Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6LZNNDFjQnKqb1XsHNRKBe8EQyrik3qfo2BHiidUGpSu/0/323830343a353238343a3a2f33322d3438203d3e20323638353233.roa
File:                     323830343a353238343a3a2f33322d3438203d3e20323638353233.roa (raw, json)
Hash identifier:          P+U36CoSDK5KSoIVIPL2PrDY/wHK1iWu21MXyTdh2d8=
Subject key identifier:   6C:7F:12:04:00:59:70:95:92:EF:D7:97:8B:11:BF:8D:A2:2A:30:C6
Certificate issuer:       /CN=8EEA9DEC20AA919786E65616FB751BF513A51581
Certificate serial:       4E6B870477C02ED76AFFEFE44101696301C0C2AA
Authority key identifier: 8E:EA:9D:EC:20:AA:91:97:86:E6:56:16:FB:75:1B:F5:13:A5:15:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8EEA9DEC20AA919786E65616FB751BF513A51581.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6LZNNDFjQnKqb1XsHNRKBe8EQyrik3qfo2BHiidUGpSu/0/323830343a353238343a3a2f33322d3438203d3e20323638353233.roa
Signing time:             Thu 22 Feb 2024 16:01:19 +0000
ROA not before:           Thu 22 Feb 2024 15:56:19 +0000
ROA not after:            Thu 20 Feb 2025 16:01:19 +0000
asID:                     268523
IP address blocks:        2804:5284::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:6b:87:04:77:c0:2e:d7:6a:ff:ef:e4:41:01:69:63:01:c0:c2:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EEA9DEC20AA919786E65616FB751BF513A51581
        Validity
            Not Before: Feb 22 15:56:19 2024 GMT
            Not After : Feb 20 16:01:19 2025 GMT
        Subject: CN=6C7F12040059709592EFD7978B11BF8DA22A30C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:85:24:20:76:4f:cf:7e:d2:6d:c0:ea:f0:e0:
                    2c:eb:bf:eb:0f:0d:46:18:90:bd:47:9b:e6:44:72:
                    11:41:d8:5f:e9:90:55:08:9d:7c:34:15:4b:c7:46:
                    bb:90:64:f9:d4:b8:2f:23:de:fa:e5:e9:ae:51:e0:
                    41:47:51:e7:4c:8a:1b:b8:fe:cf:2e:33:66:84:20:
                    4d:e8:c1:58:0c:90:04:90:19:44:a0:23:1b:1c:76:
                    73:0f:7f:73:72:94:79:ce:ba:60:72:9c:1d:4a:35:
                    5c:67:ad:71:d4:86:69:20:35:ae:52:66:e4:16:46:
                    00:32:d9:d9:80:b9:30:18:00:a1:71:ac:4b:ea:41:
                    45:b0:b6:9d:38:c8:29:4d:39:3b:9b:53:17:cf:80:
                    c2:74:ec:45:54:a0:0e:bd:1a:e2:ba:1e:ae:89:e6:
                    d8:0b:2c:4e:0d:1f:c1:0f:2c:e4:23:58:f6:c5:24:
                    f5:31:6a:31:83:81:36:ee:27:c7:b1:6f:59:24:40:
                    62:6d:ca:9b:40:26:05:0f:57:65:78:fe:6d:93:f5:
                    c3:33:df:2f:1d:c6:a6:36:68:8d:ba:c4:66:be:8c:
                    ec:4f:12:b1:7d:42:20:68:17:04:21:07:30:39:92:
                    4f:4d:57:95:21:d8:3e:22:d4:20:bd:a2:5f:80:2d:
                    a0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:7F:12:04:00:59:70:95:92:EF:D7:97:8B:11:BF:8D:A2:2A:30:C6
            X509v3 Authority Key Identifier:
                keyid:8E:EA:9D:EC:20:AA:91:97:86:E6:56:16:FB:75:1B:F5:13:A5:15:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6LZNNDFjQnKqb1XsHNRKBe8EQyrik3qfo2BHiidUGpSu/0/8EEA9DEC20AA919786E65616FB751BF513A51581.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8EEA9DEC20AA919786E65616FB751BF513A51581.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6LZNNDFjQnKqb1XsHNRKBe8EQyrik3qfo2BHiidUGpSu/0/323830343a353238343a3a2f33322d3438203d3e20323638353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5284::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:82:bf:fc:ee:18:8a:e0:49:4d:60:ce:33:05:01:06:b5:23:
         f7:6e:b4:82:91:24:0c:f7:2a:30:be:37:80:f4:19:bd:4d:14:
         ed:a0:98:87:14:0a:02:d5:27:1a:de:db:17:99:d4:aa:4a:d2:
         b5:76:58:f4:0a:08:78:6a:5d:55:0c:8a:6d:f8:4b:8c:e3:b3:
         d1:7a:bc:5b:16:07:86:21:3d:ec:cc:58:78:5c:54:7b:94:4d:
         ae:ba:f5:1b:1f:18:89:e8:d6:4c:55:d3:01:88:0b:66:75:8e:
         6a:31:03:20:c4:54:c0:43:5d:3c:fd:e5:34:b3:e2:84:73:4f:
         af:f5:5e:87:dd:6d:a4:3a:26:a7:b7:c8:e5:07:dd:24:34:ac:
         7a:a1:b8:d5:48:36:3a:b9:af:d8:bf:a6:2e:4e:fc:6c:a1:cb:
         95:8b:a0:a4:98:c0:96:de:6e:24:52:b4:16:cd:a0:9f:a5:01:
         c8:a6:64:1b:7d:33:99:13:d2:bb:18:22:fd:1d:fa:37:07:a0:
         ec:f4:77:3b:92:58:05:16:12:8b:0a:ad:9d:b7:2a:b7:c9:2f:
         6d:89:54:a6:ad:c0:64:53:2f:91:a6:79:48:0a:f5:7e:48:df:
         f4:54:01:56:4b:63:e4:fc:fd:0b:8d:fd:65:19:28:c0:26:cc:
         b8:d4:ec:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----