Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/323830343a343031343a3a2f33322d313238203d3e20323635393333.roa
File:                     323830343a343031343a3a2f33322d313238203d3e20323635393333.roa (raw, json)
Hash identifier:          xInfc5QLsoBJsNx0dtbW9+od80C4HnPNT7kagYQAIpI=
Subject key identifier:   32:54:E3:41:A1:AD:19:50:8F:5A:90:FB:07:A1:8E:1A:89:54:D9:1D
Certificate issuer:       /CN=02F6BC2B546E9EBC686FE1C223C0CF4F8FA24AA3
Certificate serial:       06B0AA4889E8CFF39788F06CDDE8993456625440
Authority key identifier: 02:F6:BC:2B:54:6E:9E:BC:68:6F:E1:C2:23:C0:CF:4F:8F:A2:4A:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/02F6BC2B546E9EBC686FE1C223C0CF4F8FA24AA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/323830343a343031343a3a2f33322d313238203d3e20323635393333.roa
Signing time:             Mon 12 Feb 2024 13:53:53 +0000
ROA not before:           Mon 12 Feb 2024 13:48:53 +0000
ROA not after:            Mon 10 Feb 2025 13:53:53 +0000
asID:                     265933
IP address blocks:        2804:4014::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:b0:aa:48:89:e8:cf:f3:97:88:f0:6c:dd:e8:99:34:56:62:54:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02F6BC2B546E9EBC686FE1C223C0CF4F8FA24AA3
        Validity
            Not Before: Feb 12 13:48:53 2024 GMT
            Not After : Feb 10 13:53:53 2025 GMT
        Subject: CN=3254E341A1AD19508F5A90FB07A18E1A8954D91D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:06:4a:a0:12:82:4d:b2:6d:52:0b:a5:d4:75:
                    a7:24:1d:c4:85:d5:5d:44:64:6a:68:90:11:6f:e0:
                    82:a4:9b:fb:39:6e:fa:ab:92:97:94:6f:04:e5:7d:
                    3d:86:03:13:aa:45:0b:3a:73:3e:e2:54:6b:89:17:
                    09:ba:91:c2:e9:56:a6:a3:b0:5b:b5:79:c7:0b:a6:
                    e4:fe:2f:ff:43:24:c9:d4:d5:90:77:e9:1a:9f:2b:
                    f0:79:2e:f3:87:58:d3:af:3b:ed:f3:c6:64:52:5e:
                    10:ff:5a:9e:03:d9:22:d0:7c:d0:b4:d2:fc:6a:8e:
                    4c:80:66:5a:b4:02:2e:11:86:16:4a:80:30:b2:12:
                    e8:1a:0c:2f:9c:2f:5b:13:24:bb:47:be:ba:36:00:
                    34:96:91:92:89:d5:7d:b1:12:b1:6c:e3:ae:82:07:
                    0e:fe:e0:e5:64:7a:79:c3:e6:37:d2:e3:07:a9:97:
                    e9:54:de:96:5c:bf:db:7f:11:dc:c8:6d:03:18:62:
                    85:19:20:ba:88:30:48:5e:1e:3d:b9:cc:fb:ab:74:
                    a5:74:f3:c6:8a:de:fd:0a:64:3b:43:23:2b:f6:1a:
                    84:19:9e:a2:f8:c9:43:30:b3:e0:ff:39:fe:be:2a:
                    66:e1:07:63:01:8b:e6:a4:91:2a:86:d2:dc:8c:5a:
                    9f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:54:E3:41:A1:AD:19:50:8F:5A:90:FB:07:A1:8E:1A:89:54:D9:1D
            X509v3 Authority Key Identifier:
                keyid:02:F6:BC:2B:54:6E:9E:BC:68:6F:E1:C2:23:C0:CF:4F:8F:A2:4A:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/02F6BC2B546E9EBC686FE1C223C0CF4F8FA24AA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/02F6BC2B546E9EBC686FE1C223C0CF4F8FA24AA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/323830343a343031343a3a2f33322d313238203d3e20323635393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4014::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:74:1d:06:68:20:26:80:b5:f4:e0:89:6f:2f:41:8b:79:03:
         eb:e8:44:25:41:16:af:a6:c3:44:a9:57:7f:18:cd:ed:e7:96:
         38:92:10:80:c5:c4:96:30:43:dc:5f:ce:13:31:da:08:a1:44:
         ae:37:f9:e0:11:0c:c0:d8:7c:9d:cb:a1:44:4b:f7:38:7b:0d:
         87:d5:c9:70:8d:05:af:40:ce:ee:26:c9:a0:fd:07:8e:1e:15:
         6a:87:c5:b8:57:f3:41:97:22:cb:71:b1:30:c4:92:b2:a1:69:
         6c:dc:2c:42:bd:20:fb:8e:8e:46:fe:e7:e7:d5:7a:87:8d:d5:
         79:51:a4:81:70:d7:4d:c2:12:9c:42:73:5b:f2:0c:90:a1:41:
         c5:59:d1:52:40:de:37:56:e7:d4:99:1d:8d:4f:69:3e:23:6c:
         1d:1e:ad:66:36:44:2b:c6:be:30:11:90:cf:b3:8a:fe:21:0f:
         04:c7:b4:f9:5c:de:14:d1:92:39:7a:80:2d:2d:3b:17:a0:97:
         06:c8:51:13:30:46:f3:1c:76:f8:b1:0a:9e:0e:e4:56:9b:bc:
         df:ab:d3:c5:9d:70:f7:44:5b:ff:62:aa:22:81:18:37:54:c2:
         a1:85:de:50:4a:50:54:dd:1c:f3:79:eb:6e:58:9c:11:db:9e:
         32:98:72:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----