Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a3a2f33322d3332203d3e20323632343234.roa
File:                     323830343a363136343a3a2f33322d3332203d3e20323632343234.roa (raw, json)
Hash identifier:          KSktEDb0kMsmRWm8+pIjqMcgyj3SeHSPC94shz+4iyg=
Subject key identifier:   DE:C5:15:6E:CD:00:1B:92:3F:12:43:75:C6:12:C7:8E:89:F2:78:34
Certificate issuer:       /CN=9E6E8309409AB8504281265D740C306CA05EE348
Certificate serial:       7C90C14A8D756EFEE6F7E4802FFDAE6845ED21C1
Authority key identifier: 9E:6E:83:09:40:9A:B8:50:42:81:26:5D:74:0C:30:6C:A0:5E:E3:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9E6E8309409AB8504281265D740C306CA05EE348.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a3a2f33322d3332203d3e20323632343234.roa
Signing time:             Fri 03 Mar 2023 12:24:10 +0000
ROA not before:           Fri 03 Mar 2023 12:19:10 +0000
ROA not after:            Fri 01 Mar 2024 12:24:10 +0000
asID:                     262424
IP address blocks:        2804:6164::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:90:c1:4a:8d:75:6e:fe:e6:f7:e4:80:2f:fd:ae:68:45:ed:21:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E6E8309409AB8504281265D740C306CA05EE348
        Validity
            Not Before: Mar  3 12:19:10 2023 GMT
            Not After : Mar  1 12:24:10 2024 GMT
        Subject: CN=DEC5156ECD001B923F124375C612C78E89F27834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:71:13:1e:3a:6d:b2:19:64:21:2c:6f:04:42:
                    0a:c4:41:52:59:27:a6:55:ea:1a:22:e9:6b:9a:4e:
                    49:49:dc:27:c3:ef:1c:57:70:cf:b7:79:9f:41:53:
                    ea:7b:b3:20:78:df:9d:83:df:e0:28:f6:f5:e1:3b:
                    20:ed:81:f4:f0:57:09:d1:33:e4:09:3c:1d:cf:33:
                    08:8a:4d:d8:37:68:0e:56:26:b9:11:08:51:62:f8:
                    86:5f:7e:05:40:58:70:da:92:b1:84:04:7a:f9:ba:
                    be:7e:69:aa:fe:fc:33:d9:e5:70:5f:87:4a:79:0a:
                    d9:8b:40:9e:7c:b6:4d:5b:db:82:a9:f6:9b:6b:c5:
                    9e:42:dd:c9:e1:c8:43:01:44:08:fc:41:44:d2:1e:
                    69:a4:a4:ef:27:49:70:b5:52:fc:1d:5c:e9:ae:7e:
                    2b:72:33:21:ad:ee:71:41:cd:e6:54:35:2c:4c:c9:
                    e8:4b:2e:a3:9d:58:94:83:09:59:61:bd:e6:ff:3c:
                    9b:54:cc:6d:8d:4b:e2:53:49:82:01:8e:5c:34:51:
                    33:40:aa:f1:bc:4c:af:63:28:72:4d:c8:50:d2:2c:
                    3b:83:4e:45:a8:77:3c:65:91:6d:dc:9e:4b:bc:f7:
                    9c:0a:56:a9:aa:35:a2:19:c0:0c:ee:e7:2e:8d:4c:
                    c6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C5:15:6E:CD:00:1B:92:3F:12:43:75:C6:12:C7:8E:89:F2:78:34
            X509v3 Authority Key Identifier:
                keyid:9E:6E:83:09:40:9A:B8:50:42:81:26:5D:74:0C:30:6C:A0:5E:E3:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/9E6E8309409AB8504281265D740C306CA05EE348.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9E6E8309409AB8504281265D740C306CA05EE348.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a3a2f33322d3332203d3e20323632343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6164::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:f6:ab:fd:ac:de:cc:b5:c0:25:2f:58:49:13:19:52:b4:df:
         d5:f2:89:5d:a5:cf:9e:66:51:50:14:18:44:5e:d3:a2:f7:9e:
         bc:0f:a7:49:b7:f5:63:81:96:d4:e5:c0:a6:57:35:67:c7:a9:
         91:fc:0d:79:6e:54:00:ad:b2:72:ff:4f:0b:25:b8:cf:22:3b:
         9b:1a:33:ce:e7:08:5f:fd:4d:bb:f8:5d:14:84:40:d3:9b:b8:
         ff:05:af:9c:16:90:12:72:cb:22:0e:81:ef:5f:7a:84:e1:e1:
         72:13:bf:d5:3e:44:6a:60:d7:69:d3:33:4c:30:dd:e6:5d:80:
         4d:eb:d2:cb:78:46:b0:f5:ca:1a:5e:7e:5a:ee:43:3d:3b:48:
         69:a8:3b:9b:4b:4c:f2:57:59:8e:3a:eb:41:e3:6b:1f:b3:62:
         9f:22:2f:8c:18:17:b3:eb:8a:5d:86:d3:ca:56:44:18:5d:51:
         f2:15:ea:41:76:07:7c:39:26:bb:5d:8e:ce:ce:e3:7a:1b:29:
         e1:0c:e2:bb:73:21:91:6e:33:5a:99:9e:e0:98:5a:a9:a2:53:
         76:13:4b:9e:67:03:a9:2d:51:3b:1d:d8:46:c3:31:62:1a:e7:
         0d:b5:49:24:4c:6a:54:7d:c9:15:f6:1f:9b:ea:c0:de:e9:cd:
         7a:77:71:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----