Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/0/323830343a313530633a3a2f33322d3332203d3e20323633333639.roa
File:                     323830343a313530633a3a2f33322d3332203d3e20323633333639.roa (raw, json)
Hash identifier:          ZIl8SaVel7iTfnpvscLHwdlt2WZUNffD05mcbr4nsx4=
Subject key identifier:   A1:FC:29:20:BF:5B:A2:C9:D8:E6:DA:58:2D:AB:EC:94:A0:56:A6:79
Certificate issuer:       /CN=A6EA37C365C418DC6FE3D0BABEA07E818AAD40F5
Certificate serial:       6F61EC252C996D043AA8342EC97C12B985CA8276
Authority key identifier: A6:EA:37:C3:65:C4:18:DC:6F:E3:D0:BA:BE:A0:7E:81:8A:AD:40:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A6EA37C365C418DC6FE3D0BABEA07E818AAD40F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/0/323830343a313530633a3a2f33322d3332203d3e20323633333639.roa
Signing time:             Sat 10 Feb 2024 14:38:58 +0000
ROA not before:           Sat 10 Feb 2024 14:33:58 +0000
ROA not after:            Sat 08 Feb 2025 14:38:58 +0000
asID:                     263369
IP address blocks:        2804:150c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:61:ec:25:2c:99:6d:04:3a:a8:34:2e:c9:7c:12:b9:85:ca:82:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6EA37C365C418DC6FE3D0BABEA07E818AAD40F5
        Validity
            Not Before: Feb 10 14:33:58 2024 GMT
            Not After : Feb  8 14:38:58 2025 GMT
        Subject: CN=A1FC2920BF5BA2C9D8E6DA582DABEC94A056A679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9f:fb:a9:02:fe:c6:83:45:5b:03:a2:32:7d:
                    34:6a:a6:43:de:00:a7:96:a4:6b:3d:b9:7b:fd:36:
                    38:e9:98:c4:a6:3f:94:17:bb:b2:b3:52:c1:2c:3d:
                    92:e3:cd:3b:74:48:68:e4:66:3d:88:ef:f3:a6:6e:
                    57:4d:bc:c1:33:d8:c3:c3:d4:55:30:6f:68:74:c4:
                    ae:52:3a:87:89:19:95:f3:57:2a:63:ad:e0:30:79:
                    2c:6a:9d:ba:24:81:f3:6b:7d:ce:53:f8:21:4e:75:
                    10:50:74:e1:70:6e:99:66:4a:45:65:a6:1c:fc:af:
                    a3:8b:88:bd:c4:0b:61:0d:85:af:7a:00:a3:a3:b5:
                    e5:c7:4c:df:26:ba:b8:5b:70:6e:b8:cf:aa:9c:f6:
                    2a:27:92:78:f7:b3:31:35:0a:0a:e4:38:f8:3f:72:
                    ef:7f:0f:17:47:cb:44:97:27:b6:b4:9f:f1:6b:a1:
                    e7:e9:ca:3c:af:e0:00:1d:84:46:3e:22:a6:e0:a3:
                    8c:7d:d4:c7:a0:d4:45:f5:4d:d5:07:a5:25:14:7c:
                    d2:7b:0c:f9:0d:d8:8d:6a:75:7a:0c:22:c9:21:e6:
                    24:d4:8d:07:61:6d:64:7f:d9:88:12:84:1f:7c:06:
                    4f:de:9b:30:28:c6:34:03:bf:da:82:41:36:cb:0f:
                    f3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:FC:29:20:BF:5B:A2:C9:D8:E6:DA:58:2D:AB:EC:94:A0:56:A6:79
            X509v3 Authority Key Identifier:
                keyid:A6:EA:37:C3:65:C4:18:DC:6F:E3:D0:BA:BE:A0:7E:81:8A:AD:40:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/0/A6EA37C365C418DC6FE3D0BABEA07E818AAD40F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A6EA37C365C418DC6FE3D0BABEA07E818AAD40F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/0/323830343a313530633a3a2f33322d3332203d3e20323633333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:150c::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:cb:fc:99:ad:44:ca:1d:18:0c:68:4e:c8:d5:31:c9:c1:4d:
         50:53:a0:94:bc:62:99:b6:17:41:9a:70:48:32:1a:b3:92:9a:
         d5:f1:4c:e9:3a:67:37:0f:6f:aa:59:f2:50:04:67:08:cd:ef:
         47:b4:bb:d2:63:5e:66:70:b6:e8:7a:b4:96:8d:bb:25:09:4c:
         e4:45:78:1e:10:ca:af:37:97:cb:90:6a:29:0d:12:fe:11:db:
         3f:a3:49:c0:5b:c1:45:14:e4:4d:7e:17:2f:c0:6b:1d:4b:18:
         ab:f6:da:0a:b0:b8:84:2b:d1:f4:7a:6e:5c:07:b9:e8:d9:03:
         c2:ec:8d:72:73:b5:a2:d7:c1:cc:dd:a1:83:a3:5c:8e:82:35:
         1a:4b:16:df:f6:98:ff:51:c2:96:f0:2f:7c:2e:e2:b5:6b:60:
         c3:a8:a4:7c:73:2d:37:91:cb:86:5d:4f:82:56:6f:3a:d7:19:
         91:c1:47:a6:65:8c:73:7d:3c:9f:61:57:e3:28:69:44:db:ce:
         ba:ea:ae:08:21:d8:eb:d5:f9:88:92:b4:d9:54:5b:b4:c2:f7:
         93:94:94:b3:37:31:da:5c:cb:4a:00:55:2c:d3:e2:71:0d:b1:
         10:e2:4c:e1:24:9f:30:94:97:10:ab:b3:b6:75:91:ba:a2:12:
         a0:e3:1a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----