Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/0/323830343a336462303a3a2f33322d3332203d3e20323636353437.roa
File:                     323830343a336462303a3a2f33322d3332203d3e20323636353437.roa (raw, json)
Hash identifier:          bePWeoU0CBse7veTHwVqDkv/j1cL7yYQ+PN0VWGWv0c=
Subject key identifier:   74:1E:69:9A:CC:FB:E9:84:01:68:31:DD:EA:A5:8E:3F:EB:05:34:18
Certificate issuer:       /CN=24458C13F40474E3749CBA0A49F59B362B4D3E0B
Certificate serial:       2B1999F26141F3E77CF8999DEBB0474C0B0E669B
Authority key identifier: 24:45:8C:13:F4:04:74:E3:74:9C:BA:0A:49:F5:9B:36:2B:4D:3E:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24458C13F40474E3749CBA0A49F59B362B4D3E0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/0/323830343a336462303a3a2f33322d3332203d3e20323636353437.roa
Signing time:             Tue 14 Nov 2023 04:27:59 +0000
ROA not before:           Tue 14 Nov 2023 04:22:59 +0000
ROA not after:            Tue 12 Nov 2024 04:27:59 +0000
asID:                     266547
IP address blocks:        2804:3db0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:19:99:f2:61:41:f3:e7:7c:f8:99:9d:eb:b0:47:4c:0b:0e:66:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24458C13F40474E3749CBA0A49F59B362B4D3E0B
        Validity
            Not Before: Nov 14 04:22:59 2023 GMT
            Not After : Nov 12 04:27:59 2024 GMT
        Subject: CN=741E699ACCFBE984016831DDEAA58E3FEB053418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:12:92:d9:0a:07:ce:a7:5e:73:92:4d:05:09:
                    d9:77:46:94:d8:f4:16:27:1b:f5:80:33:a6:6a:4b:
                    5c:1d:6b:7c:1d:12:31:05:97:79:1f:91:cb:ac:86:
                    3f:a9:5f:ca:71:df:18:fc:9c:f2:a0:6d:8c:8e:10:
                    fd:c3:98:9b:85:36:e5:60:66:77:d8:4d:9a:62:c5:
                    aa:b5:97:1c:f5:ed:7b:95:16:8b:41:07:e2:28:f8:
                    0f:0d:fa:08:b7:7b:14:5c:10:aa:b0:b8:13:f7:74:
                    ab:cf:dc:8b:c5:a9:d3:f5:ed:8c:f7:d2:a5:3f:c7:
                    34:b7:6a:48:72:12:65:a5:3e:08:e3:aa:0c:ae:4f:
                    c9:b0:d5:e6:c7:26:f6:b6:4e:f1:95:89:a5:a3:b7:
                    d0:04:f9:41:2f:14:3e:0b:c4:01:52:7c:07:f5:41:
                    ec:e1:16:e2:a3:df:24:ea:0e:bc:bc:64:27:ba:c7:
                    0e:d1:05:55:8d:a7:e3:9b:76:11:24:5c:71:8d:8c:
                    1f:16:57:c8:84:6f:3d:90:fa:b5:5c:5e:15:7c:a0:
                    77:cd:71:ed:4f:aa:4d:38:e8:01:13:e6:94:53:ab:
                    c5:8e:43:1c:35:c4:fb:ba:2e:62:af:eb:74:2e:35:
                    78:71:7b:07:b5:13:d1:84:38:21:5b:c3:eb:a8:54:
                    f9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:1E:69:9A:CC:FB:E9:84:01:68:31:DD:EA:A5:8E:3F:EB:05:34:18
            X509v3 Authority Key Identifier:
                keyid:24:45:8C:13:F4:04:74:E3:74:9C:BA:0A:49:F5:9B:36:2B:4D:3E:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/0/24458C13F40474E3749CBA0A49F59B362B4D3E0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24458C13F40474E3749CBA0A49F59B362B4D3E0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/0/323830343a336462303a3a2f33322d3332203d3e20323636353437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3db0::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:f4:85:db:ad:b3:9b:97:bc:28:f1:d3:7f:11:01:b0:ed:e3:
         01:92:63:c8:0b:ef:b7:71:c5:8d:79:95:48:cb:09:29:58:46:
         93:d0:df:1a:d2:fc:31:41:de:5a:f8:24:7d:d6:29:b6:98:76:
         c2:c2:b6:43:de:ff:42:ba:5d:8d:76:93:20:3e:49:56:b9:42:
         35:35:7d:49:47:3c:a7:96:57:8c:0c:e3:f8:4a:e5:33:b8:78:
         18:b7:fc:07:1f:a4:44:91:8b:78:21:2c:7d:e7:94:09:5d:34:
         71:5f:13:a6:6a:f2:12:36:fd:56:96:df:2c:38:b9:1a:87:1f:
         aa:3a:f0:c7:9a:08:15:d6:b8:fd:00:98:3b:52:24:2c:7a:b2:
         73:2a:ac:aa:1c:54:5a:06:90:ea:16:dd:35:0c:d0:19:ad:df:
         a2:3e:d5:84:de:0a:5f:02:28:ea:91:d0:4d:21:8e:76:ac:a9:
         1f:99:68:17:f6:63:83:0f:f9:d9:1b:50:72:1e:94:6d:de:b2:
         63:bb:36:ad:bb:9a:2a:9c:ce:1e:11:ac:c0:3d:02:ef:55:67:
         f2:37:6d:94:c4:da:e6:50:91:ec:87:a5:5c:d7:db:93:06:bb:
         48:0c:93:c8:35:43:3a:ed:60:51:4f:52:e9:68:07:b0:3b:04:
         e1:4e:ee:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----