Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/0/323830343a353733633a3a2f33322d3332203d3e20323638303533.roa
File:                     323830343a353733633a3a2f33322d3332203d3e20323638303533.roa (raw, json)
Hash identifier:          3tseaGdT6YocekPzjoTLvu1rXmpAVx3G+onCBVsnuIk=
Subject key identifier:   A6:D9:0B:22:C7:93:A3:93:B6:AC:FE:50:7E:A9:E0:5F:04:73:C1:99
Certificate issuer:       /CN=C2EC6797887AB0345009E78C7F11C9BE79E0294C
Certificate serial:       0364692BFBFA7E215A7786A0DC327D97AD6161
Authority key identifier: C2:EC:67:97:88:7A:B0:34:50:09:E7:8C:7F:11:C9:BE:79:E0:29:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2EC6797887AB0345009E78C7F11C9BE79E0294C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/0/323830343a353733633a3a2f33322d3332203d3e20323638303533.roa
Signing time:             Wed 21 Feb 2024 18:20:30 +0000
ROA not before:           Wed 21 Feb 2024 18:15:30 +0000
ROA not after:            Wed 19 Feb 2025 18:20:30 +0000
asID:                     268053
IP address blocks:        2804:573c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:64:69:2b:fb:fa:7e:21:5a:77:86:a0:dc:32:7d:97:ad:61:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2EC6797887AB0345009E78C7F11C9BE79E0294C
        Validity
            Not Before: Feb 21 18:15:30 2024 GMT
            Not After : Feb 19 18:20:30 2025 GMT
        Subject: CN=A6D90B22C793A393B6ACFE507EA9E05F0473C199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:64:3b:c6:2f:d8:f3:8e:a0:17:6b:08:7f:2b:
                    88:24:ea:cf:50:b9:a3:da:4b:bb:db:c2:08:8d:7d:
                    18:89:95:ae:00:03:8a:f1:34:1a:c4:4b:fa:00:dd:
                    3d:15:2e:81:9f:eb:3d:c4:16:1e:80:9d:80:0c:27:
                    cb:b2:0e:3a:9a:68:3a:cf:44:ba:4d:b2:3b:3a:fb:
                    b2:fa:1f:cd:a6:69:20:45:b7:62:2a:9e:8f:45:66:
                    2a:81:50:42:79:15:7a:bb:41:9a:eb:f3:b1:1a:c6:
                    2d:82:51:d9:f2:75:8a:bb:ab:79:61:cd:5c:73:6c:
                    0c:20:a4:1f:f7:e6:13:dd:96:fb:01:df:7c:28:19:
                    35:40:bf:c8:6b:95:ef:99:1c:f6:a7:48:d0:b3:ac:
                    a1:7d:4d:c0:cd:48:73:fd:56:ef:04:13:d1:32:0d:
                    84:db:00:14:b3:a4:c3:8f:b2:01:6d:12:87:ce:83:
                    33:32:bb:7b:a8:ba:6c:91:a3:58:97:e9:dc:28:72:
                    87:ec:54:96:f8:0b:ae:d2:1c:d7:6c:24:56:a6:c1:
                    6f:ee:e6:f9:21:38:7f:fb:fc:8d:8f:9d:53:ce:47:
                    fa:43:4a:c5:95:ae:4e:6a:6e:90:0a:21:9b:b5:42:
                    09:1a:b1:a4:a7:0f:4c:6d:19:25:64:33:c6:a2:7a:
                    1b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D9:0B:22:C7:93:A3:93:B6:AC:FE:50:7E:A9:E0:5F:04:73:C1:99
            X509v3 Authority Key Identifier:
                keyid:C2:EC:67:97:88:7A:B0:34:50:09:E7:8C:7F:11:C9:BE:79:E0:29:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/0/C2EC6797887AB0345009E78C7F11C9BE79E0294C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2EC6797887AB0345009E78C7F11C9BE79E0294C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/0/323830343a353733633a3a2f33322d3332203d3e20323638303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:573c::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:a9:e3:24:fb:51:16:4a:74:71:8d:0f:35:28:36:c3:75:7a:
         eb:0c:b9:5d:42:66:39:ff:12:26:3e:9a:1d:8c:35:bb:e2:ce:
         57:25:d3:79:41:62:06:f4:f5:e8:09:6c:8e:eb:40:36:44:8b:
         40:2d:d6:2f:a1:10:5b:ca:39:7c:86:62:a2:68:81:a5:ce:c7:
         40:2c:e4:aa:5b:b0:da:a9:63:6e:6a:f3:63:2b:51:f6:bd:d3:
         e7:c3:84:21:5a:26:59:02:7d:a8:11:77:ea:b2:ec:40:4b:55:
         65:5b:77:55:60:a9:1b:29:5f:73:ba:51:d7:1e:1f:ff:ac:f7:
         5a:b5:71:6d:79:8f:47:b7:65:17:ae:14:ae:14:cc:d0:99:ca:
         19:55:81:05:93:14:85:17:38:70:bc:e8:e3:4e:0f:0d:f9:92:
         c3:01:7b:8e:27:02:d0:5f:24:4f:de:ac:a2:52:12:82:6d:db:
         c3:23:33:57:29:60:1c:47:2d:19:54:e3:43:ba:31:76:ba:ea:
         b6:a9:67:a8:83:89:bf:6c:88:04:5c:07:95:b3:28:a4:83:74:
         e0:1b:04:2d:a1:a8:fd:fb:79:9c:7f:5f:50:c3:a2:8d:0a:29:
         f6:c2:0f:bc:16:6f:87:0f:03:86:e0:af:b2:89:9a:6d:d0:97:
         d4:b7:01:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----