Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/323830343a363661383a3a2f33322d3336203d3e20323639353734.roa
File:                     323830343a363661383a3a2f33322d3336203d3e20323639353734.roa (raw, json)
Hash identifier:          /cnZKa/18Th5Ij0UEryu/TMHlRa+RGv2vY49XVzCznY=
Subject key identifier:   95:C8:87:35:85:EA:44:FC:14:59:F8:E8:5B:62:80:F6:38:F2:64:A1
Certificate issuer:       /CN=6B4AA632E25A1DD9B00ABDC45D1074C026A297C3
Certificate serial:       4E9C5F6E78C035934244583450F1B66883D15141
Authority key identifier: 6B:4A:A6:32:E2:5A:1D:D9:B0:0A:BD:C4:5D:10:74:C0:26:A2:97:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6B4AA632E25A1DD9B00ABDC45D1074C026A297C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/323830343a363661383a3a2f33322d3336203d3e20323639353734.roa
Signing time:             Mon 14 Aug 2023 12:33:44 +0000
ROA not before:           Mon 14 Aug 2023 12:28:44 +0000
ROA not after:            Mon 12 Aug 2024 12:33:44 +0000
asID:                     269574
IP address blocks:        2804:66a8::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:9c:5f:6e:78:c0:35:93:42:44:58:34:50:f1:b6:68:83:d1:51:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B4AA632E25A1DD9B00ABDC45D1074C026A297C3
        Validity
            Not Before: Aug 14 12:28:44 2023 GMT
            Not After : Aug 12 12:33:44 2024 GMT
        Subject: CN=95C8873585EA44FC1459F8E85B6280F638F264A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:19:e8:3f:15:1b:f9:bb:e1:7b:20:ab:65:41:
                    5b:82:6a:c4:87:17:d1:cd:c9:cb:84:1f:62:a4:82:
                    0e:4c:13:c9:e5:ac:2f:f7:68:e6:6d:e8:f6:22:5c:
                    ab:83:7c:2d:76:9f:ff:e2:6b:16:97:24:6f:9c:54:
                    50:6c:c8:2e:a4:e4:47:70:cb:41:39:fa:95:27:44:
                    07:ef:b6:bd:58:01:d9:3d:7e:71:5c:81:e8:e4:3e:
                    01:f5:32:53:56:71:f9:48:42:b8:fe:6c:52:cb:e9:
                    a5:5e:7a:d3:ed:da:0e:c3:36:52:a8:cd:b9:96:75:
                    91:66:e5:fe:95:46:f8:48:58:73:fd:5d:eb:c3:0b:
                    d4:3a:e9:d0:c6:23:3d:22:d8:38:04:13:a1:fa:fc:
                    ff:bf:8a:21:ac:9a:59:09:c8:9d:85:21:ac:25:9a:
                    39:cf:bc:9b:03:43:f7:16:8b:7f:da:1c:e6:8c:6f:
                    f3:eb:b0:bc:bf:77:6d:97:72:d4:3a:2c:12:7d:03:
                    56:17:a5:66:a7:f9:63:00:fc:9f:ec:1c:51:1f:20:
                    a6:49:07:ce:95:ca:2d:45:75:06:45:c3:a8:ba:cf:
                    72:1b:df:45:da:73:50:3e:4f:95:82:a2:f9:37:93:
                    7e:79:34:c5:a2:74:85:4a:9c:ed:aa:f3:ad:e2:9d:
                    be:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C8:87:35:85:EA:44:FC:14:59:F8:E8:5B:62:80:F6:38:F2:64:A1
            X509v3 Authority Key Identifier:
                keyid:6B:4A:A6:32:E2:5A:1D:D9:B0:0A:BD:C4:5D:10:74:C0:26:A2:97:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/6B4AA632E25A1DD9B00ABDC45D1074C026A297C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6B4AA632E25A1DD9B00ABDC45D1074C026A297C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/323830343a363661383a3a2f33322d3336203d3e20323639353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:66a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:2b:7e:ac:21:36:21:50:de:1f:a9:e1:7e:95:d1:ac:e5:4c:
         fe:d9:8d:e3:7c:f9:7e:b6:f9:d9:74:30:58:a1:4d:f4:d2:0d:
         ce:32:b1:51:8d:c7:f5:4f:df:5a:04:ef:85:66:28:b9:cf:a1:
         68:55:cf:22:58:e1:c3:23:81:56:c5:54:c1:08:d1:af:87:11:
         2b:26:6d:e4:61:7f:23:f0:db:79:d0:20:5c:92:6d:64:9b:be:
         fe:dc:e8:2d:fe:6d:48:5e:94:24:9b:8d:4a:70:f7:31:7f:a7:
         4a:62:f0:c5:99:3b:87:7b:1a:67:52:ef:c6:44:60:af:70:23:
         e4:4b:d1:91:7f:d8:94:29:e8:e7:2f:1c:07:13:50:74:8d:f0:
         47:61:26:c4:68:70:f1:fa:b4:b4:e8:5c:20:c9:33:88:3e:1b:
         7d:2a:6a:de:22:4a:91:76:25:6d:99:c5:b4:de:02:3a:64:b8:
         8e:dd:f9:86:e3:3f:70:ad:00:40:b5:d9:3b:d2:7a:a3:a5:12:
         9e:9f:a4:73:41:6e:73:82:8b:6b:f9:61:67:9b:df:ce:b9:95:
         46:a7:92:61:82:2d:e4:a7:ad:63:3b:97:97:2f:65:30:bf:62:
         82:72:5b:37:1f:88:0f:b1:c7:6b:c1:6f:66:e9:fb:24:4f:b9:
         0e:0c:ea:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----