Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6zXwMvombKfH19pyvhQC24buLCwCUDP87kV5tS3PbyFc/0/323830343a373532383a3a2f33322d3334203d3e20323731303237.roa
File:                     323830343a373532383a3a2f33322d3334203d3e20323731303237.roa (raw, json)
Hash identifier:          T1Fpes5RK9CuTKFWq9Y88pdLX8w9FjzIaAIosmoZ64Q=
Subject key identifier:   60:2E:CF:91:56:02:AF:FC:4E:38:BE:96:44:C3:59:D6:2E:99:24:34
Certificate issuer:       /CN=7B6DE9E075C8AFDBCA50A9344C921BA39A6F3199
Certificate serial:       4C657C3CC44835D7A35B8355D7F1A2197B211F2A
Authority key identifier: 7B:6D:E9:E0:75:C8:AF:DB:CA:50:A9:34:4C:92:1B:A3:9A:6F:31:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7B6DE9E075C8AFDBCA50A9344C921BA39A6F3199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6zXwMvombKfH19pyvhQC24buLCwCUDP87kV5tS3PbyFc/0/323830343a373532383a3a2f33322d3334203d3e20323731303237.roa
Signing time:             Mon 04 Mar 2024 19:12:00 +0000
ROA not before:           Mon 04 Mar 2024 19:07:00 +0000
ROA not after:            Mon 03 Mar 2025 19:12:00 +0000
asID:                     271027
IP address blocks:        2804:7528::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:65:7c:3c:c4:48:35:d7:a3:5b:83:55:d7:f1:a2:19:7b:21:1f:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B6DE9E075C8AFDBCA50A9344C921BA39A6F3199
        Validity
            Not Before: Mar  4 19:07:00 2024 GMT
            Not After : Mar  3 19:12:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fd:1a:a5:9f:1d:8a:b3:68:ac:b2:5e:18:ce:
                    e8:a7:60:b7:65:e4:a0:b3:1e:30:52:3e:ab:00:45:
                    e0:f8:15:7d:3a:0b:b9:49:f6:2f:f7:08:11:3c:29:
                    6e:e7:4a:28:0a:cc:00:08:49:8e:1b:98:ec:15:09:
                    d6:e0:ce:f1:ab:30:60:bd:d4:5d:af:1f:22:03:a4:
                    ae:21:71:77:b6:5d:e2:20:8f:9a:57:3e:39:a0:c4:
                    06:92:fc:1b:49:9b:6d:be:8c:1e:ae:4b:10:6f:da:
                    98:db:cf:73:58:32:50:d7:d6:1b:e4:e5:5e:06:4c:
                    21:b1:24:65:a1:98:f5:f2:60:85:3c:4a:c3:c5:53:
                    e2:9f:91:99:99:84:3c:f1:11:52:bb:54:c6:98:a4:
                    c4:de:b5:56:41:e5:f1:e9:68:72:4d:62:cb:40:b6:
                    97:a0:cf:b8:78:5a:69:d6:c4:ea:eb:09:91:10:99:
                    d6:a9:b8:eb:9f:71:48:6f:11:f0:b0:e3:de:47:f5:
                    7e:05:94:94:b5:a8:5b:6f:d4:4e:c1:63:fb:26:2f:
                    67:0e:fc:84:dd:4b:ac:88:de:81:a8:46:7d:b5:cc:
                    77:10:4b:95:c3:1f:da:c4:94:26:fd:68:a0:3b:44:
                    96:f3:f5:6f:78:9d:a0:cf:96:3a:49:7c:ce:65:20:
                    8f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:2E:CF:91:56:02:AF:FC:4E:38:BE:96:44:C3:59:D6:2E:99:24:34
            X509v3 Authority Key Identifier:
                keyid:7B:6D:E9:E0:75:C8:AF:DB:CA:50:A9:34:4C:92:1B:A3:9A:6F:31:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6zXwMvombKfH19pyvhQC24buLCwCUDP87kV5tS3PbyFc/0/7B6DE9E075C8AFDBCA50A9344C921BA39A6F3199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7B6DE9E075C8AFDBCA50A9344C921BA39A6F3199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6zXwMvombKfH19pyvhQC24buLCwCUDP87kV5tS3PbyFc/0/323830343a373532383a3a2f33322d3334203d3e20323731303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7528::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:c4:e1:43:93:16:72:34:44:d6:d8:ba:b0:42:70:ea:a7:f7:
         2d:9f:61:d8:af:da:df:35:4d:41:bc:04:0a:86:3c:8b:f2:36:
         49:3c:83:49:be:d9:13:0c:f2:50:31:94:cb:40:fc:78:e7:10:
         dd:bb:45:dc:46:3b:df:40:68:56:bb:de:bc:4a:bf:c8:dd:a7:
         cd:7b:4a:10:c3:99:6c:5d:ab:59:d2:b6:71:50:47:9e:ce:ba:
         22:87:50:71:43:6c:0e:cb:fe:12:63:cd:f7:ed:75:a0:c0:c3:
         22:ec:fc:bb:4b:45:23:d9:0e:6a:a5:f4:26:26:b5:4d:6e:fb:
         7c:14:63:aa:d4:11:15:67:f6:fb:43:be:11:0d:7c:bd:f3:d5:
         3b:34:67:04:af:57:32:18:ec:43:dd:ce:9f:10:42:37:97:6b:
         2a:39:c2:cc:90:f5:d5:6d:05:70:b9:5e:ec:e6:41:68:8e:6b:
         c5:28:33:f4:91:63:41:1b:fb:8a:42:cd:d7:3f:b3:4a:d4:97:
         7a:24:55:98:f6:83:7f:59:de:07:5c:a1:9f:cf:e5:9f:19:e6:
         a2:fb:bf:2e:b6:04:4b:6c:b0:32:06:ea:ba:7a:8d:ff:c9:af:
         fc:66:2d:4e:7d:ee:a4:d9:eb:ea:60:51:8c:3c:d5:02:1b:b3:
         0a:5c:8a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----