Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/0/323830343a313336343a3a2f33322d3438203d3e20323633353332.roa
File:                     323830343a313336343a3a2f33322d3438203d3e20323633353332.roa (raw, json)
Hash identifier:          G1LaNYd7xOccsQ75TdAapTVsMUwmev7Co+mfd+E/jBA=
Subject key identifier:   5D:CD:49:B0:F6:8C:F4:F6:ED:F8:11:6F:A7:0F:CC:62:61:CA:69:31
Certificate issuer:       /CN=6A108E4F623A285865E640BA6F834863966A2D1C
Certificate serial:       224BD80010E1055D24BB5A9958262CC9F9506632
Authority key identifier: 6A:10:8E:4F:62:3A:28:58:65:E6:40:BA:6F:83:48:63:96:6A:2D:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A108E4F623A285865E640BA6F834863966A2D1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/0/323830343a313336343a3a2f33322d3438203d3e20323633353332.roa
Signing time:             Tue 14 Nov 2023 14:09:04 +0000
ROA not before:           Tue 14 Nov 2023 14:04:04 +0000
ROA not after:            Tue 12 Nov 2024 14:09:04 +0000
asID:                     263532
IP address blocks:        2804:1364::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:4b:d8:00:10:e1:05:5d:24:bb:5a:99:58:26:2c:c9:f9:50:66:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A108E4F623A285865E640BA6F834863966A2D1C
        Validity
            Not Before: Nov 14 14:04:04 2023 GMT
            Not After : Nov 12 14:09:04 2024 GMT
        Subject: CN=5DCD49B0F68CF4F6EDF8116FA70FCC6261CA6931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e1:7f:6f:48:b0:57:5d:be:05:2d:b6:c4:75:
                    4f:93:f2:d1:96:fb:db:6d:e1:16:7d:3a:71:d8:f7:
                    de:32:13:06:1f:4b:3b:97:d7:3e:68:91:a3:bc:2e:
                    5f:db:2e:64:e4:bc:89:c0:ca:a6:4c:b0:ac:5e:f8:
                    f7:96:5d:a0:ab:5a:01:0b:2a:99:3e:c8:71:ce:8c:
                    04:cb:f1:87:c2:c0:ac:a3:25:43:2f:75:3f:a6:4c:
                    e2:2d:7f:d0:11:6b:b0:1e:32:91:8b:ae:37:af:da:
                    3c:31:a6:cb:bb:2d:6d:54:f7:e4:b7:d0:f5:68:cd:
                    1e:ea:05:aa:df:52:e8:a3:02:42:af:08:a8:d6:93:
                    ef:35:c3:aa:4c:cb:98:0e:71:be:0f:9e:2e:51:d2:
                    1c:9b:0b:f8:a8:85:9b:37:62:a3:6c:a3:c2:cf:7a:
                    04:62:cb:e6:7b:02:62:0b:7f:18:00:e9:6e:d3:7d:
                    f6:8f:54:8b:84:ea:00:0f:fd:3c:5d:53:b3:ac:1d:
                    1b:17:fd:40:1d:40:86:8e:d3:bb:a4:33:17:3a:60:
                    46:f5:12:ac:de:2b:16:58:35:1d:11:54:cc:4b:08:
                    f4:16:87:74:f7:50:81:11:e6:5f:61:4d:92:b3:9f:
                    e9:9f:d3:86:8c:79:9a:be:0f:ed:cf:9a:a3:c4:c2:
                    d8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:CD:49:B0:F6:8C:F4:F6:ED:F8:11:6F:A7:0F:CC:62:61:CA:69:31
            X509v3 Authority Key Identifier:
                keyid:6A:10:8E:4F:62:3A:28:58:65:E6:40:BA:6F:83:48:63:96:6A:2D:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/0/6A108E4F623A285865E640BA6F834863966A2D1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A108E4F623A285865E640BA6F834863966A2D1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/0/323830343a313336343a3a2f33322d3438203d3e20323633353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1364::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:2c:19:4d:b9:26:93:08:c0:42:8f:f9:04:9c:05:b2:b5:8a:
         42:a5:0b:5d:9f:fd:ca:67:44:69:f0:05:bf:36:6d:72:48:df:
         4a:d2:32:66:b5:16:f2:c3:cf:7a:d6:31:7e:05:aa:ac:76:cf:
         bb:19:58:03:48:c1:0b:cb:8e:33:58:05:ca:2e:ae:0d:d9:2f:
         b2:b1:b6:dd:40:25:e3:08:13:6d:49:e0:08:89:c0:6f:3c:f4:
         05:5c:5a:5d:31:20:2c:af:00:d9:64:0c:28:ad:34:91:f2:1a:
         4f:d9:cc:cf:1d:92:ff:79:14:b0:af:8b:a1:99:17:5f:e6:9a:
         ef:22:ea:94:32:83:43:1f:ce:1a:44:87:c5:74:4b:96:1b:b1:
         60:8b:41:ce:f2:72:5b:59:ac:4d:ec:47:db:68:bc:68:e4:0a:
         cc:30:57:7b:08:70:fe:af:71:4d:7c:16:28:9a:72:16:5d:6b:
         a0:8c:30:1e:7f:64:30:9a:3b:93:9d:4b:5a:8b:6c:48:9e:c6:
         f3:7d:d1:0f:3d:66:14:44:3f:42:7f:75:9a:e6:18:48:b6:e3:
         ff:2a:8f:86:be:85:78:7d:46:4d:bc:5d:72:b7:84:5d:ff:cb:
         22:f5:ac:d4:10:09:5e:e8:8d:da:f7:bc:40:53:d3:e5:30:c5:
         21:a2:ac:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----