Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5sA4ukuPhb6pKPNMdniWpmbXfL2hSa65K3kF7MhcDfXL/0/323830343a383366303a3a2f33322d3332203d3e20323732323330.roa
File:                     323830343a383366303a3a2f33322d3332203d3e20323732323330.roa (raw, json)
Hash identifier:          RSN9cjvGzr9MUfmjj6EtzEILNxMrHEU0rXu2G9tUtaA=
Subject key identifier:   5F:6B:05:5A:F5:A6:68:0E:FE:C7:43:3A:74:8F:DB:13:86:E3:0D:DB
Certificate issuer:       /CN=6901E2CA44AFC9C6D0D405624F6ECF4BD864F7FB
Certificate serial:       2BE780B16145ABBB648052E2C82C9087C1788623
Authority key identifier: 69:01:E2:CA:44:AF:C9:C6:D0:D4:05:62:4F:6E:CF:4B:D8:64:F7:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6901E2CA44AFC9C6D0D405624F6ECF4BD864F7FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5sA4ukuPhb6pKPNMdniWpmbXfL2hSa65K3kF7MhcDfXL/0/323830343a383366303a3a2f33322d3332203d3e20323732323330.roa
Signing time:             Sat 28 Oct 2023 12:00:00 +0000
ROA not before:           Sat 28 Oct 2023 11:55:00 +0000
ROA not after:            Sat 26 Oct 2024 12:00:00 +0000
asID:                     272230
IP address blocks:        2804:83f0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:e7:80:b1:61:45:ab:bb:64:80:52:e2:c8:2c:90:87:c1:78:86:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6901E2CA44AFC9C6D0D405624F6ECF4BD864F7FB
        Validity
            Not Before: Oct 28 11:55:00 2023 GMT
            Not After : Oct 26 12:00:00 2024 GMT
        Subject: CN=3082010A02820101009458BAE369081FE198B547EB1AD55E024F8B985E290358DD999A5510898B24A2916D865260EE37F9B2C339BC36AC4A5950788937FB58799C1E4FCA033A579440273AC24B1AE45BD8AD7DDEB13F99B2B31FEC63DB04F4F267F3ED8E5143CAB5FACE02288B758D15DED17CF0961B59D0E1811D5EA880F73E8425191D8869D48249B02C3E38270EDBB6AEC5B4ADC875E1AC6EF6772F55B9A2E13BC404E4703A5B434D200F3673202E2D781223183899D03AEFD3E9A46303EAE2557E69977B1976636B66286F486FCCAB3BB05A07023FB1CA7D63A09FBBD9F482440C30DB52AF1F758D91DF3078FA4768D7DEC34B3A2C0B96F183223575D2A9FD9B5D5CC3BB25C5E30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:58:ba:e3:69:08:1f:e1:98:b5:47:eb:1a:d5:
                    5e:02:4f:8b:98:5e:29:03:58:dd:99:9a:55:10:89:
                    8b:24:a2:91:6d:86:52:60:ee:37:f9:b2:c3:39:bc:
                    36:ac:4a:59:50:78:89:37:fb:58:79:9c:1e:4f:ca:
                    03:3a:57:94:40:27:3a:c2:4b:1a:e4:5b:d8:ad:7d:
                    de:b1:3f:99:b2:b3:1f:ec:63:db:04:f4:f2:67:f3:
                    ed:8e:51:43:ca:b5:fa:ce:02:28:8b:75:8d:15:de:
                    d1:7c:f0:96:1b:59:d0:e1:81:1d:5e:a8:80:f7:3e:
                    84:25:19:1d:88:69:d4:82:49:b0:2c:3e:38:27:0e:
                    db:b6:ae:c5:b4:ad:c8:75:e1:ac:6e:f6:77:2f:55:
                    b9:a2:e1:3b:c4:04:e4:70:3a:5b:43:4d:20:0f:36:
                    73:20:2e:2d:78:12:23:18:38:99:d0:3a:ef:d3:e9:
                    a4:63:03:ea:e2:55:7e:69:97:7b:19:76:63:6b:66:
                    28:6f:48:6f:cc:ab:3b:b0:5a:07:02:3f:b1:ca:7d:
                    63:a0:9f:bb:d9:f4:82:44:0c:30:db:52:af:1f:75:
                    8d:91:df:30:78:fa:47:68:d7:de:c3:4b:3a:2c:0b:
                    96:f1:83:22:35:75:d2:a9:fd:9b:5d:5c:c3:bb:25:
                    c5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:6B:05:5A:F5:A6:68:0E:FE:C7:43:3A:74:8F:DB:13:86:E3:0D:DB
            X509v3 Authority Key Identifier:
                keyid:69:01:E2:CA:44:AF:C9:C6:D0:D4:05:62:4F:6E:CF:4B:D8:64:F7:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5sA4ukuPhb6pKPNMdniWpmbXfL2hSa65K3kF7MhcDfXL/0/6901E2CA44AFC9C6D0D405624F6ECF4BD864F7FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6901E2CA44AFC9C6D0D405624F6ECF4BD864F7FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5sA4ukuPhb6pKPNMdniWpmbXfL2hSa65K3kF7MhcDfXL/0/323830343a383366303a3a2f33322d3332203d3e20323732323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:83f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:ae:71:58:94:69:72:88:1c:a3:44:9f:e0:b5:90:8f:5a:68:
         36:3d:bc:d6:83:c1:e3:00:8a:55:93:de:0d:06:69:c6:3b:6a:
         11:a9:25:5c:ca:8a:2d:5e:bc:54:e6:60:58:b3:5c:28:97:14:
         2b:70:a5:56:b3:6d:c0:bb:10:17:ae:f0:7a:5e:5d:23:ff:ad:
         9f:08:69:88:c2:ec:00:1f:f9:c9:02:f3:0b:29:72:23:ae:61:
         b8:b7:a0:4b:7e:77:ba:04:0f:93:90:67:5c:a0:73:01:90:64:
         fb:e3:be:29:58:cc:61:21:4b:09:17:5f:68:32:28:4f:a8:d3:
         23:a5:61:87:99:79:7a:57:eb:b7:ae:1c:e1:a5:5d:07:db:e6:
         b0:38:ee:ac:11:f9:43:07:44:db:a2:84:2a:58:6e:ac:1b:a0:
         30:49:90:eb:f3:af:f1:9f:d3:30:44:5e:61:4f:ec:af:7c:dc:
         c2:70:e6:94:8c:3c:67:55:16:1a:a1:eb:19:16:bd:47:0e:2b:
         d5:99:56:f8:5b:78:63:a7:06:a2:92:9b:57:0b:13:0f:60:53:
         82:96:54:40:f7:1c:51:06:a9:8a:3a:c4:d8:34:29:75:e1:b7:
         42:cb:68:66:cf:bb:57:47:95:64:79:9f:39:32:e0:02:cb:64:
         37:17:c3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----