Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/0/323830343a363662343a3a2f33322d3334203d3e20323639353737.roa
File:                     323830343a363662343a3a2f33322d3334203d3e20323639353737.roa (raw, json)
Hash identifier:          rH6BBuRjAOVLx9n/gXP6cD0xGQeR8ayUsRkAnTDdzj8=
Subject key identifier:   61:8B:43:C9:02:38:9B:58:3D:EC:86:AB:A4:76:CC:F2:FC:27:79:B6
Certificate issuer:       /CN=FB6B4DE343D843DE8EE99BF94CFFEF8F9746AAB8
Certificate serial:       7CB490870C3D5241F54A28E5D09054A2F5926C5D
Authority key identifier: FB:6B:4D:E3:43:D8:43:DE:8E:E9:9B:F9:4C:FF:EF:8F:97:46:AA:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB6B4DE343D843DE8EE99BF94CFFEF8F9746AAB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/0/323830343a363662343a3a2f33322d3334203d3e20323639353737.roa
Signing time:             Tue 15 Aug 2023 19:00:25 +0000
ROA not before:           Tue 15 Aug 2023 18:55:25 +0000
ROA not after:            Tue 13 Aug 2024 19:00:25 +0000
asID:                     269577
IP address blocks:        2804:66b4::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:b4:90:87:0c:3d:52:41:f5:4a:28:e5:d0:90:54:a2:f5:92:6c:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB6B4DE343D843DE8EE99BF94CFFEF8F9746AAB8
        Validity
            Not Before: Aug 15 18:55:25 2023 GMT
            Not After : Aug 13 19:00:25 2024 GMT
        Subject: CN=618B43C902389B583DEC86ABA476CCF2FC2779B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c8:5f:31:45:cd:11:62:0e:6a:7e:56:a2:64:
                    62:53:54:90:a0:f8:d1:7c:45:df:5b:fa:25:f1:f2:
                    42:c5:f5:e0:e8:b6:21:a8:91:df:51:10:08:e5:c8:
                    92:f8:74:06:36:b6:4b:2c:e1:d4:83:b8:f5:c9:c7:
                    b3:61:5f:c1:c4:69:d8:29:9d:0f:be:83:b8:fc:ce:
                    ab:6b:da:06:b4:51:d0:73:b1:b8:c2:38:33:11:98:
                    59:ab:64:ea:e5:e5:15:f8:da:61:2e:12:3e:5b:37:
                    db:67:ef:35:f4:5c:fa:2d:b7:60:e8:90:23:c2:85:
                    4e:95:ed:c4:83:b5:ec:63:b2:01:47:34:21:98:52:
                    96:3e:54:9d:52:83:f7:89:12:ad:cd:99:25:8a:c1:
                    8c:d2:10:e5:84:d5:6b:70:73:ca:ee:82:af:be:c6:
                    98:f6:25:92:a8:35:5d:b8:2d:6b:92:71:91:d7:c3:
                    c4:58:f2:4c:3d:96:08:b7:4e:5f:e5:08:0a:5c:76:
                    26:60:d4:05:39:bf:60:5b:4c:e4:e1:c9:9b:10:eb:
                    48:bf:0a:a4:9b:63:ff:21:dc:40:0f:81:67:6d:54:
                    ba:5e:74:5c:f7:ae:8a:7e:a1:79:67:f0:54:72:1c:
                    8f:bb:13:c3:91:b7:ad:16:99:1c:4f:4a:77:e9:4b:
                    22:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:8B:43:C9:02:38:9B:58:3D:EC:86:AB:A4:76:CC:F2:FC:27:79:B6
            X509v3 Authority Key Identifier:
                keyid:FB:6B:4D:E3:43:D8:43:DE:8E:E9:9B:F9:4C:FF:EF:8F:97:46:AA:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/0/FB6B4DE343D843DE8EE99BF94CFFEF8F9746AAB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB6B4DE343D843DE8EE99BF94CFFEF8F9746AAB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/0/323830343a363662343a3a2f33322d3334203d3e20323639353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:66b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:89:08:2a:6f:80:7a:ca:c4:7d:eb:cb:6f:10:ce:66:84:44:
         c3:0e:fb:00:4b:be:6d:f2:34:72:72:80:0c:01:fe:5a:cd:8e:
         70:3e:4c:c5:d0:a4:68:0d:0b:19:59:01:2d:ab:b4:38:cd:a2:
         cf:71:69:b1:c0:b9:9a:8e:85:0a:66:63:94:f0:da:6e:b0:41:
         a2:01:2a:5b:c4:c2:b9:b8:20:8b:31:24:8b:84:53:a6:44:58:
         55:db:79:ae:52:8d:3c:5a:c6:e2:92:7e:30:c1:e7:0e:d6:fc:
         95:bd:7c:a9:7b:b8:0f:5b:77:0b:c2:51:7d:37:d4:ed:47:e0:
         7f:fb:ee:db:a9:45:df:98:aa:de:89:ef:9a:ae:b7:af:60:85:
         d2:99:c9:fc:67:50:0f:08:5a:77:86:69:54:50:b2:b8:45:9d:
         a3:16:6b:32:a2:67:63:75:b4:96:ba:06:df:3e:31:32:bd:f3:
         39:84:cb:10:53:cf:5a:40:f4:a5:eb:2d:9c:dc:02:be:a5:b4:
         27:d2:3f:f6:4b:f5:9c:0b:e0:84:b0:2c:05:53:34:28:1a:05:
         7a:af:68:93:ee:d3:31:f1:67:4a:a6:0f:bc:e5:e3:bd:07:a7:
         22:e9:02:85:24:42:ca:4b:8c:35:4e:76:75:3e:09:b6:ae:43:
         01:10:84:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----