Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/323830343a386533633a3a2f33322d3332203d3e20323733343132.roa
File:                     323830343a386533633a3a2f33322d3332203d3e20323733343132.roa (raw, json)
Hash identifier:          Smcx6AO0sv6z8pqDJRjqnRe6OUr1iDFUrf5CbH91yac=
Subject key identifier:   36:5F:A2:61:F3:8C:CB:48:49:6D:DB:A9:81:03:BB:1B:0A:82:52:9C
Certificate issuer:       /CN=CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E
Certificate serial:       56B0D20FD3B14F37D0BB49FBD56C55B235AE01F8
Authority key identifier: CE:F7:84:55:DE:B7:C5:CB:67:AC:1A:1A:4F:3E:5E:FD:D7:60:9A:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/323830343a386533633a3a2f33322d3332203d3e20323733343132.roa
Signing time:             Sat 30 Dec 2023 14:38:20 +0000
ROA not before:           Sat 30 Dec 2023 14:33:20 +0000
ROA not after:            Sat 28 Dec 2024 14:38:20 +0000
asID:                     273412
IP address blocks:        2804:8e3c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:b0:d2:0f:d3:b1:4f:37:d0:bb:49:fb:d5:6c:55:b2:35:ae:01:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E
        Validity
            Not Before: Dec 30 14:33:20 2023 GMT
            Not After : Dec 28 14:38:20 2024 GMT
        Subject: CN=365FA261F38CCB48496DDBA98103BB1B0A82529C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:93:b7:f8:a5:1f:d1:1d:35:05:46:0b:97:c0:
                    db:98:7b:db:50:f5:02:14:2a:66:e0:f3:d0:11:5b:
                    7e:44:47:38:e5:e1:c6:45:fe:73:ff:e4:28:67:0c:
                    9f:99:5f:16:50:c0:e6:ed:30:f5:8e:55:82:0b:7c:
                    aa:71:17:e7:f3:98:2b:80:ae:c4:04:dc:6f:2c:3f:
                    68:0a:e1:aa:5e:ee:19:be:c9:df:54:30:a4:46:1e:
                    da:00:bd:a7:e6:f4:05:be:1d:55:31:fd:bb:b6:5c:
                    f7:88:40:4f:bb:d5:90:58:45:b6:56:ee:e0:e8:cb:
                    cf:8c:4c:a4:6d:70:b2:3f:d5:ab:41:65:c5:ff:4d:
                    1b:b9:7f:80:8e:38:89:5a:4b:90:7a:ce:68:90:f2:
                    80:7a:46:10:42:2a:75:0c:2b:d8:e0:52:b7:5d:78:
                    8e:bb:0b:01:ce:ca:31:c2:79:2b:fc:0c:1a:9d:bc:
                    80:6c:89:fd:96:84:0e:f0:db:7d:30:84:06:bd:bb:
                    5a:1b:c9:72:1d:79:29:ed:2a:83:f0:63:bf:0e:bb:
                    ca:08:32:6b:ce:1a:81:c0:fb:3a:d6:e5:f9:1c:70:
                    06:0c:1e:e8:01:e1:69:cf:c5:dc:8c:41:1a:57:f3:
                    2d:d0:29:ce:2f:53:3b:8f:9b:5c:f5:ff:74:1d:80:
                    69:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:5F:A2:61:F3:8C:CB:48:49:6D:DB:A9:81:03:BB:1B:0A:82:52:9C
            X509v3 Authority Key Identifier:
                keyid:CE:F7:84:55:DE:B7:C5:CB:67:AC:1A:1A:4F:3E:5E:FD:D7:60:9A:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/323830343a386533633a3a2f33322d3332203d3e20323733343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e3c::/32

    Signature Algorithm: sha256WithRSAEncryption
         de:90:87:3d:ad:e9:8f:59:8f:f7:60:77:38:51:d7:56:f6:09:
         29:f2:c9:36:e8:ba:a1:c5:3b:02:51:0b:47:fb:87:39:1a:ba:
         f1:20:15:56:55:d9:fb:91:a6:9c:b8:48:81:68:f0:70:19:bf:
         7d:60:9d:89:35:cb:f6:a7:1f:5e:28:6c:cd:ca:a8:76:85:79:
         2e:8b:14:54:06:49:f2:9e:ef:9c:e0:89:b8:58:14:dc:55:db:
         47:9b:08:9b:ba:90:7d:47:3d:4e:d4:68:eb:da:bd:f9:65:da:
         aa:8b:f6:75:cc:21:b4:10:4c:6a:15:12:cd:a3:29:56:5b:71:
         22:c2:9f:4c:08:26:52:1e:a2:6d:a1:b6:9f:94:19:f4:79:81:
         55:b8:e3:97:c1:c9:8f:b0:7f:d4:1d:fe:6c:40:f2:34:4f:e8:
         93:92:a9:ff:3b:78:ae:d8:f9:54:d1:fd:bb:08:0a:3f:98:d8:
         6f:d7:b9:86:85:71:08:33:1c:33:15:ef:4c:b3:1b:1e:8e:0a:
         55:5b:4f:da:0a:db:6d:ed:62:86:ca:1e:ff:03:c0:93:2d:59:
         c8:e8:8b:93:d1:24:b4:9b:8d:9f:2f:a1:b4:ea:dc:54:f8:1e:
         7e:ca:ba:44:0b:4c:6b:48:8c:a0:ab:b7:93:1f:fc:37:d6:76:
         ea:28:ee:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----