Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/323830343a366330303a3a2f33322d313238203d3e20323730343339.roa
File:                     323830343a366330303a3a2f33322d313238203d3e20323730343339.roa (raw, json)
Hash identifier:          JqscGKp8gZ1SK4D4Fc9+sP+Q5saaptwvDw5NdRKBFEI=
Subject key identifier:   A6:C4:5A:DE:04:92:46:C7:4C:28:52:12:5C:7E:23:5A:A3:B7:2D:12
Certificate issuer:       /CN=C029FDEBC355A6F8F14668EE1EFBD41E3EC6F003
Certificate serial:       5261824D182A32C315C7502B68E5C013BC8FD936
Authority key identifier: C0:29:FD:EB:C3:55:A6:F8:F1:46:68:EE:1E:FB:D4:1E:3E:C6:F0:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C029FDEBC355A6F8F14668EE1EFBD41E3EC6F003.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/323830343a366330303a3a2f33322d313238203d3e20323730343339.roa
Signing time:             Tue 12 Dec 2023 15:45:03 +0000
ROA not before:           Tue 12 Dec 2023 15:40:03 +0000
ROA not after:            Tue 10 Dec 2024 15:45:03 +0000
asID:                     270439
IP address blocks:        2804:6c00::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:61:82:4d:18:2a:32:c3:15:c7:50:2b:68:e5:c0:13:bc:8f:d9:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C029FDEBC355A6F8F14668EE1EFBD41E3EC6F003
        Validity
            Not Before: Dec 12 15:40:03 2023 GMT
            Not After : Dec 10 15:45:03 2024 GMT
        Subject: CN=A6C45ADE049246C74C2852125C7E235AA3B72D12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7d:bf:cb:17:44:71:e0:a9:fc:ce:6c:08:5c:
                    12:7a:ef:a5:ae:c5:76:59:bc:32:8f:50:a6:cf:98:
                    84:4e:9c:4d:8c:9e:18:c8:6e:37:31:c0:be:1a:87:
                    c7:72:3b:37:a5:d7:75:f3:dd:b2:84:4c:13:f5:91:
                    56:80:55:b9:3b:6f:e5:88:01:4a:1d:93:92:9a:f7:
                    42:90:66:a3:ca:54:f1:76:d5:39:bf:43:ae:b3:27:
                    96:b0:bd:92:51:78:62:6d:c0:9f:19:bc:32:90:62:
                    41:39:c2:68:5c:09:22:16:21:f9:6e:22:1a:e5:52:
                    dd:19:1d:7f:e6:1f:35:c3:c8:d8:1b:01:f5:04:d3:
                    ac:6d:8d:30:dd:cd:83:9d:bd:26:5e:5b:ca:cf:dc:
                    06:0d:b3:04:9e:9a:98:bc:69:9f:8a:30:44:85:53:
                    bb:c2:11:9c:28:d2:cd:01:71:74:b7:74:87:ef:07:
                    cf:e0:87:13:72:70:1a:48:a2:d4:ea:71:37:85:60:
                    03:dd:92:cf:c1:b7:5d:da:cd:f4:df:4d:02:4b:95:
                    8e:6f:e4:49:d9:69:ad:bd:ff:74:b0:9b:45:35:c8:
                    4e:5d:f8:e7:3d:97:93:24:ed:e4:0d:83:b8:02:1a:
                    6e:d5:60:10:57:67:35:c9:e8:de:5e:29:ab:5b:05:
                    00:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C4:5A:DE:04:92:46:C7:4C:28:52:12:5C:7E:23:5A:A3:B7:2D:12
            X509v3 Authority Key Identifier:
                keyid:C0:29:FD:EB:C3:55:A6:F8:F1:46:68:EE:1E:FB:D4:1E:3E:C6:F0:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/C029FDEBC355A6F8F14668EE1EFBD41E3EC6F003.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C029FDEBC355A6F8F14668EE1EFBD41E3EC6F003.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/323830343a366330303a3a2f33322d313238203d3e20323730343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c00::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:c2:38:1e:ee:5e:2d:c3:f1:99:e9:42:ce:e2:01:5d:15:6c:
         a5:e7:1c:d9:97:84:f1:e3:47:3d:1b:b7:79:52:09:4b:99:81:
         dd:a4:46:d7:5c:3d:cb:d5:eb:22:1d:7b:98:cf:29:0c:d8:b1:
         77:fb:a6:5d:f9:22:05:53:17:40:bf:f8:40:94:08:d7:34:c6:
         41:df:be:66:9e:5e:27:5f:9f:63:f0:1d:ff:d9:10:95:84:a0:
         1b:d8:1a:c0:fd:07:2d:d8:f0:14:c2:a2:e1:ac:59:55:43:ae:
         5f:c8:e9:5c:8a:77:4b:66:95:94:f9:9c:b5:41:5d:ca:a9:47:
         c1:46:29:af:aa:4f:64:b9:82:8d:12:e0:d4:73:38:61:15:25:
         f8:aa:f1:22:47:11:fb:ff:92:ab:2b:32:46:b2:47:67:39:ba:
         da:33:de:2d:ee:e4:41:9f:ea:ee:98:63:ce:cd:06:ea:c9:cd:
         74:9d:7b:3c:b1:9f:84:6a:6a:36:fe:41:5d:91:68:3b:cf:5b:
         88:59:4d:28:60:0d:24:11:f6:60:d5:c6:06:7e:23:ce:5a:07:
         60:e3:f3:95:95:e5:57:24:cd:e2:bc:a0:a6:92:42:b9:47:5f:
         bb:f3:04:27:a9:82:8b:e6:eb:f5:48:1b:82:b3:89:71:1c:94:
         6a:83:d3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----