Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/0/323830343a383162343a3a2f33322d3332203d3e20323732343731.roa
File:                     323830343a383162343a3a2f33322d3332203d3e20323732343731.roa (raw, json)
Hash identifier:          JYLwozDf0luRdgG3VOvtKGzBFOmAFA1U5KJwBRw3ZxI=
Subject key identifier:   71:23:4E:B8:AE:A1:18:01:23:8F:AC:44:4D:B4:CE:86:45:CB:07:9C
Certificate issuer:       /CN=6A64668FDE75978EE55DC6B74EC83A86047400A6
Certificate serial:       4AE30B5902022C9E39341910811568F0A55A9EC0
Authority key identifier: 6A:64:66:8F:DE:75:97:8E:E5:5D:C6:B7:4E:C8:3A:86:04:74:00:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A64668FDE75978EE55DC6B74EC83A86047400A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/0/323830343a383162343a3a2f33322d3332203d3e20323732343731.roa
Signing time:             Thu 07 Mar 2024 13:07:20 +0000
ROA not before:           Thu 07 Mar 2024 13:02:20 +0000
ROA not after:            Thu 06 Mar 2025 13:07:20 +0000
asID:                     272471
IP address blocks:        2804:81b4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e3:0b:59:02:02:2c:9e:39:34:19:10:81:15:68:f0:a5:5a:9e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A64668FDE75978EE55DC6B74EC83A86047400A6
        Validity
            Not Before: Mar  7 13:02:20 2024 GMT
            Not After : Mar  6 13:07:20 2025 GMT
        Subject: CN=71234EB8AEA11801238FAC444DB4CE8645CB079C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:14:e8:3e:29:20:50:73:9a:15:75:1a:9f:e8:
                    cd:c2:8f:96:4d:38:99:f6:28:e1:fc:9f:a3:e8:c3:
                    16:47:c5:91:0a:9c:2a:40:67:f3:2c:9e:dc:1f:59:
                    51:30:39:77:4b:13:82:34:81:ad:21:5a:79:be:64:
                    3d:2e:a9:d7:43:e1:c2:cb:81:ae:7a:92:52:05:34:
                    ae:b1:a6:0a:c1:1c:54:f7:fb:93:f4:5e:fd:a8:27:
                    d0:ab:19:d7:79:0d:64:1f:07:fa:05:c0:e7:b3:48:
                    58:ee:3b:d2:9e:24:d3:4a:45:26:af:9d:71:89:a6:
                    de:f7:6f:a2:9c:05:51:df:d4:6c:88:02:a8:b3:16:
                    cf:43:f0:63:92:ed:74:65:66:13:f0:de:bb:83:08:
                    4f:af:9e:ad:1d:20:3a:34:bd:e4:28:b7:e8:d1:52:
                    71:38:0e:fa:da:b5:49:dc:97:5e:e6:f1:a9:ac:97:
                    32:1d:14:23:15:45:cf:78:82:76:6a:6c:ea:5e:c7:
                    cf:66:3c:1b:1b:e8:f4:ba:65:39:42:fc:dd:62:8e:
                    10:7b:bb:b1:d3:cd:91:b6:6b:67:f2:62:4a:22:18:
                    64:57:a3:05:90:73:4e:aa:8a:91:91:80:88:09:95:
                    87:33:8d:44:35:7b:f2:a8:bc:55:00:7e:5f:e6:cc:
                    19:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:23:4E:B8:AE:A1:18:01:23:8F:AC:44:4D:B4:CE:86:45:CB:07:9C
            X509v3 Authority Key Identifier:
                keyid:6A:64:66:8F:DE:75:97:8E:E5:5D:C6:B7:4E:C8:3A:86:04:74:00:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/0/6A64668FDE75978EE55DC6B74EC83A86047400A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A64668FDE75978EE55DC6B74EC83A86047400A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/0/323830343a383162343a3a2f33322d3332203d3e20323732343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:81b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:e1:61:8a:ba:00:bd:80:45:a7:5e:7a:27:e7:83:db:33:db:
         46:92:7f:7d:d9:1b:e1:c0:48:af:59:f9:67:90:e6:35:e3:45:
         0d:08:57:f8:73:19:fb:44:b5:31:a6:48:81:01:86:a7:19:75:
         c9:0b:a0:10:8c:92:a9:96:65:d4:87:79:4a:b2:fc:00:68:ed:
         1b:bc:08:05:5c:b3:16:4d:a4:21:b5:b5:6e:32:2a:5e:f8:cf:
         0a:0f:31:04:22:47:c2:8a:e7:1b:dd:21:73:2c:68:5c:32:ca:
         b0:8b:74:ae:d4:b8:eb:c0:72:30:9d:2b:56:32:81:8e:85:8b:
         81:a0:92:0e:12:ad:68:d9:3c:6c:44:29:64:62:0c:66:fa:12:
         09:e1:ef:da:8c:4a:4a:73:0d:c0:5f:ad:16:a8:bd:5e:64:0a:
         58:90:67:5e:47:40:2a:25:e2:95:61:9c:66:22:8c:a1:ef:8d:
         6d:a2:d3:01:5a:b3:f0:e9:4f:ca:5d:6f:a7:c1:83:14:ff:a9:
         b9:89:5b:29:3c:20:12:de:e1:f2:b5:9f:58:fd:36:03:f5:d8:
         ef:ec:12:8d:44:9b:a6:23:c9:f8:ff:4c:18:a5:43:bc:be:5f:
         cc:a4:e9:09:a7:ed:d8:21:c1:10:4e:20:10:3b:e7:5a:03:2f:
         3d:ec:c6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----