Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6k2BPqnyyMkf8VynTrqvQUMu8CKpvez19vbeUJ3ggNwv/0/323830343a383661383a3a2f33322d313238203d3e20323732363538.roa
File:                     323830343a383661383a3a2f33322d313238203d3e20323732363538.roa (raw, json)
Hash identifier:          pqfzw8qgLQ88sfgL6apPhS3kUOigyP9UBXFyPuyJSW8=
Subject key identifier:   C4:E0:C9:F7:1E:B2:DA:B5:C7:25:3C:89:C6:CF:BD:DD:02:C2:7F:33
Certificate issuer:       /CN=BB500746EDFA8FB49E530DF613AE8ADE0DD7A2FB
Certificate serial:       4EB399E32D96EA5E4F68F600856A8BA69A93E588
Authority key identifier: BB:50:07:46:ED:FA:8F:B4:9E:53:0D:F6:13:AE:8A:DE:0D:D7:A2:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB500746EDFA8FB49E530DF613AE8ADE0DD7A2FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6k2BPqnyyMkf8VynTrqvQUMu8CKpvez19vbeUJ3ggNwv/0/323830343a383661383a3a2f33322d313238203d3e20323732363538.roa
Signing time:             Fri 19 May 2023 17:24:22 +0000
ROA not before:           Fri 19 May 2023 17:19:22 +0000
ROA not after:            Fri 17 May 2024 17:24:22 +0000
asID:                     272658
IP address blocks:        2804:86a8::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:b3:99:e3:2d:96:ea:5e:4f:68:f6:00:85:6a:8b:a6:9a:93:e5:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB500746EDFA8FB49E530DF613AE8ADE0DD7A2FB
        Validity
            Not Before: May 19 17:19:22 2023 GMT
            Not After : May 17 17:24:22 2024 GMT
        Subject: CN=C4E0C9F71EB2DAB5C7253C89C6CFBDDD02C27F33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c0:4c:ce:95:f6:52:10:8d:8d:81:62:4d:41:
                    ac:0f:c6:69:15:48:f2:ca:7d:a9:fe:34:52:92:70:
                    59:22:22:00:f9:f8:b5:2c:a4:71:86:96:04:a9:8e:
                    37:69:55:5e:c6:9c:86:57:35:da:23:ff:35:dd:1d:
                    61:fe:97:ca:2b:62:7a:81:21:83:e0:d4:7b:96:19:
                    72:cb:61:e5:21:58:ff:db:be:f3:5d:4c:c3:9d:f7:
                    81:d4:73:9f:3c:0f:6f:fd:8f:21:5d:52:ec:1f:79:
                    4d:07:f1:63:d4:1f:e0:99:a7:65:19:db:0e:3d:cd:
                    f2:e2:35:04:02:1d:25:0a:7e:7f:b7:e2:0a:7d:11:
                    14:93:b2:4d:28:76:07:07:ed:7d:03:b0:d1:19:16:
                    90:2c:53:ba:50:69:c3:a6:c5:8d:25:7d:3f:af:0b:
                    56:ad:6e:ef:cc:66:a9:23:df:be:d0:a3:4a:d8:28:
                    8a:7b:2c:dc:39:00:b7:75:fa:a1:49:c2:67:c8:72:
                    59:c6:34:a0:43:24:fb:40:29:0a:55:da:14:38:97:
                    8c:fd:bb:b1:6b:cd:19:15:d4:58:2a:f4:9a:63:7d:
                    ba:7f:ba:c3:07:32:bf:ba:88:1a:31:4a:5b:ec:a8:
                    38:86:00:45:88:2f:d4:c7:6b:ef:9b:35:f3:1d:b0:
                    b8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:E0:C9:F7:1E:B2:DA:B5:C7:25:3C:89:C6:CF:BD:DD:02:C2:7F:33
            X509v3 Authority Key Identifier:
                keyid:BB:50:07:46:ED:FA:8F:B4:9E:53:0D:F6:13:AE:8A:DE:0D:D7:A2:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6k2BPqnyyMkf8VynTrqvQUMu8CKpvez19vbeUJ3ggNwv/0/BB500746EDFA8FB49E530DF613AE8ADE0DD7A2FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB500746EDFA8FB49E530DF613AE8ADE0DD7A2FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6k2BPqnyyMkf8VynTrqvQUMu8CKpvez19vbeUJ3ggNwv/0/323830343a383661383a3a2f33322d313238203d3e20323732363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:86a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:e6:bc:40:70:74:c7:1d:a5:ed:15:20:95:23:38:dd:93:b8:
         a2:8c:e9:ed:5f:37:9f:be:88:ef:49:b1:7a:7d:73:f9:b6:9b:
         fb:39:b5:26:e1:64:f1:d3:69:bc:3d:3e:1c:63:00:9d:60:f4:
         22:2f:f9:4f:5b:5c:dc:fc:c1:a7:6b:21:b2:f7:bc:3d:e4:04:
         1e:25:99:61:3e:6d:92:4a:32:31:f0:b6:67:79:55:41:6b:11:
         cb:0b:bb:59:d4:37:18:7c:d0:24:29:7f:9a:9c:55:56:1c:5a:
         db:49:b1:f6:a4:a5:15:f1:f3:dc:be:1f:70:71:fe:c8:1d:34:
         4d:ca:38:93:42:f7:c1:2c:fa:91:fc:1e:7c:05:77:f6:84:85:
         81:bb:45:1c:bc:94:36:fb:eb:2b:4b:49:ae:91:21:be:5e:20:
         66:51:0d:80:96:22:a8:11:88:2f:4b:ed:19:81:c4:bf:d6:cc:
         54:71:95:48:b2:8a:de:82:df:41:f9:7a:1e:08:b5:ec:c9:ab:
         c8:95:ad:a3:7c:66:19:77:06:42:3d:5e:97:71:ee:d6:e0:99:
         85:95:e4:df:f8:db:e4:73:48:a8:a0:05:2d:27:09:29:5a:43:
         a0:07:e2:3f:b3:ed:f3:7c:0f:55:b3:e6:b1:18:80:fa:e5:6b:
         28:8e:c2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----