Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6xoMirZqxe8xBpWPTbnh6MqNiWmynytiy4VbUw4csyL4/0/323830343a366638343a3a2f33322d3334203d3e20323730363635.roa
File:                     323830343a366638343a3a2f33322d3334203d3e20323730363635.roa (raw, json)
Hash identifier:          PnJpvRaTEj2gMKN0iguB3KqsWwWAhl7ki2sEZUi1H44=
Subject key identifier:   A3:D5:6C:84:0A:66:4D:6E:29:A8:99:BC:0F:F2:76:6D:92:E8:4F:63
Certificate issuer:       /CN=C1889F3DEEDCB03F5E4FCA200B706650EC5BD054
Certificate serial:       1C485E132A9681CBCB78A33B4C7BBFA442ACD5D9
Authority key identifier: C1:88:9F:3D:EE:DC:B0:3F:5E:4F:CA:20:0B:70:66:50:EC:5B:D0:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C1889F3DEEDCB03F5E4FCA200B706650EC5BD054.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xoMirZqxe8xBpWPTbnh6MqNiWmynytiy4VbUw4csyL4/0/323830343a366638343a3a2f33322d3334203d3e20323730363635.roa
Signing time:             Thu 04 Apr 2024 19:00:00 +0000
ROA not before:           Thu 04 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     270665
IP address blocks:        2804:6f84::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:48:5e:13:2a:96:81:cb:cb:78:a3:3b:4c:7b:bf:a4:42:ac:d5:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1889F3DEEDCB03F5E4FCA200B706650EC5BD054
        Validity
            Not Before: Apr  4 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:61:10:6d:84:0c:71:5e:0c:85:cd:4d:f2:c5:
                    62:e7:b2:99:ac:3e:c4:87:69:e2:cd:c8:81:bb:7b:
                    ea:95:32:c0:e3:b8:bc:70:fc:16:7c:be:ed:46:5c:
                    49:08:aa:e5:85:74:52:51:01:48:d3:e4:1b:ae:ff:
                    50:77:5b:20:50:ad:b2:01:39:1f:0d:de:b2:15:e9:
                    be:06:3b:5e:d2:9c:d8:73:e3:9e:d9:04:90:05:1c:
                    e1:79:d1:20:db:91:48:43:51:3e:13:3c:c3:49:23:
                    60:f3:8d:88:70:34:93:7c:a1:be:5d:c1:32:7e:ed:
                    bc:1a:e2:d8:64:6c:61:ff:f6:c4:59:be:1b:d5:aa:
                    75:a7:a1:b1:d8:cc:d7:7c:32:70:10:ca:ef:af:7d:
                    54:8a:46:e1:a1:f0:d0:bb:04:e7:af:39:97:78:d0:
                    6f:0a:cd:41:b9:6e:ce:ac:3a:33:42:66:9e:62:16:
                    58:9d:3a:65:83:ee:7d:da:b0:17:f1:61:fe:84:2c:
                    c6:a3:0c:e1:cb:a8:18:db:da:72:0c:e3:5e:b4:d6:
                    a2:f9:0b:60:cb:ef:6b:48:17:ab:8b:18:d3:75:f2:
                    e7:b2:96:4c:46:c3:81:cc:36:f2:8f:a5:00:49:ac:
                    98:6c:f5:42:99:53:b6:3c:b3:fe:3d:60:19:2c:71:
                    c0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D5:6C:84:0A:66:4D:6E:29:A8:99:BC:0F:F2:76:6D:92:E8:4F:63
            X509v3 Authority Key Identifier:
                keyid:C1:88:9F:3D:EE:DC:B0:3F:5E:4F:CA:20:0B:70:66:50:EC:5B:D0:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xoMirZqxe8xBpWPTbnh6MqNiWmynytiy4VbUw4csyL4/0/C1889F3DEEDCB03F5E4FCA200B706650EC5BD054.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C1889F3DEEDCB03F5E4FCA200B706650EC5BD054.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xoMirZqxe8xBpWPTbnh6MqNiWmynytiy4VbUw4csyL4/0/323830343a366638343a3a2f33322d3334203d3e20323730363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f84::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:64:d4:ef:e5:82:92:8a:6d:e0:fc:a8:2a:52:cb:ad:e6:9a:
         15:f1:0c:e7:8c:77:89:7b:b8:a5:d8:71:c4:09:c3:c5:76:78:
         bf:17:6b:71:be:12:33:96:4b:95:20:33:04:96:5d:19:0a:4b:
         24:ea:1a:04:2c:af:4f:31:d8:94:4e:d3:00:08:0a:79:e6:a2:
         da:bf:87:0c:0a:1a:55:f5:5a:bc:c3:46:74:03:e4:27:df:6a:
         77:e8:ba:81:e3:36:6d:f8:e1:f9:f1:6d:1e:d9:0c:bf:32:8a:
         a3:30:53:72:fb:f7:5a:18:53:da:ed:91:a6:6c:24:98:9c:2a:
         a9:d8:10:a2:f8:32:f1:27:bc:06:8e:6c:b9:8b:ee:55:0f:09:
         45:e3:a6:71:28:f0:ac:46:ee:34:c4:c7:c5:5a:9c:09:49:85:
         7c:1c:f3:d7:22:24:74:c3:69:7b:08:40:b9:e1:af:de:a0:a2:
         fd:d6:95:ab:b6:c5:91:d0:df:f0:18:0b:1b:d4:f7:fe:66:08:
         25:a7:ab:c4:e8:f9:cb:4c:ed:90:2c:6e:ff:4f:5e:0a:1b:3b:
         44:12:3d:e5:39:17:a7:ee:a8:5b:a5:21:55:d8:0c:7b:47:54:
         9f:76:02:4f:3b:9a:77:09:7c:d2:e9:cb:cb:aa:00:d8:ed:d4:
         f8:50:01:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----