Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/0/323830343a326637633a3a2f33322d3332203d3e20323634383934.roa
File:                     323830343a326637633a3a2f33322d3332203d3e20323634383934.roa (raw, json)
Hash identifier:          EHo274rIKpHXeIHIn4Zq2R/vRXYxZgoXDDPe0N0VWOE=
Subject key identifier:   97:55:90:D7:9D:0D:70:65:20:DD:92:DF:69:D7:D3:1D:8E:12:FF:30
Certificate issuer:       /CN=256738B27EE60E87B5745BCBFA1CCFA02F9033B5
Certificate serial:       6EABA81327D37358CA704FC5C118253DBFB3D125
Authority key identifier: 25:67:38:B2:7E:E6:0E:87:B5:74:5B:CB:FA:1C:CF:A0:2F:90:33:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/256738B27EE60E87B5745BCBFA1CCFA02F9033B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/0/323830343a326637633a3a2f33322d3332203d3e20323634383934.roa
Signing time:             Tue 25 Jul 2023 22:21:51 +0000
ROA not before:           Tue 25 Jul 2023 22:16:51 +0000
ROA not after:            Tue 23 Jul 2024 22:21:51 +0000
asID:                     264894
IP address blocks:        2804:2f7c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ab:a8:13:27:d3:73:58:ca:70:4f:c5:c1:18:25:3d:bf:b3:d1:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=256738B27EE60E87B5745BCBFA1CCFA02F9033B5
        Validity
            Not Before: Jul 25 22:16:51 2023 GMT
            Not After : Jul 23 22:21:51 2024 GMT
        Subject: CN=975590D79D0D706520DD92DF69D7D31D8E12FF30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:16:06:d9:d7:f5:38:2e:a7:01:87:7e:7f:d4:
                    d3:0d:2a:c9:dc:1d:37:c0:4b:e9:86:65:52:ee:d7:
                    0d:73:39:78:24:2b:a5:1a:fd:b9:6d:1e:42:2a:8f:
                    e1:05:4e:a4:9f:b2:e6:9f:39:09:52:c5:15:fe:0e:
                    fc:ab:59:bd:b7:85:61:f8:d4:23:43:ae:a5:c5:03:
                    f4:78:51:f2:4c:f2:89:50:5f:b2:d5:b6:a0:1d:21:
                    ed:ae:08:d6:84:79:3c:67:4a:af:70:b0:a7:ce:1e:
                    eb:c9:3a:57:ef:ce:bb:0c:c1:3a:55:5d:99:e6:e4:
                    24:57:b4:13:cb:1b:0d:f0:5f:d3:76:f8:13:dc:81:
                    fa:9e:32:05:63:f8:68:f2:5f:71:68:dd:36:d1:a5:
                    10:a6:c5:c1:6f:e2:da:c2:24:f7:0a:50:d7:1f:1c:
                    fd:5e:6d:48:06:20:b5:f1:38:f9:3f:73:e8:f1:29:
                    fb:0d:74:5c:03:0b:cb:ce:f8:c7:09:f4:fe:55:bd:
                    e9:c1:62:45:d6:40:bf:7d:50:ad:11:30:b2:82:b4:
                    d9:8d:fb:40:55:60:ae:04:ad:d1:b3:2e:f7:35:84:
                    fc:f5:5b:4d:5f:69:9b:12:ea:2f:48:57:ee:97:9c:
                    85:d0:32:52:ba:41:75:69:51:05:4e:cb:1a:e7:c1:
                    2c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:55:90:D7:9D:0D:70:65:20:DD:92:DF:69:D7:D3:1D:8E:12:FF:30
            X509v3 Authority Key Identifier:
                keyid:25:67:38:B2:7E:E6:0E:87:B5:74:5B:CB:FA:1C:CF:A0:2F:90:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/0/256738B27EE60E87B5745BCBFA1CCFA02F9033B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/256738B27EE60E87B5745BCBFA1CCFA02F9033B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/0/323830343a326637633a3a2f33322d3332203d3e20323634383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:dd:d5:c9:10:e2:a9:24:1c:40:79:85:9c:15:0f:30:a7:ae:
         3b:36:2d:26:6b:82:88:1b:7f:8c:53:33:98:30:c8:c5:25:92:
         06:9c:40:72:c1:cb:58:6c:9d:a9:ad:b0:bf:5d:d1:d6:d4:c8:
         82:a0:b3:98:1f:a8:9a:fd:de:ff:df:18:2d:9e:80:a6:a8:01:
         18:48:3a:0d:33:94:2e:c0:35:ae:d2:18:3d:9a:87:f9:3a:ff:
         1f:b5:32:93:4d:fb:25:76:95:53:20:e8:9e:e8:68:e6:68:64:
         c8:b2:d4:d8:5b:b9:19:c6:9f:74:47:8a:5e:e4:80:9d:ba:a1:
         1f:a6:70:cc:11:37:dc:34:23:24:e6:40:33:cd:d7:f1:83:21:
         62:b9:cc:7e:53:a2:5c:6b:e5:e7:ce:0a:99:95:ae:77:c9:9c:
         b1:81:19:11:d1:98:7a:69:02:2f:42:f1:30:ee:1f:8c:fd:2a:
         46:57:e8:10:4e:a8:63:d8:8e:bc:d9:cd:4e:bc:18:60:4b:c3:
         83:33:b5:29:67:e7:f7:59:16:f6:84:cf:82:8e:0a:1b:7d:3a:
         ff:e8:01:11:2b:54:93:de:b8:a2:0e:39:ce:16:ee:2e:85:50:
         d4:7b:e0:3b:b2:6d:d9:68:74:ed:1f:7e:a3:6c:19:bf:1a:bb:
         6c:f9:81:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----