Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/323830343a336566343a3a2f33322d3438203d3e20323636363331.roa
File:                     323830343a336566343a3a2f33322d3438203d3e20323636363331.roa (raw, json)
Hash identifier:          tn1+3eyYkrnSUdbJzttxE/jMsqUhRrBSB2AcWkW7Qy8=
Subject key identifier:   3D:1C:BB:27:C7:18:52:7E:6F:BA:FF:73:65:AB:BB:FC:5F:2A:EE:30
Certificate issuer:       /CN=D1DE8FC7F5072264D29EC8C48C39E67B06AE9579
Certificate serial:       6A1AFCB2DF51A1473E7A90F765E05DF2CBF2769E
Authority key identifier: D1:DE:8F:C7:F5:07:22:64:D2:9E:C8:C4:8C:39:E6:7B:06:AE:95:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1DE8FC7F5072264D29EC8C48C39E67B06AE9579.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/323830343a336566343a3a2f33322d3438203d3e20323636363331.roa
Signing time:             Fri 15 Dec 2023 13:25:51 +0000
ROA not before:           Fri 15 Dec 2023 13:20:51 +0000
ROA not after:            Fri 13 Dec 2024 13:25:51 +0000
asID:                     266631
IP address blocks:        2804:3ef4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:1a:fc:b2:df:51:a1:47:3e:7a:90:f7:65:e0:5d:f2:cb:f2:76:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1DE8FC7F5072264D29EC8C48C39E67B06AE9579
        Validity
            Not Before: Dec 15 13:20:51 2023 GMT
            Not After : Dec 13 13:25:51 2024 GMT
        Subject: CN=3D1CBB27C718527E6FBAFF7365ABBBFC5F2AEE30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:dd:20:dc:69:15:fb:0c:87:a3:bf:64:07:cf:
                    58:4c:e2:52:ad:5c:3b:54:df:20:69:15:e7:a5:2a:
                    41:be:17:b0:f8:0f:0c:ef:53:50:7e:f2:90:4a:11:
                    2d:90:64:b9:b0:6a:7d:c8:c6:7b:9f:e1:db:b1:1b:
                    bd:16:05:ef:66:4d:10:47:79:f3:a8:7c:e9:9a:78:
                    7a:cd:24:58:80:f7:f7:55:9d:47:ea:f2:c8:99:e2:
                    de:09:dd:1a:3e:d5:51:5d:e0:50:ce:74:01:da:38:
                    d1:ff:4f:fd:06:a2:3f:bb:0d:53:7d:99:8a:31:86:
                    e3:d2:f5:5f:72:c2:6f:a4:76:de:34:27:37:96:0d:
                    97:ef:2a:a0:04:69:d6:3a:a9:4c:14:3a:a3:19:1d:
                    60:17:7a:ff:3a:3b:81:79:1c:91:b7:a5:83:ef:73:
                    05:b6:ca:a0:2f:34:6e:36:95:49:ac:5e:d1:5d:8f:
                    48:d4:10:e7:9f:c0:90:62:35:13:ba:58:bf:f0:c9:
                    a6:ca:7f:70:79:c3:d4:f2:fa:db:89:50:ef:c9:1a:
                    27:20:f2:c6:14:07:a3:6f:5a:17:4e:e8:1d:8c:44:
                    4e:48:7b:9d:cf:39:89:3f:12:23:76:d6:c5:b2:b6:
                    36:d9:ee:88:a6:ea:8e:89:8b:9b:bc:5a:fc:65:5d:
                    bf:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:1C:BB:27:C7:18:52:7E:6F:BA:FF:73:65:AB:BB:FC:5F:2A:EE:30
            X509v3 Authority Key Identifier:
                keyid:D1:DE:8F:C7:F5:07:22:64:D2:9E:C8:C4:8C:39:E6:7B:06:AE:95:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/D1DE8FC7F5072264D29EC8C48C39E67B06AE9579.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1DE8FC7F5072264D29EC8C48C39E67B06AE9579.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/323830343a336566343a3a2f33322d3438203d3e20323636363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ef4::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:28:56:5c:30:df:a8:f7:7b:22:2f:8e:92:72:bf:62:d7:e3:
         12:c0:6b:9f:c0:84:d9:67:97:15:b0:00:77:05:d6:ee:2c:88:
         a0:05:5c:0e:a4:56:0f:01:5f:fd:f3:95:0f:18:1f:8d:23:c9:
         7f:ab:98:44:61:6c:c0:db:7b:a9:f8:be:43:e8:88:fb:f7:13:
         1a:21:08:1a:7d:4f:06:a0:54:3e:4c:3d:d3:73:a7:bd:6d:c6:
         ea:49:b5:71:8c:4b:83:e3:e7:a4:3c:64:e7:a3:a5:aa:28:4c:
         6d:f0:3a:27:8e:76:90:b5:e1:8a:12:e6:b8:5d:9a:c6:7f:5c:
         45:4c:0b:53:7b:bb:29:10:b1:6d:86:63:bb:40:10:3f:6e:5a:
         42:be:c1:84:f5:a1:d2:79:ee:1b:be:9c:20:e1:71:65:13:14:
         ea:a1:6d:35:a2:b1:0b:ab:cc:41:5d:96:50:e4:60:ac:6d:d7:
         da:76:8a:37:a8:38:71:3d:1c:c8:6c:a5:6c:14:86:28:e3:3d:
         a7:34:17:0f:ed:fb:a4:37:ef:01:ff:85:d5:88:13:18:e4:1f:
         3a:c2:5b:d3:fa:a8:da:76:9c:0d:a6:f9:51:72:df:ac:ae:de:
         77:82:ca:26:38:3d:82:44:b6:70:8a:f5:12:1d:bd:42:5f:47:
         fd:a8:22:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----