Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6k2BPqnyyMkf8VynTrqvQUMu8CKpvez19vbeUJ3ggNwv/0/323830343a383661383a3a2f33322d3332203d3e20323732363538.roa
File:                     323830343a383661383a3a2f33322d3332203d3e20323732363538.roa (raw, json)
Hash identifier:          1i4j/SLZwQRSbyP5KxuEMd+FDGLuazdNfZ9+y7pgqzg=
Subject key identifier:   8F:A2:8E:58:3A:A4:69:C6:94:12:50:82:30:92:04:AC:1D:79:1F:3C
Certificate issuer:       /CN=8CA6EB3C7DA6390F45D121FB13DBC8FC3300A123
Certificate serial:       5B0A54A99FD5EB0DFB65028F9FE895462533D1EE
Authority key identifier: 8C:A6:EB:3C:7D:A6:39:0F:45:D1:21:FB:13:DB:C8:FC:33:00:A1:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8CA6EB3C7DA6390F45D121FB13DBC8FC3300A123.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6k2BPqnyyMkf8VynTrqvQUMu8CKpvez19vbeUJ3ggNwv/0/323830343a383661383a3a2f33322d3332203d3e20323732363538.roa
Signing time:             Tue 07 Nov 2023 11:30:05 +0000
ROA not before:           Tue 07 Nov 2023 11:25:05 +0000
ROA not after:            Tue 05 Nov 2024 11:30:05 +0000
asID:                     272658
IP address blocks:        2804:86a8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:0a:54:a9:9f:d5:eb:0d:fb:65:02:8f:9f:e8:95:46:25:33:d1:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CA6EB3C7DA6390F45D121FB13DBC8FC3300A123
        Validity
            Not Before: Nov  7 11:25:05 2023 GMT
            Not After : Nov  5 11:30:05 2024 GMT
        Subject: CN=8FA28E583AA469C694125082309204AC1D791F3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:48:26:de:1c:75:a1:b2:3a:b6:71:4d:93:73:
                    53:c8:c7:39:9b:8d:cc:af:b5:46:0c:03:9c:d6:88:
                    3f:e6:5c:ce:27:4d:bc:97:d9:6e:01:a4:2a:e6:a5:
                    4d:55:4b:f2:5c:d9:2b:ac:d5:d2:d7:89:ee:03:7e:
                    58:1d:fb:8b:36:95:44:38:b5:c1:b9:68:4d:42:de:
                    33:09:fa:60:88:46:40:f5:74:3c:a3:6b:4a:47:aa:
                    2f:6d:29:98:ef:9e:c1:c8:2c:21:c7:5c:34:20:f1:
                    59:14:47:b7:41:d9:c8:39:da:02:b8:e5:7a:12:a0:
                    74:d0:6e:ce:7b:9e:aa:ea:76:ee:23:ca:c9:bf:64:
                    26:3d:bd:03:83:80:87:fa:08:dd:0b:b9:89:a6:c7:
                    9c:86:dd:fd:1c:00:5e:14:4e:de:94:92:86:49:e0:
                    a3:7a:b9:c1:17:08:d8:ab:4f:d1:a5:68:c5:98:cc:
                    cd:90:5a:33:4b:ce:46:00:27:87:aa:e2:c2:f6:be:
                    c9:b3:c7:66:03:98:c2:73:65:aa:15:8b:04:5d:0b:
                    e1:9e:dd:72:8f:62:4d:5f:31:91:73:7f:68:eb:9a:
                    1a:f9:fb:f8:85:da:86:8b:bb:4f:0d:a1:72:bb:b9:
                    8e:4e:52:a6:76:39:c7:2d:bf:e2:6e:be:b1:e5:56:
                    90:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A2:8E:58:3A:A4:69:C6:94:12:50:82:30:92:04:AC:1D:79:1F:3C
            X509v3 Authority Key Identifier:
                keyid:8C:A6:EB:3C:7D:A6:39:0F:45:D1:21:FB:13:DB:C8:FC:33:00:A1:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6k2BPqnyyMkf8VynTrqvQUMu8CKpvez19vbeUJ3ggNwv/0/8CA6EB3C7DA6390F45D121FB13DBC8FC3300A123.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8CA6EB3C7DA6390F45D121FB13DBC8FC3300A123.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6k2BPqnyyMkf8VynTrqvQUMu8CKpvez19vbeUJ3ggNwv/0/323830343a383661383a3a2f33322d3332203d3e20323732363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:86a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:67:89:e7:7b:ee:82:62:6e:99:7a:23:c7:4b:33:1f:99:75:
         aa:6f:cb:b9:99:75:56:09:80:48:47:de:87:67:7e:12:0d:4e:
         a0:13:a5:8a:4f:58:16:23:a3:07:81:f7:00:31:c5:7a:32:42:
         de:cb:3f:7c:d8:74:1d:81:ed:b3:1e:26:aa:66:d4:89:73:be:
         9a:19:99:94:0b:37:5a:85:7c:d6:e4:5e:c4:60:91:f1:88:1e:
         fb:57:08:03:93:be:b5:6c:a7:46:05:4b:8e:2d:1d:bd:42:f3:
         55:52:31:d7:3f:09:37:88:53:fc:8a:0d:0e:f9:31:29:52:fc:
         ed:39:b0:b4:4c:21:83:d7:41:ac:37:eb:6d:5f:70:78:6a:53:
         81:db:14:ed:b9:63:51:32:b6:f7:29:c0:46:99:8b:a6:4c:e7:
         ee:9f:8e:86:50:f9:75:c8:09:21:4e:34:7a:57:80:39:a6:c7:
         a3:17:a6:60:f3:0d:a4:2d:63:1d:e0:98:7a:58:54:f7:ac:d5:
         8b:57:25:7e:f2:1d:ae:2f:db:4a:fe:1f:05:e8:15:7a:f8:6a:
         24:dd:e6:33:25:aa:30:5e:5f:09:51:a7:78:76:5a:95:9b:89:
         32:8a:92:77:ad:18:18:ae:9b:85:66:04:22:d6:0e:f1:65:c5:
         22:be:67:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----