Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/0/323830343a336331633a3a2f33322d3332203d3e20323636313931.roa
File:                     323830343a336331633a3a2f33322d3332203d3e20323636313931.roa (raw, json)
Hash identifier:          4Dkmc6wEjrTfLUe5gniJK6iZwI9irPKZComlsbHT2VU=
Subject key identifier:   1D:D5:B5:B2:C8:51:88:A5:4D:19:11:07:EA:A1:D6:6F:CE:79:B7:0A
Certificate issuer:       /CN=A16BCEF631947F5EE2C8F6807EB51C84AB1F9CBF
Certificate serial:       6B85A6B9B00A3909C8A8FD57415705C4026A5325
Authority key identifier: A1:6B:CE:F6:31:94:7F:5E:E2:C8:F6:80:7E:B5:1C:84:AB:1F:9C:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A16BCEF631947F5EE2C8F6807EB51C84AB1F9CBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/0/323830343a336331633a3a2f33322d3332203d3e20323636313931.roa
Signing time:             Wed 09 Aug 2023 18:00:00 +0000
ROA not before:           Wed 09 Aug 2023 17:55:00 +0000
ROA not after:            Wed 07 Aug 2024 18:00:00 +0000
asID:                     266191
IP address blocks:        2804:3c1c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:85:a6:b9:b0:0a:39:09:c8:a8:fd:57:41:57:05:c4:02:6a:53:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A16BCEF631947F5EE2C8F6807EB51C84AB1F9CBF
        Validity
            Not Before: Aug  9 17:55:00 2023 GMT
            Not After : Aug  7 18:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1c:10:92:99:69:10:0d:14:0d:fd:49:b3:a5:
                    03:6e:75:84:0f:da:d7:a5:50:d5:f5:e7:4f:ea:1e:
                    08:6f:d2:79:82:38:9a:ca:fb:3b:51:94:7f:99:66:
                    76:11:a7:b3:87:67:8a:64:41:a3:25:dd:4c:7b:5c:
                    aa:ce:26:7f:c0:0f:11:be:69:0b:52:a8:f3:2b:da:
                    7f:dc:82:52:72:18:4a:c0:08:98:77:29:04:d5:43:
                    48:8a:99:c2:6a:0a:29:4a:11:14:e0:5d:91:b0:38:
                    d2:ee:54:96:ba:aa:36:7d:3e:b8:9a:dd:bd:db:45:
                    72:c9:58:e3:9b:b1:85:b5:bd:7d:25:54:83:70:0b:
                    f5:72:48:32:c6:a2:11:fd:78:b5:cb:53:8d:a8:1f:
                    d6:d5:cc:db:ae:e8:9c:1e:24:3b:b5:19:37:d8:ed:
                    0b:ba:f8:a0:43:57:d0:f4:41:fa:ec:3f:c1:da:bf:
                    f9:9c:3d:db:f7:8d:cf:ce:ba:76:61:e1:66:79:39:
                    f3:6f:f8:3b:e0:c3:12:20:ab:22:5e:5c:a8:d1:da:
                    7a:1c:22:c2:df:72:1c:31:48:4a:26:df:c9:ca:a8:
                    61:32:3d:5e:b5:fa:77:74:3a:ab:d2:12:17:57:0c:
                    fd:08:2b:72:03:f6:9b:4f:34:0e:30:f7:8a:31:95:
                    c3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D5:B5:B2:C8:51:88:A5:4D:19:11:07:EA:A1:D6:6F:CE:79:B7:0A
            X509v3 Authority Key Identifier:
                keyid:A1:6B:CE:F6:31:94:7F:5E:E2:C8:F6:80:7E:B5:1C:84:AB:1F:9C:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/0/A16BCEF631947F5EE2C8F6807EB51C84AB1F9CBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A16BCEF631947F5EE2C8F6807EB51C84AB1F9CBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/0/323830343a336331633a3a2f33322d3332203d3e20323636313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c1c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:bc:e0:24:5a:1e:7c:9d:9f:bf:30:b8:20:20:52:fa:cb:d8:
         9b:bb:06:a1:e6:4b:80:47:6f:c3:d6:6d:78:77:96:9a:79:a5:
         44:f1:14:22:03:b0:a9:43:f5:62:d1:f9:f2:9d:16:7a:83:03:
         7a:c9:40:6b:3e:00:21:14:50:96:56:1c:a0:60:f6:04:01:02:
         9f:97:c6:dc:b5:29:f0:93:99:99:14:95:12:41:42:41:52:6c:
         68:f5:f4:5c:50:85:a0:51:9e:17:27:01:f4:d1:77:f7:ec:68:
         1d:11:1a:2c:ff:9b:69:08:16:aa:6d:72:d8:38:83:80:b6:f8:
         85:30:a1:51:52:df:ef:37:be:8a:0d:29:28:f0:25:f5:96:7d:
         ef:a9:47:15:88:4d:f3:d2:e9:a5:df:82:cc:9d:5c:07:89:79:
         ba:85:9b:07:57:ad:28:fe:b2:d2:8c:7a:f3:cf:b6:bf:b4:52:
         e2:84:b3:b6:5c:45:29:5d:71:80:d4:56:26:cc:05:b6:38:08:
         d9:5f:0a:35:10:e2:58:2a:be:7d:66:5a:97:43:40:82:9d:47:
         21:d7:4e:5f:02:34:59:e9:27:bc:23:0e:34:5b:20:fe:41:42:
         56:26:b9:82:25:4c:5d:27:4b:c5:be:b3:aa:53:a0:e4:14:bd:
         b2:6c:a9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----