Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/1/323830343a373030343a36313a3a2f34382d3438203d3e203631363032.roa
File:                     323830343a373030343a36313a3a2f34382d3438203d3e203631363032.roa (raw, json)
Hash identifier:          6ZV+l05n/F4iow1+x4568yOkJdaZCQvObk+09A9TVQU=
Subject key identifier:   B2:CC:7A:37:D3:77:B6:31:C6:61:CC:1B:24:BB:39:DC:88:AD:42:CE
Certificate issuer:       /CN=81162F75A7037BA4B812202269BFCFBA63E840FE
Certificate serial:       6A099F192ACC7E4618AC5C75CEB87DD63F194B66
Authority key identifier: 81:16:2F:75:A7:03:7B:A4:B8:12:20:22:69:BF:CF:BA:63:E8:40:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81162F75A7037BA4B812202269BFCFBA63E840FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/1/323830343a373030343a36313a3a2f34382d3438203d3e203631363032.roa
Signing time:             Wed 17 Jan 2024 09:04:47 +0000
ROA not before:           Wed 17 Jan 2024 08:59:47 +0000
ROA not after:            Wed 15 Jan 2025 09:04:47 +0000
asID:                     61602
IP address blocks:        2804:7004:61::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:09:9f:19:2a:cc:7e:46:18:ac:5c:75:ce:b8:7d:d6:3f:19:4b:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81162F75A7037BA4B812202269BFCFBA63E840FE
        Validity
            Not Before: Jan 17 08:59:47 2024 GMT
            Not After : Jan 15 09:04:47 2025 GMT
        Subject: CN=B2CC7A37D377B631C661CC1B24BB39DC88AD42CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:45:fe:f3:a7:87:3b:47:ee:7d:ad:c1:a1:ce:
                    84:f9:64:69:17:f8:a2:8f:17:b8:fc:47:6b:fb:0e:
                    92:94:80:1b:64:d4:86:cd:bc:dc:84:88:a8:af:04:
                    81:e0:50:d5:d3:3e:d4:41:51:a2:60:9a:3f:62:10:
                    5e:bf:21:2a:bb:40:ff:89:56:65:07:bb:f1:30:58:
                    cd:37:ae:b4:46:9e:91:d9:f8:95:7f:37:5e:f2:f0:
                    d2:8f:16:7f:41:90:9a:f6:de:ef:e9:3a:39:4f:0d:
                    1b:44:50:63:5b:9e:1c:7f:fa:80:4c:3c:a1:0e:8e:
                    3f:f4:f0:6a:12:58:32:bd:f0:c9:29:cf:7e:a1:87:
                    e6:11:df:bf:26:b8:78:f4:15:73:1a:15:d2:b1:13:
                    4c:24:75:f4:d2:1b:cd:07:ef:43:95:5f:d1:3e:9b:
                    66:f2:94:e9:8d:a0:0a:d2:60:1d:73:74:9c:dd:73:
                    84:9f:3b:37:42:ce:26:40:1f:c9:cc:5c:fd:27:8e:
                    95:50:25:7b:bc:da:9b:5d:62:e6:43:c8:ff:09:42:
                    b2:bf:5f:67:a9:71:75:e7:8e:cc:de:e9:82:df:ec:
                    f8:9d:cb:56:97:83:8f:ce:ca:91:6c:bb:be:be:e2:
                    3a:64:c1:5d:65:b7:6e:c9:bf:c9:43:40:a5:b0:8f:
                    39:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:CC:7A:37:D3:77:B6:31:C6:61:CC:1B:24:BB:39:DC:88:AD:42:CE
            X509v3 Authority Key Identifier:
                keyid:81:16:2F:75:A7:03:7B:A4:B8:12:20:22:69:BF:CF:BA:63:E8:40:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/1/81162F75A7037BA4B812202269BFCFBA63E840FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81162F75A7037BA4B812202269BFCFBA63E840FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/1/323830343a373030343a36313a3a2f34382d3438203d3e203631363032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7004:61::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:b4:0a:80:e6:d1:34:5d:5d:95:59:83:8f:a4:a3:c9:0e:56:
         8d:2f:1c:f2:3a:7f:d2:66:e5:df:ea:75:09:0b:c5:e0:7f:df:
         d7:5f:ca:44:26:bf:24:59:c2:17:d7:f5:f8:c2:28:30:12:cd:
         a1:d2:fb:15:f0:89:3d:f1:ce:82:a5:ea:33:53:54:95:61:65:
         f3:ef:ba:61:18:a0:94:a4:39:08:4f:17:0e:0f:bf:30:69:db:
         2b:1c:80:e1:b8:bd:59:62:34:b5:bc:91:9b:10:7f:9f:53:07:
         d4:37:e9:20:55:b0:3f:47:31:9a:ea:2f:f9:9c:e4:85:e4:a8:
         82:0f:30:5f:9b:ad:b9:83:7a:e4:e4:be:c7:f7:f7:68:29:18:
         fe:78:f4:6c:24:27:f0:bd:80:84:46:ec:8a:2a:5c:86:a9:95:
         d0:f9:1e:a8:5a:bf:2b:01:51:74:75:f1:af:47:ed:19:02:2a:
         8a:aa:86:77:78:bd:34:74:bb:6e:10:2d:9e:6a:af:5c:2c:d9:
         11:52:16:97:df:78:26:93:49:73:32:03:20:1a:9b:33:c9:43:
         05:a8:1c:f9:01:df:ae:09:cf:65:89:01:e9:d0:f3:18:aa:53:
         6d:f2:ce:a3:86:3f:11:bd:57:5a:42:40:d1:37:e5:f9:45:1e:
         52:c8:12:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----