Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/0/323830343a313634633a3a2f33322d3438203d3e20323633323830.roa
File:                     323830343a313634633a3a2f33322d3438203d3e20323633323830.roa (raw, json)
Hash identifier:          qBLxy7/7fMyMKnulruWXO1KrdRuqEg82KXhaFDB1iK0=
Subject key identifier:   19:4B:5F:EA:A2:3B:75:76:21:B9:9D:47:84:B5:41:C5:B1:38:B9:C6
Certificate issuer:       /CN=712143F5591AA8BDBF21E7E0331EC7F5A5049DC6
Certificate serial:       56799BA6D3ECB43014C62206C9A30D9A1819559E
Authority key identifier: 71:21:43:F5:59:1A:A8:BD:BF:21:E7:E0:33:1E:C7:F5:A5:04:9D:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/712143F5591AA8BDBF21E7E0331EC7F5A5049DC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/0/323830343a313634633a3a2f33322d3438203d3e20323633323830.roa
Signing time:             Mon 26 Jun 2023 22:56:28 +0000
ROA not before:           Mon 26 Jun 2023 22:51:28 +0000
ROA not after:            Mon 24 Jun 2024 22:56:28 +0000
asID:                     263280
IP address blocks:        2804:164c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:79:9b:a6:d3:ec:b4:30:14:c6:22:06:c9:a3:0d:9a:18:19:55:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=712143F5591AA8BDBF21E7E0331EC7F5A5049DC6
        Validity
            Not Before: Jun 26 22:51:28 2023 GMT
            Not After : Jun 24 22:56:28 2024 GMT
        Subject: CN=194B5FEAA23B757621B99D4784B541C5B138B9C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:7a:bc:6f:88:c9:ba:91:0e:8e:cb:55:63:c5:
                    18:1f:25:67:3e:25:67:98:68:f0:7c:41:95:ee:7a:
                    1e:9e:a2:c6:11:f8:55:40:48:67:45:9f:f5:de:ad:
                    e1:7b:f0:3a:06:c1:81:02:2e:24:4e:ce:e0:3e:97:
                    a8:b6:b1:a8:b2:37:54:14:bb:ca:00:bc:a5:e8:18:
                    75:37:30:97:0d:f3:0b:c2:9c:b0:bd:5e:02:e8:2b:
                    bb:c9:ed:0f:bb:0c:98:22:b9:da:e8:9e:e0:a2:53:
                    18:66:4a:d2:09:00:c0:a3:b0:3e:0d:7b:e0:15:c5:
                    4e:1f:35:9a:6a:92:64:17:54:78:85:3a:ff:57:30:
                    17:41:75:52:54:d5:56:09:07:a6:3c:ec:4e:8d:75:
                    94:ce:b3:55:d5:05:db:81:7d:b7:38:fa:c3:16:9a:
                    24:e1:71:f9:4d:22:6c:f3:b6:cf:79:c5:77:4c:b8:
                    32:8d:1e:78:02:e5:9f:69:39:2d:93:db:f2:57:01:
                    50:a4:6d:90:e5:00:98:78:6c:61:6e:ea:37:d3:15:
                    8e:86:c0:ec:ad:d4:90:45:6c:97:f1:bd:ce:03:0c:
                    32:b5:3b:6d:18:fa:d8:0a:3e:ae:14:4b:4f:18:81:
                    4b:34:65:48:0f:b8:4e:68:ba:37:31:38:72:d1:de:
                    56:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:4B:5F:EA:A2:3B:75:76:21:B9:9D:47:84:B5:41:C5:B1:38:B9:C6
            X509v3 Authority Key Identifier:
                keyid:71:21:43:F5:59:1A:A8:BD:BF:21:E7:E0:33:1E:C7:F5:A5:04:9D:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/0/712143F5591AA8BDBF21E7E0331EC7F5A5049DC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/712143F5591AA8BDBF21E7E0331EC7F5A5049DC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/0/323830343a313634633a3a2f33322d3438203d3e20323633323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:164c::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:df:a7:75:bf:cb:b1:1a:68:e6:63:aa:2e:63:3a:4a:4a:02:
         98:d3:a5:fc:1c:ed:0c:a7:ad:1a:6e:6c:38:2d:33:39:01:0e:
         ae:2d:d2:30:8b:1b:bb:93:97:e4:85:4b:70:8a:a4:c4:a4:9f:
         8a:e0:69:6b:8e:87:a8:47:f8:0f:23:4a:fa:8f:d3:33:85:a6:
         8d:69:0f:24:e2:e1:5e:52:70:df:f6:48:88:68:ee:d1:26:fd:
         44:b1:ea:0c:e5:2c:6c:4c:90:30:26:b7:e8:c4:a8:29:40:01:
         da:c4:f0:2e:93:94:ea:2f:a5:11:91:ef:2e:2a:06:b3:cc:03:
         7d:00:27:19:41:a3:c1:61:7a:e1:2c:42:93:f0:87:9d:68:e6:
         43:cc:8d:cf:75:81:9b:41:48:cc:2f:42:51:7b:e9:14:ce:db:
         b0:7a:cf:1a:13:79:32:ac:4a:d3:25:b8:5d:54:d1:d0:4d:02:
         f3:b3:4b:3b:e5:c2:68:4c:f6:61:8a:10:63:2f:02:a2:5f:8e:
         4f:68:46:4d:9b:33:97:b1:7a:df:19:4b:b9:a2:c4:75:d9:cc:
         1b:74:97:c3:3d:21:c8:0a:7f:3d:55:b0:8a:6d:41:be:2c:90:
         9c:ce:ae:60:0e:e0:55:08:ad:85:58:3d:6d:42:1c:6e:20:53:
         e5:27:2a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----