Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/0/323830343a373232383a3a2f33322d3332203d3e20323730383336.roa
File:                     323830343a373232383a3a2f33322d3332203d3e20323730383336.roa (raw, json)
Hash identifier:          Pte4kVxCCEnUSEm5WGc7szPq6Qsu8nU7RvkTmNnyJ60=
Subject key identifier:   CD:E4:36:18:14:0F:99:47:C2:8C:FE:DA:AD:07:8C:2C:BA:A7:9B:4F
Certificate issuer:       /CN=6FD6D209392849295C9DF36EFBD073BF85F87C35
Certificate serial:       442EB0A6110F8D2689904394F9290A002CDB0235
Authority key identifier: 6F:D6:D2:09:39:28:49:29:5C:9D:F3:6E:FB:D0:73:BF:85:F8:7C:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6FD6D209392849295C9DF36EFBD073BF85F87C35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/0/323830343a373232383a3a2f33322d3332203d3e20323730383336.roa
Signing time:             Thu 15 Feb 2024 19:00:00 +0000
ROA not before:           Thu 15 Feb 2024 18:55:00 +0000
ROA not after:            Thu 13 Feb 2025 19:00:00 +0000
asID:                     270836
IP address blocks:        2804:7228::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:2e:b0:a6:11:0f:8d:26:89:90:43:94:f9:29:0a:00:2c:db:02:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FD6D209392849295C9DF36EFBD073BF85F87C35
        Validity
            Not Before: Feb 15 18:55:00 2024 GMT
            Not After : Feb 13 19:00:00 2025 GMT
        Subject: CN=CDE43618140F9947C28CFEDAAD078C2CBAA79B4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a7:77:bb:ec:58:0f:cc:61:f3:30:2a:2e:0b:
                    fc:dd:02:47:f6:1f:d5:21:83:3a:72:d6:85:43:c3:
                    f0:f6:a7:a9:a7:4b:cd:6d:91:e6:19:1c:19:f6:90:
                    e7:fc:e1:70:e8:19:7d:42:4c:ff:5c:c3:6f:ab:77:
                    54:8a:dd:cc:f4:d2:5e:a0:91:c1:e5:6f:4f:1c:1a:
                    14:06:ab:63:7d:13:4b:0d:d6:28:c7:39:7e:b7:52:
                    27:ca:fe:cc:c1:df:4e:23:3d:90:78:9a:ea:9b:d3:
                    a0:77:af:c0:10:e9:9b:ec:2d:8a:4b:fd:6e:c4:73:
                    02:41:9a:13:41:43:0e:8b:f5:74:65:1a:4f:5f:c0:
                    29:c9:e0:99:2e:de:3c:0d:73:19:6e:5c:b5:6d:3f:
                    5c:30:2a:16:94:47:4a:87:a5:5c:be:b2:c2:b3:e7:
                    a2:b4:62:af:75:06:63:be:f3:c7:e3:f0:34:da:b5:
                    d3:c5:05:dd:99:89:13:ef:a6:ac:ec:d3:fa:86:97:
                    72:6a:09:1c:13:3a:3c:a3:90:83:20:60:5e:36:21:
                    81:8d:39:62:78:1b:c5:39:e7:1a:5c:d9:87:5f:ce:
                    43:0a:5a:25:42:1d:fe:4b:c6:a4:b7:7c:c6:4f:c8:
                    f4:ef:6e:5a:dc:fd:38:7e:b0:3b:42:21:77:cf:4b:
                    95:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E4:36:18:14:0F:99:47:C2:8C:FE:DA:AD:07:8C:2C:BA:A7:9B:4F
            X509v3 Authority Key Identifier:
                keyid:6F:D6:D2:09:39:28:49:29:5C:9D:F3:6E:FB:D0:73:BF:85:F8:7C:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/0/6FD6D209392849295C9DF36EFBD073BF85F87C35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6FD6D209392849295C9DF36EFBD073BF85F87C35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/0/323830343a373232383a3a2f33322d3332203d3e20323730383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7228::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:c1:86:e4:6a:25:bc:e8:01:1e:89:28:90:a2:c0:4c:0d:cc:
         99:ff:40:75:fc:23:14:91:f4:f3:04:1c:9a:6e:a1:9c:67:c0:
         2e:ad:cf:aa:ed:c4:e2:a9:bb:44:40:30:30:1b:c4:d3:ab:eb:
         cf:e4:ca:e5:2d:8f:07:9a:7a:f8:d5:91:85:cb:c9:e6:a7:ed:
         43:2e:9e:6b:51:fd:d3:fd:24:1a:cb:d9:4d:b4:76:e8:ab:c9:
         98:fe:fe:80:eb:5a:06:5a:21:e2:cb:28:62:f2:03:9c:4a:ea:
         c4:ee:8f:b9:55:cc:fa:74:32:32:e6:75:4b:22:2a:55:1a:af:
         6a:38:cf:b7:ce:78:bd:45:9f:f1:cd:8f:0e:9f:3d:8d:7b:c3:
         5c:a6:4b:65:a0:39:0f:f7:2a:d4:ca:66:42:8e:81:52:a1:3c:
         b7:28:c8:82:5f:44:a7:ad:8c:cc:cf:b4:ce:84:dd:9f:ca:87:
         e6:fe:b4:63:b3:9a:33:05:59:cc:55:ce:fd:ef:f8:a6:c3:90:
         a2:b6:28:87:3a:fc:39:a7:8f:e3:96:30:3c:27:39:c7:fa:b9:
         ab:ca:be:3c:79:5e:30:b9:87:7f:df:ca:f6:49:76:db:4a:7e:
         ce:3f:67:d3:d7:dc:27:db:a9:76:d3:b4:7a:bf:18:68:60:8e:
         a4:64:d0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----