Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/0/323830343a363938343a3a2f33342d3334203d3e20323730323735.roa
File:                     323830343a363938343a3a2f33342d3334203d3e20323730323735.roa (raw, json)
Hash identifier:          fl3/HZlp4BvyqYoe2i71GM6Xi/1XURNgL0jZp9ic1iE=
Subject key identifier:   4B:82:D7:0C:4E:78:9F:AF:A7:76:94:39:75:47:3C:42:A6:85:36:41
Certificate issuer:       /CN=AF4E045CCD60F57F93C3C91D5A9A71004102D44B
Certificate serial:       6D0943191D65F54816900D35A262BA1173E5D990
Authority key identifier: AF:4E:04:5C:CD:60:F5:7F:93:C3:C9:1D:5A:9A:71:00:41:02:D4:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF4E045CCD60F57F93C3C91D5A9A71004102D44B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/0/323830343a363938343a3a2f33342d3334203d3e20323730323735.roa
Signing time:             Mon 26 Jun 2023 16:15:14 +0000
ROA not before:           Mon 26 Jun 2023 16:10:14 +0000
ROA not after:            Mon 24 Jun 2024 16:15:14 +0000
asID:                     270275
IP address blocks:        2804:6984::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:09:43:19:1d:65:f5:48:16:90:0d:35:a2:62:ba:11:73:e5:d9:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF4E045CCD60F57F93C3C91D5A9A71004102D44B
        Validity
            Not Before: Jun 26 16:10:14 2023 GMT
            Not After : Jun 24 16:15:14 2024 GMT
        Subject: CN=4B82D70C4E789FAFA776943975473C42A6853641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3c:72:92:38:08:3d:77:1d:58:bb:e0:71:c6:
                    65:56:5a:de:dc:16:22:d8:84:db:a6:e0:86:51:81:
                    8e:3b:ac:20:0b:d6:15:e7:0b:11:a1:d5:9c:01:51:
                    39:91:8b:9d:36:e3:8a:79:be:d8:ac:7d:fc:9e:5f:
                    73:3d:b7:5b:56:ee:21:ff:2b:0d:ea:31:11:f4:d3:
                    50:11:d6:2f:29:37:7a:f8:47:32:44:04:a5:6f:bf:
                    e1:b4:57:18:e8:c8:1f:2c:27:a9:1c:52:5e:e8:d2:
                    24:15:97:d5:2c:b2:54:4b:0c:4a:ff:38:e3:58:96:
                    f8:32:39:1d:e7:8c:59:78:9e:c3:1b:e7:3d:83:c9:
                    2d:ff:69:d7:36:37:f0:b0:5b:2c:56:df:f4:08:1c:
                    34:54:be:8b:81:33:c5:8d:75:b8:37:bd:c1:95:2a:
                    1a:4e:a4:bc:ed:37:eb:bf:9e:42:48:50:f7:19:0a:
                    aa:24:25:94:cc:95:e1:ff:45:12:7a:3e:4b:06:80:
                    cc:1b:d6:f5:e9:fd:17:51:46:6f:7e:a2:23:57:52:
                    35:17:bc:01:45:07:a0:4a:03:ff:de:e6:6f:2e:5a:
                    8d:c8:96:9e:cd:11:28:f4:4a:72:97:32:fa:49:04:
                    f7:fa:d1:38:b6:bb:0e:15:08:8b:42:cd:c2:dc:ad:
                    3e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:82:D7:0C:4E:78:9F:AF:A7:76:94:39:75:47:3C:42:A6:85:36:41
            X509v3 Authority Key Identifier:
                keyid:AF:4E:04:5C:CD:60:F5:7F:93:C3:C9:1D:5A:9A:71:00:41:02:D4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/0/AF4E045CCD60F57F93C3C91D5A9A71004102D44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF4E045CCD60F57F93C3C91D5A9A71004102D44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/0/323830343a363938343a3a2f33342d3334203d3e20323730323735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6984::/34

    Signature Algorithm: sha256WithRSAEncryption
         69:b4:9d:ae:ec:02:3b:e8:14:a4:e8:7e:b9:0a:10:dc:b4:34:
         3b:7b:7b:d0:fa:09:d1:8f:5d:5d:a7:eb:fe:e1:7c:1d:9b:46:
         5a:9b:22:1d:dc:94:99:02:bb:8a:b6:ce:0e:24:7a:c3:71:7d:
         e2:ef:5c:a1:0f:ba:a1:d0:78:58:02:9e:2c:97:5f:76:c3:58:
         7b:05:e2:02:f1:23:55:a6:b9:55:6b:df:a1:81:9a:41:e8:79:
         55:cf:1b:21:d7:90:1c:05:bf:33:81:2c:4a:e0:1e:3b:a0:dc:
         a3:68:b0:56:ec:1c:5d:b1:61:2e:c4:19:26:1d:ec:02:41:b0:
         73:0b:0e:ec:38:96:0e:3f:2b:62:b4:df:b3:d8:e4:c8:75:67:
         42:67:c1:fc:1d:c8:a4:6a:88:2d:5a:20:61:66:c2:33:ae:65:
         ae:ae:d8:21:38:9a:7c:24:d6:c5:df:cc:f3:3d:dd:ff:d9:6a:
         66:ab:2e:ae:c4:ad:c2:73:fb:f1:22:c7:d7:52:6a:99:64:af:
         1a:54:f8:c0:19:17:bf:5c:54:2a:23:c2:73:fd:85:54:dd:91:
         27:83:96:8a:0e:31:67:45:5a:67:37:9f:5c:d2:7f:39:3a:a9:
         e2:aa:58:33:0a:63:e7:5f:94:28:89:dc:3a:3c:11:2e:df:9c:
         5b:b8:e5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----