1
            X509v3 Authority Key Identifier:
                keyid:B9:6F:EA:DF:93:16:E2:31:DB:81:31:B9:B3:B6:E8:7D:C8:6A:45:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/B96FEADF9316E231DB8131B9B3B6E87DC86A4517.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B96FEADF9316E231DB8131B9B3B6E87DC86A4517.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/323830343a316537303a3a2f33322d3334203d3e20323634343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e70::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:41:a9:79:48:8d:48:5d:d2:4b:70:8e:74:d2:f7:9e:12:d3:
         d5:50:53:30:08:64:fa:94:7f:89:11:69:9d:f8:97:35:23:ad:
         ae:83:27:34:96:b6:91:2e:91:3e:9c:70:0f:51:8d:d2:ce:ff:
         1e:a2:08:4a:c2:bf:31:87:8a:76:d4:13:af:db:cb:2f:6b:84:
         08:03:5c:bf:10:0b:b6:20:8f:66:f8:45:13:c2:31:dd:fa:ed:
         48:29:93:93:11:6d:cb:5c:4b:b0:ca:39:7b:bf:6f:93:fc:6c:
         c2:11:f4:b3:d7:91:55:6c:69:0a:f6:5f:e8:6b:2d:32:7f:78:
         e5:aa:11:4b:f3:cb:a8:2f:83:9d:af:f8:68:a2:67:56:1e:43:
         ee:9f:62:72:6f:4b:30:ea:8a:b9:f9:5d:21:4e:d9:ab:11:c6:
         21:4b:85:5c:27:7e:99:6d:d6:ae:1c:e3:a0:4e:5a:1a:d1:5e:
         2c:a4:c7:d4:46:b9:8f:7b:ca:9c:8d:e6:31:53:12:06:21:fe:
         19:9e:76:a5:fd:0e:91:3d:67:33:10:15:cd:3a:21:68:90:8b:
         20:3f:e6:96:34:41:eb:5c:ca:86:bc:41:a8:a9:4b:c3:09:a5:
         12:4a:af:e7:20:53:26:1a:5f:bf:e0:7e:13:bf:37:9d:1c:46:
         01:82:a4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----