Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/323830343a346166633a383030303a3a2f33342d3334203d3e203631363134.roa
File:                     323830343a346166633a383030303a3a2f33342d3334203d3e203631363134.roa (raw, json)
Hash identifier:          49OIYAtiP54PE+CPqgzwfNVvMmwbvoErVpoyTuX0w1Q=
Subject key identifier:   57:DD:91:A2:6E:C9:F0:6F:8A:CE:E0:A9:39:B0:A0:24:EA:FB:04:35
Certificate issuer:       /CN=BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637
Certificate serial:       6BC9CD1C11EC5A958F11EDF8C191DDFA9BDA2610
Authority key identifier: BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/323830343a346166633a383030303a3a2f33342d3334203d3e203631363134.roa
Signing time:             Mon 11 Sep 2023 11:20:11 +0000
ROA not before:           Mon 11 Sep 2023 11:15:11 +0000
ROA not after:            Mon 09 Sep 2024 11:20:11 +0000
asID:                     61614
IP address blocks:        2804:4afc:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:c9:cd:1c:11:ec:5a:95:8f:11:ed:f8:c1:91:dd:fa:9b:da:26:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637
        Validity
            Not Before: Sep 11 11:15:11 2023 GMT
            Not After : Sep  9 11:20:11 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0e:96:13:3d:1f:cb:ca:98:7c:f8:0c:14:91:
                    12:66:fc:78:6f:60:e8:a3:2c:41:10:15:56:7a:41:
                    b6:d6:36:8c:1d:cb:cd:f1:48:15:d2:7e:e4:93:fb:
                    f2:61:fc:55:dc:f2:d2:5f:a7:f1:0b:63:94:28:c9:
                    89:85:23:a2:5c:1d:23:96:df:58:7c:a9:07:29:e3:
                    3d:b3:88:74:35:d9:34:70:36:cd:36:b2:31:af:bb:
                    40:6c:ef:f6:8f:7a:74:82:6a:0f:e4:dd:8f:c5:28:
                    02:12:43:b4:7e:e5:a4:53:ae:dd:67:62:e6:cc:13:
                    51:b5:8a:b4:16:95:58:ec:78:40:72:84:fa:a4:a4:
                    57:0c:b5:a0:a7:41:97:f8:1c:8e:2c:b4:f1:f7:a3:
                    80:12:5c:e1:b4:c8:16:06:f7:af:53:64:d5:46:31:
                    92:a3:a8:54:4a:de:d3:20:c1:53:f2:b1:65:35:de:
                    ac:2c:d3:88:10:d5:9f:2b:2a:a0:26:0a:5c:c0:83:
                    f8:6b:05:2b:9d:64:2f:c9:00:1e:d8:b8:52:de:22:
                    54:c3:94:d1:bb:75:98:d2:10:5f:c9:ce:48:3d:7a:
                    d5:35:bd:dd:06:43:b7:f5:6e:4d:2b:40:07:16:3c:
                    17:90:27:92:60:ec:a9:b5:79:fa:b3:15:36:61:df:
                    ce:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:DD:91:A2:6E:C9:F0:6F:8A:CE:E0:A9:39:B0:A0:24:EA:FB:04:35
            X509v3 Authority Key Identifier:
                keyid:BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/323830343a346166633a383030303a3a2f33342d3334203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4afc:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5e:6a:30:2e:69:01:1e:3e:85:90:8f:64:84:30:71:6e:1d:cf:
         65:e0:be:f5:4a:d3:f5:2a:44:01:96:87:91:6a:0d:22:e8:f3:
         e5:d3:af:63:58:4d:87:41:18:53:d1:0b:36:e7:c1:05:6b:27:
         1f:ff:02:6f:4f:b0:d5:88:5b:a0:6c:1c:21:89:08:78:0f:e4:
         3c:df:f6:df:52:9c:ab:b6:8a:ae:71:15:89:f7:cb:6c:62:83:
         ac:f7:16:fa:d5:86:4a:1f:15:bf:73:7a:12:10:4f:14:6f:9b:
         5c:d5:a6:32:5f:fc:60:23:9c:cf:5f:60:83:a6:bd:83:3d:5c:
         b5:19:c4:05:86:ca:91:6b:7c:e6:97:8b:52:70:13:a6:21:ca:
         2e:a7:3e:0e:0a:52:4a:69:ad:07:0f:10:f1:32:f9:3b:82:22:
         4f:89:5b:fb:e4:87:e1:89:ee:f1:89:fb:9c:e6:b2:fd:81:7d:
         f3:4b:55:33:44:85:24:e0:f7:01:01:fd:a0:c1:fb:e4:a1:e5:
         fc:11:fe:49:6f:88:0c:28:c4:8d:6d:50:31:69:ff:6e:1e:7f:
         28:e3:a4:92:c1:4f:82:1b:e0:98:7f:c7:0f:38:4c:4b:3d:6c:
         85:c2:5a:7a:0f:cb:6c:de:d3:85:04:99:69:4a:ae:72:bd:2b:
         c1:8c:4f:29
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----