Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/323830343a343663633a3a2f33322d3335203d3e20323637303132.roa
File:                     323830343a343663633a3a2f33322d3335203d3e20323637303132.roa (raw, json)
Hash identifier:          ig2AjbRA2JautKK7cs6gVBZO0nz110SqYLX1Cj1JV84=
Subject key identifier:   06:90:BB:1D:58:EC:19:9D:02:79:A8:26:75:0F:9E:9D:79:CD:7D:02
Certificate issuer:       /CN=FA5742E5C3B7646173204BE243809DB2D242F777
Certificate serial:       4AD4CB433FBC09EFAB480FD3616BF9009D4AA307
Authority key identifier: FA:57:42:E5:C3:B7:64:61:73:20:4B:E2:43:80:9D:B2:D2:42:F7:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA5742E5C3B7646173204BE243809DB2D242F777.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/323830343a343663633a3a2f33322d3335203d3e20323637303132.roa
Signing time:             Thu 15 Jun 2023 14:00:01 +0000
ROA not before:           Thu 15 Jun 2023 13:55:01 +0000
ROA not after:            Thu 13 Jun 2024 14:00:01 +0000
asID:                     267012
IP address blocks:        2804:46cc::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:d4:cb:43:3f:bc:09:ef:ab:48:0f:d3:61:6b:f9:00:9d:4a:a3:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA5742E5C3B7646173204BE243809DB2D242F777
        Validity
            Not Before: Jun 15 13:55:01 2023 GMT
            Not After : Jun 13 14:00:01 2024 GMT
        Subject: CN=0690BB1D58EC199D0279A826750F9E9D79CD7D02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f9:e6:d4:9b:5e:45:65:bf:ff:d8:27:05:90:
                    1c:22:7e:e6:ca:68:b8:5f:56:7f:d3:10:e3:3a:34:
                    76:c7:c6:a3:9a:41:3d:c8:fb:c2:de:14:69:cc:3e:
                    04:a7:bf:ae:ba:f0:33:a1:73:7f:a8:c5:82:6a:e6:
                    71:b3:30:58:46:fb:d9:0c:5d:c6:4f:13:0b:19:44:
                    59:c4:2c:8d:ed:b7:9d:52:dd:85:9d:af:6d:f8:2a:
                    7a:b6:e9:06:5c:07:20:65:9b:e1:33:20:7c:a5:5b:
                    c0:df:3e:34:82:5e:dd:8c:68:31:5e:0a:3c:14:71:
                    12:3a:e8:86:fc:79:b8:3a:c7:ea:f8:ef:29:a9:ad:
                    9f:09:d0:aa:6f:26:de:ad:fa:b0:d3:f0:64:a2:9c:
                    7c:08:e5:4b:b9:bd:84:dd:e2:5d:cd:fa:c9:e5:ff:
                    cc:72:67:98:3a:5f:56:88:e2:9b:b2:ff:f3:19:0d:
                    6b:71:25:c9:82:55:c1:33:25:3e:e7:57:83:1c:f0:
                    53:78:d4:81:bc:1c:60:d5:0c:cb:6b:55:db:a7:6a:
                    68:6d:39:0a:b2:73:d5:6c:7f:e2:fd:6e:af:77:3c:
                    7e:83:30:33:f4:c8:cb:0d:10:7d:38:ba:90:e8:85:
                    52:61:9c:43:14:35:c9:5c:5c:ac:ff:59:01:4e:a0:
                    b0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:90:BB:1D:58:EC:19:9D:02:79:A8:26:75:0F:9E:9D:79:CD:7D:02
            X509v3 Authority Key Identifier:
                keyid:FA:57:42:E5:C3:B7:64:61:73:20:4B:E2:43:80:9D:B2:D2:42:F7:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/FA5742E5C3B7646173204BE243809DB2D242F777.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA5742E5C3B7646173204BE243809DB2D242F777.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/323830343a343663633a3a2f33322d3335203d3e20323637303132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:46cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:47:ca:5d:bb:c3:12:08:2a:2f:78:b3:6f:e1:37:30:5e:06:
         ea:20:d0:f0:79:47:b6:62:c2:06:66:d4:e4:0a:f1:db:70:fc:
         9e:b0:6a:7c:07:f0:86:ca:65:55:71:62:06:80:2a:44:3a:79:
         e0:5b:c9:a9:60:20:a9:0e:79:7e:05:22:a0:7d:bc:e4:84:49:
         e3:91:bd:22:73:b0:0f:9c:e5:50:88:c1:3a:36:d3:2d:15:7b:
         fa:15:b9:3a:55:2b:16:6d:84:ab:a3:dc:c3:bd:58:53:65:7b:
         07:cd:eb:4d:78:a7:8e:b5:99:4a:32:d3:6e:72:e1:37:85:ce:
         8b:b9:2c:f5:d8:4e:1b:c3:f2:d0:0f:71:b8:b5:dc:56:cf:ec:
         8f:a0:8c:6c:75:0a:ec:2e:65:2b:dc:46:95:2f:12:07:51:4d:
         e1:60:8c:bd:87:c4:31:ce:02:5c:9b:e8:cd:71:24:a4:8b:c9:
         06:b0:da:f4:aa:51:a9:21:b8:a1:c2:7d:b0:a0:d7:cc:32:b7:
         40:c3:e6:b4:f9:dd:01:4d:cd:9e:91:0f:e8:3e:c5:11:d6:3f:
         58:2f:fc:53:e1:0c:57:27:23:ad:98:4f:90:3a:96:e0:9b:0d:
         3c:b4:55:46:67:67:bc:a9:be:e0:9d:33:2c:d5:6d:75:52:e5:
         d1:af:eb:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----