Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqvBULHkPLbj15FkukAoAxQnEjkYSj9XTopqfd5GJjrg/0/323830343a356439303a3a2f33322d3438203d3e203133373836.roa
File:                     323830343a356439303a3a2f33322d3438203d3e203133373836.roa (raw, json)
Hash identifier:          W1wzEa3YJpQ209SWpgYNjv3U92JdqdAtg0sGGAkeXlU=
Subject key identifier:   6B:22:69:AF:1F:D8:2E:14:D5:34:FB:E0:33:4A:08:E5:69:21:39:D2
Certificate issuer:       /CN=63635F5D8DFC4EC6EB518DEDA1830FB84FE20A65
Certificate serial:       4586BB341A348EA97BFEA8F1C869B353135521ED
Authority key identifier: 63:63:5F:5D:8D:FC:4E:C6:EB:51:8D:ED:A1:83:0F:B8:4F:E2:0A:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63635F5D8DFC4EC6EB518DEDA1830FB84FE20A65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqvBULHkPLbj15FkukAoAxQnEjkYSj9XTopqfd5GJjrg/0/323830343a356439303a3a2f33322d3438203d3e203133373836.roa
Signing time:             Thu 15 Feb 2024 20:17:38 +0000
ROA not before:           Thu 15 Feb 2024 20:12:38 +0000
ROA not after:            Thu 13 Feb 2025 20:17:38 +0000
asID:                     13786
IP address blocks:        2804:5d90::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:86:bb:34:1a:34:8e:a9:7b:fe:a8:f1:c8:69:b3:53:13:55:21:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63635F5D8DFC4EC6EB518DEDA1830FB84FE20A65
        Validity
            Not Before: Feb 15 20:12:38 2024 GMT
            Not After : Feb 13 20:17:38 2025 GMT
        Subject: CN=6B2269AF1FD82E14D534FBE0334A08E5692139D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:eb:c1:5a:7e:9e:94:c5:bc:e9:e4:a3:a8:e8:
                    d3:60:e3:ec:2b:f4:97:d4:b9:47:e3:3a:28:71:88:
                    20:27:3d:49:46:a8:94:47:cc:68:45:23:43:59:00:
                    6f:e3:ec:9a:71:5f:91:23:cf:62:11:0a:8b:e4:67:
                    5f:2c:6d:39:08:38:80:c7:b0:4a:85:96:e1:c6:f0:
                    34:a4:ff:5d:5e:f8:32:37:bc:c8:4f:41:fb:4c:fd:
                    35:51:0e:ea:30:c3:2c:84:1d:eb:97:a0:e7:e8:ee:
                    80:1d:d5:66:b4:84:78:d7:9b:2f:63:55:25:de:61:
                    0e:49:dd:46:e4:26:d9:81:bf:6b:06:6d:c6:17:89:
                    e4:f1:da:56:36:ac:a7:48:e4:df:03:27:cf:0b:c0:
                    e0:f9:55:2b:a4:c0:52:2e:d8:6d:2b:37:6c:96:39:
                    0c:67:ea:5e:5e:48:58:e5:18:d2:4d:fd:77:e8:71:
                    e8:45:f6:8d:95:fe:41:16:aa:b9:4b:75:43:25:91:
                    b3:ac:e4:09:ee:85:23:ca:5b:20:10:6a:d0:74:6d:
                    8c:b2:e4:33:71:b4:56:30:37:70:b9:45:fc:f5:65:
                    04:e1:af:c1:0b:9d:35:ab:b4:f6:7c:20:b7:c9:a1:
                    12:e8:3e:a8:ce:81:9c:a2:4f:3c:c4:19:9c:96:13:
                    30:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:22:69:AF:1F:D8:2E:14:D5:34:FB:E0:33:4A:08:E5:69:21:39:D2
            X509v3 Authority Key Identifier:
                keyid:63:63:5F:5D:8D:FC:4E:C6:EB:51:8D:ED:A1:83:0F:B8:4F:E2:0A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqvBULHkPLbj15FkukAoAxQnEjkYSj9XTopqfd5GJjrg/0/63635F5D8DFC4EC6EB518DEDA1830FB84FE20A65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63635F5D8DFC4EC6EB518DEDA1830FB84FE20A65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqvBULHkPLbj15FkukAoAxQnEjkYSj9XTopqfd5GJjrg/0/323830343a356439303a3a2f33322d3438203d3e203133373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5d90::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:91:74:01:e6:82:6b:ba:57:8e:d1:18:2c:dd:d8:ff:f5:ef:
         62:99:68:89:3a:f8:71:de:95:22:50:c8:f3:b2:2b:1a:63:98:
         96:53:a1:17:a8:5d:70:bb:8d:ae:73:35:b7:24:3f:ea:f5:39:
         fb:e4:0b:83:3c:ce:12:89:4b:fa:3a:7d:3c:48:c9:c3:cd:c6:
         71:1f:33:fe:d6:3d:7c:97:03:22:ef:34:7a:fb:e8:ad:b9:b8:
         9a:d0:87:a6:2b:a7:11:e5:61:9b:8c:b5:e5:07:33:6a:50:d7:
         aa:8b:fa:34:2c:f0:cf:22:52:b9:b6:57:c6:ef:b5:f2:5f:92:
         78:ba:07:29:6b:99:02:12:60:7d:66:09:f2:c6:5f:36:87:67:
         72:49:c1:81:4e:ec:dd:bc:06:9d:55:83:5b:7e:62:2e:27:76:
         6e:ca:56:54:a8:3f:3f:00:17:e5:56:57:2d:f1:8a:67:3f:ae:
         a5:53:34:3f:e2:58:e0:63:2c:db:3e:09:63:45:7c:fd:df:b9:
         84:02:fc:c1:cd:db:b9:df:95:5d:a9:0f:23:4c:82:fc:c9:a1:
         27:89:02:42:bc:f0:4c:2b:e3:4d:90:33:56:c9:0e:b5:67:b0:
         47:2e:1c:56:e5:0c:8f:a5:56:19:57:b2:2f:57:be:ba:e5:1f:
         9c:00:02:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----