Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/0/323830343a373232383a383030303a3a2f33332d3333203d3e20323730383336.roa
File:                     323830343a373232383a383030303a3a2f33332d3333203d3e20323730383336.roa (raw, json)
Hash identifier:          HtYtZw/pXzxMhK1CkBQaqeOUmELeE6EZFt1YYhWsCQg=
Subject key identifier:   42:6C:F5:86:B9:44:61:AC:2D:31:2D:91:1A:54:2E:E6:99:2C:DE:B4
Certificate issuer:       /CN=6FD6D209392849295C9DF36EFBD073BF85F87C35
Certificate serial:       6C2BCCD676E3A51642DD2C886F5C97F31658FC06
Authority key identifier: 6F:D6:D2:09:39:28:49:29:5C:9D:F3:6E:FB:D0:73:BF:85:F8:7C:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6FD6D209392849295C9DF36EFBD073BF85F87C35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/0/323830343a373232383a383030303a3a2f33332d3333203d3e20323730383336.roa
Signing time:             Wed 20 Dec 2023 20:00:00 +0000
ROA not before:           Wed 20 Dec 2023 19:55:00 +0000
ROA not after:            Wed 18 Dec 2024 20:00:00 +0000
asID:                     270836
IP address blocks:        2804:7228:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:2b:cc:d6:76:e3:a5:16:42:dd:2c:88:6f:5c:97:f3:16:58:fc:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FD6D209392849295C9DF36EFBD073BF85F87C35
        Validity
            Not Before: Dec 20 19:55:00 2023 GMT
            Not After : Dec 18 20:00:00 2024 GMT
        Subject: CN=426CF586B94461AC2D312D911A542EE6992CDEB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2b:a7:b2:59:18:32:ef:57:22:2d:85:a3:23:
                    c1:84:cd:8e:3f:46:23:77:3a:9b:90:0b:cf:a3:57:
                    c4:53:88:ce:cf:27:71:69:72:92:2b:0a:7e:ef:f8:
                    28:30:21:1b:20:f4:c0:d2:6c:ba:8b:20:89:a8:eb:
                    f4:98:4c:61:eb:23:4c:54:a3:3d:f2:9e:f8:1c:ba:
                    a9:71:ca:06:b6:ae:13:dc:2b:4c:86:3d:a8:9e:11:
                    75:dc:d5:ca:44:10:5f:35:61:41:cd:26:75:58:b1:
                    ed:fb:39:c4:ad:a6:7b:62:da:fa:fc:eb:2c:d5:53:
                    1a:a2:53:17:62:9d:a4:b9:94:5a:ed:b7:56:a8:4a:
                    c1:24:7c:13:d0:c3:35:80:cc:f5:c5:1b:78:e5:1a:
                    57:73:05:0f:66:0a:8e:3a:95:cd:00:d5:77:74:aa:
                    36:59:ef:f8:7a:58:f2:af:b6:85:dd:cc:6e:d6:e8:
                    01:13:32:09:37:47:6d:dc:9f:e8:c5:c4:21:90:2a:
                    1b:fc:94:56:87:5b:0c:f1:34:9c:78:a7:b5:f4:e8:
                    eb:bc:5b:ac:44:e1:c1:c0:1b:2b:51:79:5f:a6:a6:
                    3b:03:39:1c:92:ae:56:ed:f4:2f:32:bc:c9:3b:f0:
                    2b:a2:e3:b3:ca:0b:84:ed:6a:d2:13:ea:da:67:79:
                    26:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:6C:F5:86:B9:44:61:AC:2D:31:2D:91:1A:54:2E:E6:99:2C:DE:B4
            X509v3 Authority Key Identifier:
                keyid:6F:D6:D2:09:39:28:49:29:5C:9D:F3:6E:FB:D0:73:BF:85:F8:7C:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/0/6FD6D209392849295C9DF36EFBD073BF85F87C35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6FD6D209392849295C9DF36EFBD073BF85F87C35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/0/323830343a373232383a383030303a3a2f33332d3333203d3e20323730383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7228:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         27:0e:bb:b2:1b:b2:ce:6b:0f:d1:7b:fa:d0:6c:4e:4e:1b:31:
         5d:1e:45:30:42:8f:a7:69:61:48:06:ed:c1:96:1c:24:7b:d9:
         9b:c8:66:1e:9b:db:8b:02:ff:d9:4e:8d:cc:3b:4a:ea:65:24:
         95:26:15:f2:41:84:2c:e6:33:8c:e3:16:18:d1:3d:5f:bb:60:
         f9:ad:33:39:a9:da:67:a2:d8:45:1b:4d:f0:7e:8e:f7:d1:0d:
         62:38:b1:32:32:f4:28:9a:03:6f:60:78:8a:86:16:9d:3f:83:
         4d:05:66:e8:ba:69:0d:ac:2f:81:3c:4a:66:2f:71:8e:ef:ce:
         34:7f:00:ed:c5:f3:08:25:a7:8c:1c:b6:63:34:af:69:f2:f5:
         43:12:c3:54:6f:7b:24:6b:f6:e6:87:44:12:2f:8e:32:bc:00:
         e4:4f:bb:dd:11:71:fc:dd:83:e1:9d:c8:6b:48:d5:24:9d:6e:
         49:8d:c4:85:5d:ca:f1:ea:a0:19:d6:97:f5:df:7b:a6:d3:37:
         b3:5d:c2:4a:82:a5:0d:66:e1:0b:9a:05:a3:0e:81:7c:9d:55:
         f2:c7:c4:b7:79:12:69:f1:90:7b:8d:da:6f:70:a4:94:7d:75:
         57:a3:07:a5:95:4e:08:a1:0f:49:aa:65:e7:7b:3c:7a:7d:98:
         93:af:a4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----