Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/323830343a3666303a666630303a3a2f34382d3438203d3e203533303437.roa
File:                     323830343a3666303a666630303a3a2f34382d3438203d3e203533303437.roa (raw, json)
Hash identifier:          8PaWw4K6QJlNAWbPVOjxRDOHpytexm14e9ZNnYVyq2o=
Subject key identifier:   EE:DA:1D:41:ED:33:97:B6:D2:C1:4C:69:30:BF:C8:83:1F:A0:1C:F2
Certificate issuer:       /CN=FA5742E5C3B7646173204BE243809DB2D242F777
Certificate serial:       1095A4893AE8A5A13BFB284E69866731886F2631
Authority key identifier: FA:57:42:E5:C3:B7:64:61:73:20:4B:E2:43:80:9D:B2:D2:42:F7:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA5742E5C3B7646173204BE243809DB2D242F777.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/323830343a3666303a666630303a3a2f34382d3438203d3e203533303437.roa
Signing time:             Mon 27 Nov 2023 16:08:50 +0000
ROA not before:           Mon 27 Nov 2023 16:03:50 +0000
ROA not after:            Mon 25 Nov 2024 16:08:50 +0000
asID:                     53047
IP address blocks:        2804:6f0:ff00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:95:a4:89:3a:e8:a5:a1:3b:fb:28:4e:69:86:67:31:88:6f:26:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA5742E5C3B7646173204BE243809DB2D242F777
        Validity
            Not Before: Nov 27 16:03:50 2023 GMT
            Not After : Nov 25 16:08:50 2024 GMT
        Subject: CN=EEDA1D41ED3397B6D2C14C6930BFC8831FA01CF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:db:12:98:c6:53:f1:a8:00:09:88:93:1b:fb:
                    93:5a:43:35:40:aa:90:12:9e:3b:5e:df:a3:63:31:
                    f5:69:1b:20:6c:69:3c:a2:54:30:71:fd:94:bc:6f:
                    a4:32:28:4b:21:0a:e3:7b:bc:98:33:60:bb:93:99:
                    bd:c6:fd:55:8a:e5:5f:b8:fb:eb:7f:b2:1d:b0:11:
                    ed:79:94:3d:de:26:b4:ef:6e:c1:e1:40:02:83:69:
                    8f:8a:f5:d3:d6:57:37:ea:8e:ea:83:0f:f9:1b:ce:
                    ea:97:93:a0:c4:30:1e:9a:67:2b:63:85:ea:8b:b9:
                    5d:3d:42:25:62:5a:c5:24:1d:3d:64:51:6b:d6:7e:
                    1b:88:44:da:bd:9a:17:a4:65:fb:b5:f6:fd:f7:c0:
                    b3:21:f4:85:15:a6:e3:56:bc:2e:84:60:66:e5:8c:
                    c9:6e:65:ce:79:62:af:02:4d:ff:b9:3e:a7:32:3e:
                    01:be:91:7b:41:02:04:b2:01:82:ed:e2:2c:6e:00:
                    c7:ef:e4:72:76:66:06:7f:ed:38:ca:32:45:d1:5a:
                    fa:6b:31:3b:d4:f4:70:7f:fe:7b:a6:63:25:88:de:
                    3b:96:51:6f:8e:a9:3b:59:81:6d:c7:08:56:39:6d:
                    3b:a4:1c:5e:7c:da:7f:79:a6:6c:58:2a:ea:5b:0f:
                    a4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:DA:1D:41:ED:33:97:B6:D2:C1:4C:69:30:BF:C8:83:1F:A0:1C:F2
            X509v3 Authority Key Identifier:
                keyid:FA:57:42:E5:C3:B7:64:61:73:20:4B:E2:43:80:9D:B2:D2:42:F7:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/FA5742E5C3B7646173204BE243809DB2D242F777.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA5742E5C3B7646173204BE243809DB2D242F777.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/323830343a3666303a666630303a3a2f34382d3438203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f0:ff00::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:cd:42:b7:bb:fc:f2:6d:ec:90:14:cb:48:bc:0a:20:e8:6a:
         46:64:48:46:0c:ee:f9:d7:b4:7b:bc:4c:a5:d5:db:86:b1:82:
         e9:84:51:9d:18:f4:0d:f7:78:fd:fd:4d:18:b0:02:0e:5c:17:
         66:21:a5:a5:33:6e:a9:82:07:76:25:6b:e6:5c:16:fe:e7:bb:
         f3:c7:10:2e:1d:4e:be:98:d1:99:4f:42:07:43:79:28:71:75:
         8e:80:18:a9:18:35:4e:ae:bc:5c:36:f4:cb:82:3b:bb:a9:4e:
         0a:f5:44:ad:d4:d6:4e:ff:7b:89:5e:43:b1:b8:74:7c:d0:33:
         7b:86:a5:f6:27:ee:99:49:7c:39:d3:ec:8d:eb:13:42:c8:79:
         26:90:e0:4b:2d:ea:8d:df:1a:7b:76:e0:ab:4c:89:bf:92:5c:
         27:b7:7d:e0:e3:fa:36:96:14:1a:ee:e4:4a:b8:e9:46:eb:a9:
         2a:50:3e:c7:26:51:ad:e1:72:c8:45:57:41:1c:22:a2:d6:be:
         60:07:f9:8a:b5:fe:8d:54:95:14:21:2b:51:33:11:9b:56:4b:
         c7:cf:fc:ae:b4:b8:b4:6e:79:42:45:0e:46:cf:de:e2:94:be:
         20:88:ad:f0:c0:9c:6b:c4:de:f9:be:8c:38:99:45:52:04:c9:
         2e:db:3e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----