Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/0/323830343a353165383a3a2f33322d3332203d3e20323638343834.roa
File:                     323830343a353165383a3a2f33322d3332203d3e20323638343834.roa (raw, json)
Hash identifier:          Jo7rgODRzKouEkWQ/AIARAJKuxx5LCGP/PMMvZGl+e8=
Subject key identifier:   4A:60:EF:90:FA:5B:1C:D3:2F:C5:58:BA:DC:43:1F:B3:48:73:DE:C1
Certificate issuer:       /CN=692CE7CC8944D90A62347F51C76421383FAA3B8F
Certificate serial:       01868EFB62E3999A46A5AE7F2B43B3BE898C3975
Authority key identifier: 69:2C:E7:CC:89:44:D9:0A:62:34:7F:51:C7:64:21:38:3F:AA:3B:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/692CE7CC8944D90A62347F51C76421383FAA3B8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/0/323830343a353165383a3a2f33322d3332203d3e20323638343834.roa
Signing time:             Thu 14 Sep 2023 14:34:46 +0000
ROA not before:           Thu 14 Sep 2023 14:29:46 +0000
ROA not after:            Thu 12 Sep 2024 14:34:46 +0000
asID:                     268484
IP address blocks:        2804:51e8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:8e:fb:62:e3:99:9a:46:a5:ae:7f:2b:43:b3:be:89:8c:39:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=692CE7CC8944D90A62347F51C76421383FAA3B8F
        Validity
            Not Before: Sep 14 14:29:46 2023 GMT
            Not After : Sep 12 14:34:46 2024 GMT
        Subject: CN=4A60EF90FA5B1CD32FC558BADC431FB34873DEC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a7:14:88:40:42:db:35:04:01:af:3c:2d:0a:
                    e5:86:a5:fd:92:bc:e8:bd:20:bc:da:65:5a:d5:a6:
                    c4:a9:8a:13:ae:30:e0:01:21:e2:a5:c6:33:08:df:
                    df:42:b0:54:9b:ce:8d:c5:0d:09:a9:5b:8f:be:33:
                    47:d2:27:36:91:da:53:cd:f1:08:5e:ce:65:5f:4a:
                    06:44:5a:2f:d9:cf:30:cd:a3:b4:ee:68:4e:dc:c9:
                    98:18:35:91:b0:4f:64:fb:7c:d2:89:b6:0c:aa:41:
                    c8:8c:a8:1b:90:c3:90:9a:c5:eb:97:a8:9c:95:fc:
                    28:52:a8:20:32:ca:cf:d2:f3:19:f6:be:f9:ef:62:
                    2d:98:fe:81:6f:b0:e3:cd:1e:f2:88:bb:09:d8:bb:
                    b2:44:76:93:39:12:19:42:9e:0b:d5:ab:a0:f7:87:
                    5d:1a:f4:9a:8f:9d:21:36:26:bc:27:96:f7:ab:ae:
                    fe:b6:67:c7:e4:16:d1:18:54:7c:3e:49:4c:0a:19:
                    de:e4:fe:4e:4c:df:5f:06:e8:75:78:8f:a3:00:79:
                    89:8a:fb:68:f5:49:56:c7:e6:3b:22:ea:98:8b:ea:
                    d6:28:00:61:02:b2:45:14:db:a1:35:28:b7:1a:b1:
                    b5:02:5d:b3:86:b3:44:54:78:ed:ca:84:61:9c:70:
                    c1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:60:EF:90:FA:5B:1C:D3:2F:C5:58:BA:DC:43:1F:B3:48:73:DE:C1
            X509v3 Authority Key Identifier:
                keyid:69:2C:E7:CC:89:44:D9:0A:62:34:7F:51:C7:64:21:38:3F:AA:3B:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/0/692CE7CC8944D90A62347F51C76421383FAA3B8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/692CE7CC8944D90A62347F51C76421383FAA3B8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/0/323830343a353165383a3a2f33322d3332203d3e20323638343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:51e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:4a:b6:47:d6:de:80:1e:d5:5c:c3:e9:23:a9:80:2e:24:4d:
         5d:28:12:13:2c:14:2a:0c:53:9f:52:37:b4:9e:58:67:23:01:
         ce:6f:64:9d:4c:20:dc:1d:b3:e7:84:35:a8:09:a9:ed:57:24:
         dd:26:62:99:81:4a:6e:6c:d9:c8:4a:af:ac:ec:ae:33:08:92:
         3f:dc:a7:13:7f:de:d6:0a:3d:dc:6a:16:32:0a:5d:0e:82:ae:
         8d:83:ab:d1:df:08:1c:60:b0:ef:5c:a4:1a:f6:9a:83:3a:17:
         f6:dd:e1:59:cc:f3:f5:1f:59:3f:0d:cc:c6:15:a6:24:14:3c:
         22:be:07:c8:b4:2d:c1:bd:8f:90:31:ba:b8:9e:64:06:ba:bf:
         07:a2:8d:10:91:e1:1e:63:12:1f:2b:a3:70:aa:62:5b:c9:4a:
         c3:27:1d:fc:3c:9f:06:6a:17:3e:62:b3:d1:e6:89:21:90:be:
         c4:c0:52:dd:7e:71:60:8d:88:7d:b6:93:9a:db:d9:d9:9a:88:
         45:4f:19:a5:f0:bd:6f:c7:43:de:01:d5:06:e5:aa:e6:e1:ef:
         60:3a:cb:83:d7:70:f4:ae:9b:0b:e2:21:80:b8:e3:69:7c:32:
         06:5a:cd:2c:09:79:bf:81:1b:e7:0a:73:23:13:c2:65:e4:56:
         73:55:76:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----