Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/323830343a3666343a3a2f33322d3438203d3e20323632353339.roa
File:                     323830343a3666343a3a2f33322d3438203d3e20323632353339.roa (raw, json)
Hash identifier:          BY5E9wcHd2ChVS7Z5sFh8J0lYxAT2rkeZNXGMe7T+nc=
Subject key identifier:   3E:FC:04:A9:56:96:1D:6B:13:1B:96:0F:C8:CD:BA:CD:89:03:3B:92
Certificate issuer:       /CN=E455A68CFCEEC925F1438219DF3DD9581BE0B084
Certificate serial:       0C3952D9098BC300F895EF8BB9E795594FB15D55
Authority key identifier: E4:55:A6:8C:FC:EE:C9:25:F1:43:82:19:DF:3D:D9:58:1B:E0:B0:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E455A68CFCEEC925F1438219DF3DD9581BE0B084.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/323830343a3666343a3a2f33322d3438203d3e20323632353339.roa
Signing time:             Mon 12 Feb 2024 14:12:00 +0000
ROA not before:           Mon 12 Feb 2024 14:07:00 +0000
ROA not after:            Mon 10 Feb 2025 14:12:00 +0000
asID:                     262539
IP address blocks:        2804:6f4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:39:52:d9:09:8b:c3:00:f8:95:ef:8b:b9:e7:95:59:4f:b1:5d:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E455A68CFCEEC925F1438219DF3DD9581BE0B084
        Validity
            Not Before: Feb 12 14:07:00 2024 GMT
            Not After : Feb 10 14:12:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1e:53:57:f8:be:0e:7e:d4:86:3a:ec:f4:88:
                    99:4f:84:73:a9:97:44:b7:45:57:28:5e:28:a5:4f:
                    e0:95:96:9b:cc:2a:83:c7:28:7c:fd:ac:30:49:5c:
                    0f:8f:29:58:d2:f4:30:fb:4d:ba:50:92:3d:29:ec:
                    72:e0:5e:f1:b7:86:0e:c3:2b:48:37:96:ee:b9:3a:
                    a3:fa:91:23:c6:fc:ff:b4:ee:a3:a8:79:4c:22:7d:
                    63:2f:c9:0f:36:6f:ca:a7:0b:16:a8:28:95:e2:ed:
                    93:9b:68:72:e3:fd:21:81:ad:a9:5a:d6:fc:41:c9:
                    99:c6:37:34:cb:60:47:84:26:88:0a:29:64:3d:75:
                    eb:d6:6b:8b:43:34:75:4d:e2:de:38:7f:2e:77:9d:
                    35:4f:ad:85:a2:c1:46:99:67:0d:66:7e:b5:d5:5c:
                    3e:5a:9b:25:a4:d5:44:29:22:1e:d7:ac:3e:7f:0b:
                    3c:ac:61:d5:49:8e:7a:49:46:c7:bc:23:ce:68:5f:
                    0c:1a:99:2f:de:92:37:c1:9a:67:f4:2d:ad:31:37:
                    b7:60:e6:e3:38:25:fd:44:09:10:32:d5:9d:95:d9:
                    86:fa:9c:08:b7:2d:1d:28:28:a1:fa:fd:42:24:cf:
                    26:0b:9c:13:4c:ba:6e:59:67:1f:64:e0:3a:28:f0:
                    02:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:FC:04:A9:56:96:1D:6B:13:1B:96:0F:C8:CD:BA:CD:89:03:3B:92
            X509v3 Authority Key Identifier:
                keyid:E4:55:A6:8C:FC:EE:C9:25:F1:43:82:19:DF:3D:D9:58:1B:E0:B0:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/E455A68CFCEEC925F1438219DF3DD9581BE0B084.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E455A68CFCEEC925F1438219DF3DD9581BE0B084.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/323830343a3666343a3a2f33322d3438203d3e20323632353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:81:aa:a8:12:a1:0d:1b:10:01:b2:1c:66:5a:ed:09:8b:5c:
         95:31:f6:5c:0f:ff:d4:72:fe:30:31:4d:ff:88:d5:25:3f:e2:
         31:bd:cb:84:fa:85:cf:4f:c5:99:de:94:6d:6f:71:0a:af:bf:
         69:17:fd:fb:98:76:fc:2c:64:96:3b:55:e6:89:23:5a:d3:f9:
         46:7c:b7:76:dc:3d:c6:dd:20:d4:47:9a:51:1e:a0:0e:e3:82:
         06:24:d0:68:40:52:1f:1a:3f:38:cb:34:2e:6d:0d:3b:29:fd:
         6c:4d:7a:81:a0:b7:31:bd:eb:28:4c:1c:93:f4:ec:eb:67:d3:
         5a:46:41:3f:21:69:8b:e9:44:db:36:27:bf:4c:6d:23:bc:92:
         b1:58:ba:ee:1f:2e:5c:ee:77:e5:37:4b:2e:5e:06:b7:27:46:
         1c:13:eb:a1:d5:02:8a:34:17:38:cb:1a:fe:e2:7e:ea:04:f9:
         68:a8:d7:c0:5e:9a:f3:36:5b:db:2e:35:10:2a:2f:b2:34:2a:
         88:c1:91:fb:8e:f1:ff:8c:3c:e0:a1:34:d1:be:1f:8d:07:5a:
         45:a6:cb:a7:c9:b1:bf:6a:97:08:bb:61:af:6e:86:0f:bb:fe:
         83:c2:04:15:29:0e:eb:1d:7f:08:a3:5a:16:64:dd:aa:7b:e2:
         38:9e:9e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----