Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6F39u2iPg71fKSJwDZyYXP6cC9RDPqSgsvpUn2V9CPnc/1/323830343a313631383a3a2f33322d3536203d3e20323633323637.roa
File:                     323830343a313631383a3a2f33322d3536203d3e20323633323637.roa (raw, json)
Hash identifier:          v+sqDSyAFfSZeD1dbRcAbAeR2okSWBBq4RspqRFPIes=
Subject key identifier:   C9:92:F3:0F:84:9C:12:13:5D:E2:4F:A9:9D:5E:70:E5:89:CF:52:6A
Certificate issuer:       /CN=C401CC56A53B6BE293F35CDDD46093B73990392F
Certificate serial:       0A03D284394A3B736AA8B210DF1D26DF2816D53F
Authority key identifier: C4:01:CC:56:A5:3B:6B:E2:93:F3:5C:DD:D4:60:93:B7:39:90:39:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C401CC56A53B6BE293F35CDDD46093B73990392F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6F39u2iPg71fKSJwDZyYXP6cC9RDPqSgsvpUn2V9CPnc/1/323830343a313631383a3a2f33322d3536203d3e20323633323637.roa
Signing time:             Sat 03 Jun 2023 22:51:36 +0000
ROA not before:           Sat 03 Jun 2023 22:46:36 +0000
ROA not after:            Sat 01 Jun 2024 22:51:36 +0000
asID:                     263267
IP address blocks:        2804:1618::/32 maxlen: 56

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:03:d2:84:39:4a:3b:73:6a:a8:b2:10:df:1d:26:df:28:16:d5:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C401CC56A53B6BE293F35CDDD46093B73990392F
        Validity
            Not Before: Jun  3 22:46:36 2023 GMT
            Not After : Jun  1 22:51:36 2024 GMT
        Subject: CN=C992F30F849C12135DE24FA99D5E70E589CF526A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:de:2d:2b:57:0d:b8:26:c5:0a:7d:c7:a7:3d:
                    9b:ca:0a:6c:4e:78:7c:63:28:d2:c0:ff:6d:ab:ce:
                    ef:9f:44:bb:6a:9e:9d:16:6f:e8:7e:43:ff:ad:d8:
                    36:e6:75:1c:5d:68:de:d9:a0:96:ef:75:3d:bf:d0:
                    cf:65:fc:56:bc:0a:d0:a9:f5:84:b4:41:0b:07:67:
                    2b:dd:27:a0:73:db:b2:51:94:41:fe:5b:03:b7:bd:
                    91:a6:ab:d4:9b:7a:94:06:b2:13:9f:da:51:ee:6c:
                    a7:f2:c0:f1:70:dd:4b:6c:1b:0e:c5:cb:91:34:1f:
                    25:59:6b:1b:d8:3c:c8:23:af:ff:a3:91:8a:d1:48:
                    41:35:df:e4:98:2d:d5:5a:83:dc:a9:e3:45:26:31:
                    50:80:13:1b:f2:05:6a:3f:ee:51:ea:77:04:e7:9f:
                    a7:0e:38:82:01:10:ad:c2:82:c4:61:4f:69:2d:a9:
                    97:a2:56:f8:1a:bc:90:7b:8a:bc:c1:20:80:d5:df:
                    63:61:46:a0:16:c1:7d:fd:a5:1e:93:7c:59:ac:a3:
                    3c:0e:4f:28:26:32:ea:51:78:ce:bc:da:f2:1c:c8:
                    36:04:c4:3a:a5:86:9b:89:4a:80:c9:44:7f:75:09:
                    97:d0:6b:18:5b:0a:18:17:6c:69:8e:73:78:ae:c0:
                    78:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:92:F3:0F:84:9C:12:13:5D:E2:4F:A9:9D:5E:70:E5:89:CF:52:6A
            X509v3 Authority Key Identifier:
                keyid:C4:01:CC:56:A5:3B:6B:E2:93:F3:5C:DD:D4:60:93:B7:39:90:39:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6F39u2iPg71fKSJwDZyYXP6cC9RDPqSgsvpUn2V9CPnc/1/C401CC56A53B6BE293F35CDDD46093B73990392F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C401CC56A53B6BE293F35CDDD46093B73990392F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6F39u2iPg71fKSJwDZyYXP6cC9RDPqSgsvpUn2V9CPnc/1/323830343a313631383a3a2f33322d3536203d3e20323633323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1618::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:06:fc:39:28:9c:08:b3:89:58:da:1f:5c:c9:49:6c:f8:ea:
         1d:3b:50:a9:cb:06:5b:35:10:69:28:58:f2:d3:be:d5:b2:35:
         e2:86:1b:13:18:cc:ea:bf:ab:8a:7a:c9:1f:ba:e5:d2:98:6d:
         8f:b6:8f:8f:25:de:f9:79:3b:cd:af:cd:6a:df:53:75:bb:f8:
         14:2f:7c:27:7d:18:ee:35:f1:6c:09:e0:8b:9b:54:17:99:06:
         6d:3c:94:c4:6d:db:6d:4a:65:b8:f6:7e:16:eb:dc:28:fa:5e:
         1e:a5:9c:6f:ac:58:a3:cf:c2:46:c4:0c:32:42:a1:a2:bb:0f:
         5a:e7:d9:c8:96:e5:8c:8e:58:b7:3e:40:c4:20:36:50:64:69:
         ac:5b:88:7a:a2:dd:97:15:f7:ef:28:5b:59:11:73:6a:b4:62:
         49:a3:a9:f7:c5:4f:95:f6:e7:c2:9f:21:43:e0:2b:ab:44:e8:
         90:25:a0:8f:6e:58:86:3e:ce:77:e7:6a:2e:df:42:44:7e:82:
         6d:81:51:eb:29:6c:95:22:72:ea:c6:35:ac:53:30:91:2a:ce:
         51:3c:0b:d8:3a:7b:7d:14:18:e9:4f:e7:57:72:74:1d:91:47:
         e8:f6:ab:8e:44:63:16:2b:35:a6:6d:77:a6:4c:a6:99:56:83:
         5a:ea:a2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----