Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/323830343a39303a3a2f33322d3430203d3e203238353830.roa
File:                     323830343a39303a3a2f33322d3430203d3e203238353830.roa (raw, json)
Hash identifier:          Gy4zme3Kbiha7Sj1I4S09fqypRzH615kRZWDLLqcKGU=
Subject key identifier:   69:F0:D0:09:6F:78:3B:08:10:3A:CA:E4:7A:21:8B:2D:14:4B:59:31
Certificate issuer:       /CN=CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D
Certificate serial:       5A3238E6C691858E41E50CA90C4611C9ABC144F6
Authority key identifier: CF:EA:D7:9E:B3:C4:E3:3F:B4:94:8A:A8:8B:F9:B3:ED:C5:51:1E:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/323830343a39303a3a2f33322d3430203d3e203238353830.roa
Signing time:             Thu 19 Oct 2023 19:15:05 +0000
ROA not before:           Thu 19 Oct 2023 19:10:05 +0000
ROA not after:            Thu 17 Oct 2024 19:15:05 +0000
asID:                     28580
IP address blocks:        2804:90::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:32:38:e6:c6:91:85:8e:41:e5:0c:a9:0c:46:11:c9:ab:c1:44:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D
        Validity
            Not Before: Oct 19 19:10:05 2023 GMT
            Not After : Oct 17 19:15:05 2024 GMT
        Subject: CN=69F0D0096F783B08103ACAE47A218B2D144B5931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:39:98:3b:90:26:fe:fa:b3:d4:8d:20:41:d9:
                    b5:39:04:ea:7e:ff:33:67:31:44:23:0a:1c:22:2a:
                    8d:52:ea:8c:c9:ce:c0:fe:d4:c7:f7:2c:83:f0:15:
                    85:ac:a6:f9:4b:89:c1:25:59:74:a7:e4:bb:98:4d:
                    3a:3a:ea:e9:54:48:96:52:c4:eb:5f:fc:d5:af:79:
                    fb:d6:78:34:be:ef:74:55:c7:91:15:6a:67:29:86:
                    a6:3d:69:32:82:6c:25:a3:5b:ca:04:19:76:3c:07:
                    ad:94:d3:55:41:eb:e7:ca:47:8a:e4:03:bf:4f:d1:
                    d6:1c:e8:70:aa:47:1b:00:d0:91:28:ea:5d:6b:66:
                    5e:4d:4a:23:33:87:77:01:2d:4a:54:7e:a5:6c:2e:
                    3f:96:9e:1a:38:c0:89:eb:ae:26:17:f5:7c:e3:a3:
                    1d:59:2e:f5:d2:c1:6a:f3:87:a1:9b:02:0d:71:75:
                    60:0f:7c:a4:5d:14:de:99:1d:13:c0:e9:c2:e6:28:
                    70:79:10:42:bf:dc:29:f1:d0:ba:ce:dd:79:bd:44:
                    c6:1e:20:c8:ab:4a:57:69:5a:db:9b:a4:89:dd:74:
                    d0:5b:22:d4:7c:d1:95:37:6b:91:79:1c:02:01:f3:
                    71:3b:69:2b:46:b1:60:52:f7:f3:18:9f:9b:81:df:
                    e3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F0:D0:09:6F:78:3B:08:10:3A:CA:E4:7A:21:8B:2D:14:4B:59:31
            X509v3 Authority Key Identifier:
                keyid:CF:EA:D7:9E:B3:C4:E3:3F:B4:94:8A:A8:8B:F9:B3:ED:C5:51:1E:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/323830343a39303a3a2f33322d3430203d3e203238353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:57:75:75:9f:34:c1:54:86:c6:5a:4d:3e:9f:d6:2c:13:c5:
         55:1e:12:a4:6d:2b:2a:ae:fd:49:f5:8f:1a:19:cc:96:eb:a3:
         a6:75:05:a6:f3:8c:93:d6:c2:9f:97:2a:c2:07:95:eb:ed:9b:
         c9:4d:6e:dc:92:0a:6c:96:5c:81:57:25:61:85:dd:86:80:17:
         a2:65:b1:7a:1d:69:e1:38:10:87:35:0e:70:30:f3:9a:de:9a:
         1e:79:ee:0a:d9:93:0d:d8:50:3f:14:f3:63:f3:86:c9:76:e7:
         6d:cc:61:b1:6f:c3:55:83:e0:a0:7b:31:81:d7:ad:e1:dd:bf:
         3b:94:84:d7:2c:4c:18:42:c0:a6:37:29:90:96:34:c0:39:d8:
         b7:3a:6f:9f:10:b5:50:5e:3c:eb:bc:d7:4a:36:a4:c3:cf:5c:
         18:dc:7a:f0:46:23:b2:8c:b5:e6:da:dd:46:19:b7:a7:91:0a:
         5e:e6:e8:89:70:3a:8a:68:79:8a:26:98:ca:51:cb:5c:78:4b:
         77:c0:11:04:dc:f4:67:04:d0:5b:6a:d1:46:fc:cb:4f:1c:a4:
         3d:e9:ce:53:f0:81:b1:e6:a2:84:bc:3a:4e:b2:92:74:9c:b9:
         5d:5c:03:74:ed:05:41:da:af:eb:de:a0:2c:7a:fa:55:e5:a8:
         e0:ac:f2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----