Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6E9EddmdqcWcGuEiL7vwDQBmZDDe32MvD9d1Pe9NoeTC/0/323830343a353537633a3a2f33322d3332203d3e20323637393337.roa
File:                     323830343a353537633a3a2f33322d3332203d3e20323637393337.roa (raw, json)
Hash identifier:          EQhc1yRu8tiJXhR+cFUw0QNkXnKLHPQdhpm3EpP3y04=
Subject key identifier:   AF:40:25:3C:15:43:6D:9B:90:73:FA:30:16:0C:21:D0:65:35:77:62
Certificate issuer:       /CN=BB2CE81BD94CBC4475D2009984709FB0A6702A8E
Certificate serial:       046913CA9296425C46095290F29CE5A7543C13E4
Authority key identifier: BB:2C:E8:1B:D9:4C:BC:44:75:D2:00:99:84:70:9F:B0:A6:70:2A:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB2CE81BD94CBC4475D2009984709FB0A6702A8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6E9EddmdqcWcGuEiL7vwDQBmZDDe32MvD9d1Pe9NoeTC/0/323830343a353537633a3a2f33322d3332203d3e20323637393337.roa
Signing time:             Sun 25 Jun 2023 12:14:50 +0000
ROA not before:           Sun 25 Jun 2023 12:09:50 +0000
ROA not after:            Sun 23 Jun 2024 12:14:50 +0000
asID:                     267937
IP address blocks:        2804:557c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:69:13:ca:92:96:42:5c:46:09:52:90:f2:9c:e5:a7:54:3c:13:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB2CE81BD94CBC4475D2009984709FB0A6702A8E
        Validity
            Not Before: Jun 25 12:09:50 2023 GMT
            Not After : Jun 23 12:14:50 2024 GMT
        Subject: CN=AF40253C15436D9B9073FA30160C21D065357762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:68:bb:8f:4b:7d:5f:e0:55:c3:88:4f:20:10:
                    f0:d2:13:7c:74:24:e7:a7:e4:89:3d:92:65:d7:98:
                    d6:11:ec:42:65:04:fb:f7:99:3b:0a:24:5e:33:11:
                    bc:e5:8f:72:b9:2e:72:39:6a:68:49:f8:80:91:51:
                    ba:03:fd:bd:83:06:87:c7:ad:54:16:17:5e:7c:f2:
                    ad:b1:6d:a9:c2:1f:cf:e1:b9:ff:90:bf:08:27:fe:
                    0f:a8:c2:5a:01:99:d8:3d:c8:92:6f:eb:cb:e1:72:
                    ad:f9:4e:68:2a:29:4c:61:87:81:0c:6e:37:1c:62:
                    d4:ec:46:12:05:64:d9:df:02:89:8e:6d:f9:cf:20:
                    f3:ba:c3:97:47:56:69:e4:6c:0f:6d:72:de:31:9b:
                    07:41:36:59:eb:3c:24:15:23:08:d6:d6:be:8b:b9:
                    a9:3d:c6:5c:42:c5:e1:44:14:89:71:53:d0:9f:cd:
                    1b:06:bc:f4:bd:d0:27:2f:44:41:ec:44:f4:51:ee:
                    c4:bd:ce:82:12:cc:d6:7e:8c:62:9f:2e:68:2a:ba:
                    ae:70:04:4c:a7:ee:0e:fb:1d:d1:9e:11:5e:b7:fe:
                    ca:c3:aa:d9:c2:c6:29:cb:63:52:19:b6:fb:da:96:
                    bc:55:22:52:21:f8:07:a9:21:1f:02:c5:a2:26:b4:
                    ac:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:40:25:3C:15:43:6D:9B:90:73:FA:30:16:0C:21:D0:65:35:77:62
            X509v3 Authority Key Identifier:
                keyid:BB:2C:E8:1B:D9:4C:BC:44:75:D2:00:99:84:70:9F:B0:A6:70:2A:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6E9EddmdqcWcGuEiL7vwDQBmZDDe32MvD9d1Pe9NoeTC/0/BB2CE81BD94CBC4475D2009984709FB0A6702A8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB2CE81BD94CBC4475D2009984709FB0A6702A8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6E9EddmdqcWcGuEiL7vwDQBmZDDe32MvD9d1Pe9NoeTC/0/323830343a353537633a3a2f33322d3332203d3e20323637393337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:557c::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:a8:ba:2a:60:fb:0b:b2:9d:21:89:73:f8:a4:59:cf:96:69:
         74:5b:00:45:f5:82:7c:86:b1:f0:92:a8:45:a3:bf:5c:98:33:
         43:8d:aa:a2:cd:c1:7d:87:fa:93:d6:d3:d5:8c:3e:ff:30:4d:
         14:1c:a5:72:fa:ea:8b:8f:f8:16:a7:73:1c:da:ff:c8:0b:c1:
         e4:6e:d5:8f:74:ea:92:d4:8d:ea:91:d8:16:1f:f4:b9:ce:1d:
         0d:ec:ba:c4:ff:ea:0b:8a:f3:eb:40:36:5e:5e:e4:5c:3f:9a:
         df:f6:23:14:34:c5:aa:c2:8c:45:fa:ef:51:a8:ce:42:6e:80:
         d4:d5:97:bc:15:19:0e:72:69:a1:0c:ee:f9:69:0f:de:88:04:
         43:ef:64:96:a9:49:8a:7d:4b:e3:02:8f:a4:c4:10:21:1a:2a:
         b3:98:79:8a:95:b8:91:22:f3:4d:86:d7:ac:7f:21:d4:74:63:
         e2:8a:1c:8d:df:d7:ee:63:31:bf:4c:09:de:89:95:2e:52:1f:
         e2:4f:ad:2c:09:5e:04:1a:18:6e:7c:7b:9a:5a:20:3f:91:f6:
         b7:fb:8b:a2:0f:6b:5a:ab:4c:f4:bc:a3:f9:93:64:01:57:5c:
         ac:d5:f9:ab:4c:10:7c:ff:f5:17:2b:36:6c:59:e6:fc:79:0b:
         76:7e:33:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----