Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/0/323830343a366266383a3a2f33322d3332203d3e20323730343337.roa
File:                     323830343a366266383a3a2f33322d3332203d3e20323730343337.roa (raw, json)
Hash identifier:          jfLnf8PhODsAY5QS5szexXBXZRRoJUpJduz+rrdHEEo=
Subject key identifier:   F7:78:7F:63:C4:8B:A2:6C:37:02:6C:75:FD:7B:66:DE:EE:52:E0:16
Certificate issuer:       /CN=9153E8AC57500B9F6FAD7507DD47F690C821A068
Certificate serial:       4E2DA7055DB99562E064578974952BB7D389A8A2
Authority key identifier: 91:53:E8:AC:57:50:0B:9F:6F:AD:75:07:DD:47:F6:90:C8:21:A0:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9153E8AC57500B9F6FAD7507DD47F690C821A068.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/0/323830343a366266383a3a2f33322d3332203d3e20323730343337.roa
Signing time:             Thu 07 Mar 2024 18:15:00 +0000
ROA not before:           Thu 07 Mar 2024 18:10:00 +0000
ROA not after:            Thu 06 Mar 2025 18:15:00 +0000
asID:                     270437
IP address blocks:        2804:6bf8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:2d:a7:05:5d:b9:95:62:e0:64:57:89:74:95:2b:b7:d3:89:a8:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9153E8AC57500B9F6FAD7507DD47F690C821A068
        Validity
            Not Before: Mar  7 18:10:00 2024 GMT
            Not After : Mar  6 18:15:00 2025 GMT
        Subject: CN=F7787F63C48BA26C37026C75FD7B66DEEE52E016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b4:54:a0:a9:9e:19:a7:b4:07:83:6c:b5:9d:
                    0b:c2:df:9b:89:5e:80:31:40:48:c1:7c:63:80:d5:
                    ed:18:77:f9:05:ad:fe:9c:d5:fc:72:4f:70:c1:7c:
                    c5:9f:07:42:db:9b:53:67:76:16:0e:5d:4c:2b:89:
                    aa:cd:74:44:9d:2b:e7:5f:07:28:9c:86:43:0e:68:
                    78:62:4e:ea:07:02:73:77:de:f4:55:a3:60:ae:6b:
                    35:7a:15:8e:9a:a4:82:80:b2:ff:8d:43:41:73:52:
                    2a:55:33:c0:ca:d9:3a:42:e6:72:f2:ca:7b:4c:8f:
                    0c:04:23:56:16:5b:76:14:1c:b1:bd:87:8d:6c:9c:
                    89:68:90:2d:6c:40:95:a5:0b:3c:9e:25:d0:c8:5b:
                    0e:43:90:bf:cf:cc:fa:9e:08:17:84:6b:63:49:64:
                    51:32:a4:fd:92:9f:b5:72:68:39:d5:20:83:89:63:
                    93:0b:d2:bf:3f:e6:a8:c1:82:17:c5:eb:7b:56:1f:
                    ff:a8:62:9a:43:66:b2:5d:ef:e1:14:f7:e3:f4:91:
                    b1:c4:1d:7e:ef:25:50:fd:ea:5e:23:17:e1:37:b4:
                    db:48:b7:fb:cb:91:04:a0:b8:23:93:09:b5:f1:1c:
                    4a:4e:9b:29:d0:c0:cd:ab:b3:54:62:55:f9:e9:18:
                    a4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:78:7F:63:C4:8B:A2:6C:37:02:6C:75:FD:7B:66:DE:EE:52:E0:16
            X509v3 Authority Key Identifier:
                keyid:91:53:E8:AC:57:50:0B:9F:6F:AD:75:07:DD:47:F6:90:C8:21:A0:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/0/9153E8AC57500B9F6FAD7507DD47F690C821A068.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9153E8AC57500B9F6FAD7507DD47F690C821A068.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/0/323830343a366266383a3a2f33322d3332203d3e20323730343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6bf8::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:34:89:b8:b9:2e:30:5b:2c:2a:29:29:8b:66:3d:6c:dc:28:
         6d:14:b1:4f:c8:f1:3e:6b:29:a1:58:13:55:9e:b9:43:0c:dd:
         33:4f:c1:8f:dd:82:85:0d:47:8e:5f:af:62:c4:28:45:2f:9f:
         4e:32:43:08:89:22:60:44:7f:82:ea:79:b8:e7:68:15:ce:55:
         d0:f3:6c:1f:f2:33:ae:c1:78:2d:be:a9:e1:9b:20:2d:c5:98:
         f9:2a:2a:ee:2b:0c:87:75:27:09:76:1d:23:58:ff:de:c4:33:
         0b:f7:f2:2a:ea:df:a7:24:c1:db:5f:8a:63:ad:3b:66:82:f8:
         77:f8:47:8a:b6:d5:f3:85:5c:c7:c4:6e:c6:b4:02:a5:35:5e:
         86:f7:b3:91:20:dd:ff:01:a7:ba:ce:89:4a:bc:99:c9:11:fb:
         ad:12:34:5f:a8:2e:e7:bf:24:af:00:51:e2:73:bd:2f:df:79:
         1e:b2:d1:88:35:35:40:ca:c1:68:73:60:27:b0:61:64:b8:38:
         8b:ae:da:20:81:04:cc:5b:35:36:e5:a8:d5:37:1f:a4:e5:58:
         ef:16:f8:c2:94:31:8f:2a:2d:af:20:02:e9:1c:cf:3b:55:ee:
         c6:6b:8e:13:60:8f:ce:22:29:4c:70:94:15:88:52:e6:09:28:
         76:80:2f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----