Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6AfQ9wrUnNxmTaqFnPFgrXNGy4dFUoDsCF1B8aGQkUrK/0/323830343a373562303a383030303a3a2f33332d3333203d3e20323731303633.roa
File:                     323830343a373562303a383030303a3a2f33332d3333203d3e20323731303633.roa (raw, json)
Hash identifier:          AGdJzgjWzzpWvyOYyPOEnpaW3WMaCwojdzfTvjGkGuI=
Subject key identifier:   09:6A:11:AA:1C:25:A3:7E:22:3F:CF:03:0A:F2:2B:41:EA:23:D9:6C
Certificate issuer:       /CN=B7308D854D4BE5121F93D850679F0E7402EB7388
Certificate serial:       3CE21F848BD4AD65946EFF89FBD474ADA1F3B536
Authority key identifier: B7:30:8D:85:4D:4B:E5:12:1F:93:D8:50:67:9F:0E:74:02:EB:73:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7308D854D4BE5121F93D850679F0E7402EB7388.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6AfQ9wrUnNxmTaqFnPFgrXNGy4dFUoDsCF1B8aGQkUrK/0/323830343a373562303a383030303a3a2f33332d3333203d3e20323731303633.roa
Signing time:             Mon 31 Jul 2023 18:31:14 +0000
ROA not before:           Mon 31 Jul 2023 18:26:14 +0000
ROA not after:            Mon 29 Jul 2024 18:31:14 +0000
asID:                     271063
IP address blocks:        2804:75b0:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:e2:1f:84:8b:d4:ad:65:94:6e:ff:89:fb:d4:74:ad:a1:f3:b5:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7308D854D4BE5121F93D850679F0E7402EB7388
        Validity
            Not Before: Jul 31 18:26:14 2023 GMT
            Not After : Jul 29 18:31:14 2024 GMT
        Subject: CN=096A11AA1C25A37E223FCF030AF22B41EA23D96C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a8:b4:22:24:e5:09:33:ee:7a:a6:fc:e7:bb:
                    fa:e4:93:47:3a:4c:45:50:f2:97:11:38:09:6f:4c:
                    04:66:5d:08:45:6d:59:00:81:45:e1:a8:5b:7e:89:
                    bd:98:33:28:d3:6b:d1:05:79:c7:a1:57:d7:72:b5:
                    91:1f:a2:ce:3f:fa:b1:e0:c6:95:e9:ad:5b:60:de:
                    39:cb:49:de:60:a7:8e:bc:10:bf:c9:64:4f:07:f1:
                    cc:a2:f9:ab:2e:12:3c:21:42:3e:3c:4a:62:35:cc:
                    27:10:46:48:be:f9:53:7a:b1:af:e5:08:bd:43:4f:
                    6a:bd:ce:f9:50:df:90:0f:e6:2a:d0:74:a8:a5:e3:
                    70:de:37:16:a2:60:1f:f4:a7:47:eb:6d:de:09:7b:
                    43:88:44:94:e5:3d:de:b7:b2:cb:b0:ea:fe:9d:9b:
                    90:57:bf:40:d5:08:b3:fc:b9:9a:c0:dd:40:54:8d:
                    30:68:e3:c5:ee:fa:c7:e0:9c:da:3b:3a:10:8e:27:
                    cb:a5:31:2d:ff:67:47:c1:91:34:06:ab:f5:b0:73:
                    e0:cb:25:d0:ab:01:42:9a:4e:0d:9f:19:9f:31:9b:
                    7b:db:c7:65:75:16:ef:30:61:23:b5:21:16:bc:51:
                    53:cd:8b:d3:04:a2:9a:c2:64:b6:9b:5d:e4:d9:e5:
                    fe:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:6A:11:AA:1C:25:A3:7E:22:3F:CF:03:0A:F2:2B:41:EA:23:D9:6C
            X509v3 Authority Key Identifier:
                keyid:B7:30:8D:85:4D:4B:E5:12:1F:93:D8:50:67:9F:0E:74:02:EB:73:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6AfQ9wrUnNxmTaqFnPFgrXNGy4dFUoDsCF1B8aGQkUrK/0/B7308D854D4BE5121F93D850679F0E7402EB7388.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7308D854D4BE5121F93D850679F0E7402EB7388.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6AfQ9wrUnNxmTaqFnPFgrXNGy4dFUoDsCF1B8aGQkUrK/0/323830343a373562303a383030303a3a2f33332d3333203d3e20323731303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:75b0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         74:e8:16:54:d7:9c:10:9f:97:9e:80:6b:01:a9:af:98:97:44:
         ae:74:65:33:1f:f5:c4:94:fe:d6:fa:a7:23:f5:3e:f3:39:44:
         14:6b:fb:fa:37:6b:5f:5c:15:a4:f6:32:3c:8b:cf:5d:16:9d:
         fe:fe:72:bc:c6:64:40:7d:94:0c:c3:97:e6:7a:02:38:0f:a6:
         e4:c3:65:c4:d8:5e:07:2e:e8:b1:bc:ce:7f:d7:d6:6a:9a:9c:
         cd:78:78:a7:3f:62:79:ec:c6:c0:f1:50:15:c7:2b:98:25:8f:
         db:56:f8:b5:7a:51:e8:3c:d0:c4:cf:8e:ea:16:ee:01:6f:df:
         59:c4:c4:bf:58:e1:1a:eb:89:f3:f0:3b:39:2d:ac:d4:2d:f2:
         e4:58:48:9a:47:42:5b:44:e5:a9:a4:3f:d1:a6:2c:51:08:92:
         1b:fc:69:c7:e2:0b:a3:49:48:94:2d:20:09:bc:80:15:99:c2:
         35:aa:01:c4:7f:5f:e4:0a:b1:04:f7:9d:15:aa:2b:fd:83:76:
         30:a7:25:33:d9:e1:5c:78:a8:38:cf:e4:ae:df:07:c5:34:ad:
         e3:28:6f:a4:7e:f6:7d:51:78:be:91:e4:42:4c:c7:9a:a1:2a:
         fc:32:87:58:2a:ae:b0:f5:7e:9a:aa:8a:04:78:fc:4a:bd:20:
         c7:ec:65:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----