Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DvGjRXrma7jNGajs6mACSb5kBfYs6kuGt5rTV3exjvH9/0/323830343a333731303a3a2f33322d3438203d3e20323636333837.roa
File:                     323830343a333731303a3a2f33322d3438203d3e20323636333837.roa (raw, json)
Hash identifier:          osbsZ7bxHuYsbeE723EGo9AXRSVmzRYdJOu2hMw/8QU=
Subject key identifier:   94:D6:0C:78:9B:16:A1:D4:E8:9B:D6:CF:05:2D:61:80:64:D2:67:E2
Certificate issuer:       /CN=C6FDE7EC24071A0C6464092AF3B2657B1E1DD8E8
Certificate serial:       474DD3AAE86BA9B64B72F4E42782B180E0C6869A
Authority key identifier: C6:FD:E7:EC:24:07:1A:0C:64:64:09:2A:F3:B2:65:7B:1E:1D:D8:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6FDE7EC24071A0C6464092AF3B2657B1E1DD8E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DvGjRXrma7jNGajs6mACSb5kBfYs6kuGt5rTV3exjvH9/0/323830343a333731303a3a2f33322d3438203d3e20323636333837.roa
Signing time:             Fri 15 Sep 2023 17:36:27 +0000
ROA not before:           Fri 15 Sep 2023 17:31:27 +0000
ROA not after:            Fri 13 Sep 2024 17:36:27 +0000
asID:                     266387
IP address blocks:        2804:3710::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:4d:d3:aa:e8:6b:a9:b6:4b:72:f4:e4:27:82:b1:80:e0:c6:86:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6FDE7EC24071A0C6464092AF3B2657B1E1DD8E8
        Validity
            Not Before: Sep 15 17:31:27 2023 GMT
            Not After : Sep 13 17:36:27 2024 GMT
        Subject: CN=94D60C789B16A1D4E89BD6CF052D618064D267E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:11:fb:ea:c8:1f:13:bc:ca:5f:71:e2:60:7e:
                    38:46:91:c9:33:8f:3b:ab:60:6b:31:cb:f2:a6:52:
                    81:c3:17:d3:59:89:f8:e1:75:3b:68:d9:33:71:92:
                    df:39:40:b8:48:bc:a5:63:86:51:4f:ff:b4:08:ef:
                    4e:5b:4d:00:95:c9:61:e6:b7:87:8b:bb:f4:ea:53:
                    64:18:ba:0d:20:b3:ca:a4:d8:52:5a:c8:52:47:89:
                    a0:f9:26:6f:fa:a7:2c:28:43:80:0f:35:08:ec:c7:
                    8f:67:f2:e7:07:7d:51:74:29:a9:a5:70:aa:97:e3:
                    65:1d:a0:a3:a3:31:cb:5a:0f:7b:f1:37:b1:84:03:
                    6f:86:9d:39:20:ff:dc:75:14:4d:24:32:74:3e:d3:
                    25:7d:93:ee:37:7a:47:c4:fc:5f:1d:ab:f0:e3:de:
                    dc:29:98:66:25:80:3f:2d:ff:06:60:a7:84:13:d3:
                    f9:6d:72:84:78:96:8f:df:62:d6:8a:d9:dc:c9:8f:
                    a2:0b:a4:7a:a1:5e:87:6b:45:47:fc:69:a2:c0:bb:
                    bd:ac:a6:3d:12:4f:52:23:62:dd:d9:cb:d8:59:0a:
                    06:5b:dc:64:6f:75:a3:2e:a4:0e:63:2d:35:65:e6:
                    a2:9c:83:7c:55:6b:26:e2:b5:f3:96:23:77:cd:fa:
                    ce:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D6:0C:78:9B:16:A1:D4:E8:9B:D6:CF:05:2D:61:80:64:D2:67:E2
            X509v3 Authority Key Identifier:
                keyid:C6:FD:E7:EC:24:07:1A:0C:64:64:09:2A:F3:B2:65:7B:1E:1D:D8:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DvGjRXrma7jNGajs6mACSb5kBfYs6kuGt5rTV3exjvH9/0/C6FDE7EC24071A0C6464092AF3B2657B1E1DD8E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6FDE7EC24071A0C6464092AF3B2657B1E1DD8E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvGjRXrma7jNGajs6mACSb5kBfYs6kuGt5rTV3exjvH9/0/323830343a333731303a3a2f33322d3438203d3e20323636333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3710::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:9d:71:e0:1a:23:cc:3f:b3:df:97:0f:80:36:d7:98:be:8d:
         12:a4:f2:39:6e:f1:02:cd:8d:dc:3e:8c:95:97:ad:48:a3:ce:
         ec:24:55:f0:aa:b5:09:b0:53:08:29:c7:ad:3e:58:08:ca:95:
         fc:50:9a:69:2d:8e:ba:82:09:14:55:32:04:71:2a:f6:13:0c:
         14:4e:7a:8c:2f:51:e4:69:6e:8f:ef:7a:4a:25:90:8d:82:15:
         1c:11:1c:db:c8:4d:cf:72:42:46:c6:20:ee:69:68:9f:42:ce:
         b9:a5:96:08:cf:db:2a:53:6b:41:b3:db:b0:72:23:61:49:a4:
         a6:2f:21:09:3c:bf:05:02:a6:b5:63:83:2e:6b:b8:ca:85:e1:
         8a:ef:f5:3e:31:4a:f2:37:22:e2:da:84:f6:11:80:3b:10:6a:
         77:38:df:04:3c:0c:7d:6f:23:81:93:79:8e:d4:bb:97:b8:8c:
         cb:a7:a8:1c:bf:6e:db:f1:14:65:8d:eb:55:b1:e4:65:40:32:
         bf:40:3f:56:3e:0a:b3:33:ec:b1:46:20:45:fe:dc:e4:49:ff:
         17:01:af:82:1d:3e:af:64:50:30:ca:bd:1a:c0:2f:60:f7:d5:
         c1:89:d8:df:9f:b0:9c:a1:10:7c:0f:75:4e:35:70:95:0f:f3:
         74:65:b6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----