Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HnbfHa1eVLksdfm7YCzsmp1QmcAdUm7XRSu4ihuWdaqV/0/323830343a6562343a3a2f33322d3438203d3e203631383930.roa
File:                     323830343a6562343a3a2f33322d3438203d3e203631383930.roa (raw, json)
Hash identifier:          LAanAN1XqopgmvM2M8l+J0fv447igTmE327bDA9T/qE=
Subject key identifier:   45:EC:BB:B9:EC:07:9B:4E:D4:0D:5B:D0:CD:3A:E4:DE:E2:33:CF:3E
Certificate issuer:       /CN=5A8CAA67AD0EB2D7CC2B8E1DF555EA81F5853E05
Certificate serial:       77E1D99C27EFDF54EFAD61868FBDE59371B12B78
Authority key identifier: 5A:8C:AA:67:AD:0E:B2:D7:CC:2B:8E:1D:F5:55:EA:81:F5:85:3E:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A8CAA67AD0EB2D7CC2B8E1DF555EA81F5853E05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnbfHa1eVLksdfm7YCzsmp1QmcAdUm7XRSu4ihuWdaqV/0/323830343a6562343a3a2f33322d3438203d3e203631383930.roa
Signing time:             Tue 12 Sep 2023 13:09:12 +0000
ROA not before:           Tue 12 Sep 2023 13:04:12 +0000
ROA not after:            Tue 10 Sep 2024 13:09:12 +0000
asID:                     61890
IP address blocks:        2804:eb4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:e1:d9:9c:27:ef:df:54:ef:ad:61:86:8f:bd:e5:93:71:b1:2b:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A8CAA67AD0EB2D7CC2B8E1DF555EA81F5853E05
        Validity
            Not Before: Sep 12 13:04:12 2023 GMT
            Not After : Sep 10 13:09:12 2024 GMT
        Subject: CN=45ECBBB9EC079B4ED40D5BD0CD3AE4DEE233CF3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8b:ed:c7:d6:c7:d0:91:39:29:30:c8:8a:ca:
                    4c:67:62:f6:90:50:df:0d:63:91:ea:b6:d8:c2:06:
                    12:52:85:b9:3e:e2:e7:9c:d0:83:90:08:92:2d:6a:
                    de:5d:fc:f4:06:1f:62:ec:c4:82:8c:b7:c1:50:af:
                    fe:94:05:99:eb:b9:96:1e:10:eb:ff:5b:84:7c:bb:
                    f1:04:6e:08:a0:a6:9e:96:37:e7:05:5a:2c:b0:9f:
                    48:d8:95:d9:b3:5a:a8:d4:a9:17:dd:29:7b:3c:80:
                    95:5b:b4:45:35:76:d9:9e:0a:65:a4:16:78:41:29:
                    14:c3:eb:52:ab:e9:7a:97:5e:2c:64:e2:73:c0:23:
                    84:60:d5:6f:72:ee:6c:30:46:34:8a:4d:36:7b:aa:
                    7f:f2:aa:92:77:ee:69:e7:99:7b:fa:75:03:9a:6b:
                    40:a4:bd:4d:f1:57:d3:e4:6b:b4:75:91:38:17:63:
                    91:37:77:02:d0:18:17:f3:83:58:4b:ac:d1:2e:f1:
                    30:98:68:65:7d:ab:e6:ed:93:8e:b3:23:92:41:93:
                    b5:f8:ef:d5:e4:6b:95:97:ea:cb:cd:0b:f2:9f:57:
                    5b:53:00:33:2b:65:c1:21:30:91:25:18:8e:61:ad:
                    24:fc:e6:ab:49:c0:cb:c4:a9:46:0d:00:28:1c:17:
                    79:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:EC:BB:B9:EC:07:9B:4E:D4:0D:5B:D0:CD:3A:E4:DE:E2:33:CF:3E
            X509v3 Authority Key Identifier:
                keyid:5A:8C:AA:67:AD:0E:B2:D7:CC:2B:8E:1D:F5:55:EA:81:F5:85:3E:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnbfHa1eVLksdfm7YCzsmp1QmcAdUm7XRSu4ihuWdaqV/0/5A8CAA67AD0EB2D7CC2B8E1DF555EA81F5853E05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A8CAA67AD0EB2D7CC2B8E1DF555EA81F5853E05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnbfHa1eVLksdfm7YCzsmp1QmcAdUm7XRSu4ihuWdaqV/0/323830343a6562343a3a2f33322d3438203d3e203631383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:eb4::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:a1:ac:fb:80:43:03:5e:4f:fb:f2:1a:9f:dc:f3:17:93:3f:
         82:14:97:dc:92:ef:1f:12:06:86:28:aa:7b:e1:42:0c:52:10:
         9a:d4:bf:08:66:ca:dc:ac:ae:f9:17:b7:df:62:2e:c6:28:8e:
         cd:ac:85:cc:2a:fe:dc:72:f8:a6:3b:f1:7c:12:ad:69:de:51:
         96:8f:d3:20:f3:b9:0a:16:b9:19:1b:1d:0f:b4:4f:81:b8:16:
         b9:60:5d:27:0c:b1:b6:bd:15:eb:03:a8:52:10:58:4c:cf:54:
         1d:1f:e4:35:78:87:9e:1b:99:88:91:e5:98:ae:06:5c:ee:ed:
         c4:63:69:91:65:07:f2:50:ab:0d:d5:fd:6d:d4:f6:70:02:9f:
         44:46:1c:c5:71:57:7b:32:cb:4a:21:13:25:ac:b7:eb:1d:82:
         e7:b1:85:7b:8c:a6:9c:80:a1:4e:f8:cf:c2:74:bb:4b:3e:69:
         57:83:4c:18:65:47:c0:ad:df:99:01:65:07:ca:19:9b:35:bc:
         db:25:f2:99:0b:ee:c2:87:84:5e:0e:6f:70:f2:21:b8:3e:8b:
         4c:16:ed:ce:1d:cb:0f:df:d6:d2:d5:d4:e4:54:5e:55:a2:2c:
         db:5e:08:9c:8f:1c:6c:14:a1:6f:63:ee:d0:f4:23:d7:a0:ec:
         70:14:d2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----