Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/0/323830343a386361633a3a2f33322d3332203d3e20323733383134.roa
File:                     323830343a386361633a3a2f33322d3332203d3e20323733383134.roa (raw, json)
Hash identifier:          tU04r/lQ9bqGnCmpilh41wKMuzqpoxAyx9K+ZYJKj7w=
Subject key identifier:   B1:D2:66:22:29:51:7F:85:98:9A:1F:F5:EE:18:B0:6A:BF:E3:82:64
Certificate issuer:       /CN=6C20D6D1C3A83815C34AD48BB58CDE7175526D06
Certificate serial:       4C3078400ACB84842D26F787DEEF4FF81B74952D
Authority key identifier: 6C:20:D6:D1:C3:A8:38:15:C3:4A:D4:8B:B5:8C:DE:71:75:52:6D:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6C20D6D1C3A83815C34AD48BB58CDE7175526D06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/0/323830343a386361633a3a2f33322d3332203d3e20323733383134.roa
Signing time:             Thu 25 Jan 2024 19:23:37 +0000
ROA not before:           Thu 25 Jan 2024 19:18:37 +0000
ROA not after:            Thu 23 Jan 2025 19:23:37 +0000
asID:                     273814
IP address blocks:        2804:8cac::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:30:78:40:0a:cb:84:84:2d:26:f7:87:de:ef:4f:f8:1b:74:95:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C20D6D1C3A83815C34AD48BB58CDE7175526D06
        Validity
            Not Before: Jan 25 19:18:37 2024 GMT
            Not After : Jan 23 19:23:37 2025 GMT
        Subject: CN=B1D2662229517F85989A1FF5EE18B06ABFE38264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:01:d7:85:d3:75:10:87:e1:99:29:d4:79:0f:
                    c5:c4:2a:20:9c:74:21:b8:d2:10:54:ba:99:19:af:
                    57:d1:66:06:ee:12:f0:ce:a6:a3:1a:6c:41:13:f5:
                    ee:14:a4:87:7f:68:26:ce:6b:bd:eb:97:d1:94:62:
                    b4:69:11:84:96:77:c4:37:50:de:17:2b:44:f1:2c:
                    ab:84:f3:d1:8a:09:2d:1e:da:7c:5c:92:33:57:99:
                    95:ea:40:4f:25:d9:01:e5:6d:0f:43:2a:9e:d8:15:
                    e1:95:6e:31:48:51:28:78:c8:61:b6:b9:07:8f:b9:
                    54:ca:6f:77:a7:f4:50:4c:87:27:d6:f1:17:82:32:
                    76:52:e0:5c:e2:ee:0a:55:ba:bd:98:e0:ee:0a:22:
                    55:9e:09:cf:b2:7f:e3:a8:8b:1b:5c:25:3f:02:df:
                    1b:57:f3:47:ca:01:27:47:44:2f:3a:d7:5d:57:c0:
                    a8:52:82:40:2f:3e:54:bd:28:b5:1b:07:63:b8:3a:
                    1b:89:4c:d9:b9:c4:4f:cd:d7:32:aa:b8:17:cc:fc:
                    39:12:1d:ea:75:f7:4b:4c:90:f7:f2:95:c6:91:f1:
                    5c:66:f6:c8:2b:16:df:00:3f:a3:47:e8:dc:a5:9a:
                    d1:81:e6:bb:c9:9b:ac:f2:c2:e9:28:88:91:1d:62:
                    9f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D2:66:22:29:51:7F:85:98:9A:1F:F5:EE:18:B0:6A:BF:E3:82:64
            X509v3 Authority Key Identifier:
                keyid:6C:20:D6:D1:C3:A8:38:15:C3:4A:D4:8B:B5:8C:DE:71:75:52:6D:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/0/6C20D6D1C3A83815C34AD48BB58CDE7175526D06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6C20D6D1C3A83815C34AD48BB58CDE7175526D06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/0/323830343a386361633a3a2f33322d3332203d3e20323733383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8cac::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:3e:b9:82:7c:15:d7:51:b6:9c:95:f9:8c:ed:94:fe:b7:0a:
         c1:d9:72:91:2a:c0:c1:dd:16:a1:a6:2e:bf:10:57:cf:09:03:
         c3:51:f7:b0:c7:2b:de:20:58:3e:4e:9f:70:d2:14:d2:60:29:
         e8:a4:d5:f9:f9:0c:fa:ac:7a:57:9a:81:e2:c8:e7:d8:7b:db:
         64:30:a2:3c:e9:7b:28:fa:3b:15:ba:70:75:3d:fb:0e:89:f6:
         fd:b9:23:b7:9b:f3:0a:2d:47:31:51:02:cc:5b:0a:a4:4c:6d:
         58:d4:aa:ef:ff:bd:02:7c:1f:50:b7:3e:97:52:e1:a7:e6:3b:
         fb:92:02:f1:88:2f:c4:c0:cf:d9:7d:d6:54:bb:d9:c7:4c:83:
         ca:d4:48:c0:41:66:c6:68:1e:85:92:c6:a7:f6:d8:59:a9:ff:
         6c:2c:1d:29:9a:e1:ea:6c:cb:f3:0d:c1:98:9c:15:2b:d3:c9:
         8d:1c:27:0c:21:fc:ef:80:63:f1:e9:44:c7:61:56:4b:7a:90:
         92:4a:d7:aa:90:97:d4:50:89:7a:ad:56:5e:31:81:60:de:77:
         fe:55:32:64:5d:d7:2a:ae:5c:62:6f:0d:46:5d:23:2d:27:e2:
         8e:bf:ab:8d:5c:c8:81:6d:f7:8e:21:67:4f:50:73:e9:7b:e0:
         d4:85:14:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----