Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ch5TFR1rbJt9foAceedA9e2DuM4dgBCrb7bMtBtcSds/0/323830343a363733343a3a2f33322d313238203d3e20323639363132.roa
File:                     323830343a363733343a3a2f33322d313238203d3e20323639363132.roa (raw, json)
Hash identifier:          hGxNMtD2CjAT80McYg2LX5UkvZhnPuXSYQSlDngQwoo=
Subject key identifier:   3A:E4:18:CF:F0:1F:1D:73:F9:1B:5D:7D:F9:59:41:B9:5D:7B:08:BD
Certificate issuer:       /CN=89C326AE20D479ABE2624255309D2F687FA31537
Certificate serial:       74BB7D9EA708DEDBC7899622986DC66528E6543F
Authority key identifier: 89:C3:26:AE:20:D4:79:AB:E2:62:42:55:30:9D:2F:68:7F:A3:15:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/89C326AE20D479ABE2624255309D2F687FA31537.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ch5TFR1rbJt9foAceedA9e2DuM4dgBCrb7bMtBtcSds/0/323830343a363733343a3a2f33322d313238203d3e20323639363132.roa
Signing time:             Wed 27 Sep 2023 18:00:27 +0000
ROA not before:           Wed 27 Sep 2023 17:55:27 +0000
ROA not after:            Wed 25 Sep 2024 18:00:27 +0000
asID:                     269612
IP address blocks:        2804:6734::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:bb:7d:9e:a7:08:de:db:c7:89:96:22:98:6d:c6:65:28:e6:54:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89C326AE20D479ABE2624255309D2F687FA31537
        Validity
            Not Before: Sep 27 17:55:27 2023 GMT
            Not After : Sep 25 18:00:27 2024 GMT
        Subject: CN=3AE418CFF01F1D73F91B5D7DF95941B95D7B08BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:43:93:54:a7:b4:f0:fd:df:38:0b:7c:3e:b7:
                    92:70:0d:62:5a:c1:17:1a:36:1f:e2:2d:fc:46:c6:
                    8a:86:25:07:a0:31:8d:e3:f2:e6:27:42:b3:c3:53:
                    44:e5:f7:45:5f:ef:ac:2a:85:71:93:48:21:91:0e:
                    53:e2:cb:73:24:b5:c2:3e:23:a3:0a:7a:76:0b:10:
                    6a:d4:4d:cb:17:41:78:d2:13:a3:71:ec:de:78:76:
                    29:6a:2f:9e:20:63:2f:a8:f6:06:d9:e4:d2:b3:ec:
                    15:68:c9:01:dd:4b:75:d8:42:60:68:3f:4f:1e:d6:
                    23:39:7d:a3:b5:f2:50:2a:8f:e8:f5:8f:73:e2:75:
                    ae:9b:9e:ec:1a:42:7b:cb:d7:ca:cf:ff:fc:6e:14:
                    d1:65:12:ac:7d:96:86:06:63:62:c0:a0:66:8c:b1:
                    d6:cf:d7:79:3c:93:b3:5b:b8:21:81:de:0b:09:18:
                    65:6b:70:d4:9e:15:dd:cf:1a:4d:35:fd:49:a3:87:
                    ef:8b:c9:6e:4d:f7:34:81:ae:65:04:cc:0b:ef:25:
                    63:2b:f1:08:93:29:32:7e:88:14:14:29:d7:b6:66:
                    43:3e:26:f4:d3:7e:fd:21:d3:f4:a8:83:8d:d2:0e:
                    52:25:e1:fc:5f:44:44:91:b7:c1:61:4a:5a:03:23:
                    e4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E4:18:CF:F0:1F:1D:73:F9:1B:5D:7D:F9:59:41:B9:5D:7B:08:BD
            X509v3 Authority Key Identifier:
                keyid:89:C3:26:AE:20:D4:79:AB:E2:62:42:55:30:9D:2F:68:7F:A3:15:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ch5TFR1rbJt9foAceedA9e2DuM4dgBCrb7bMtBtcSds/0/89C326AE20D479ABE2624255309D2F687FA31537.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/89C326AE20D479ABE2624255309D2F687FA31537.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ch5TFR1rbJt9foAceedA9e2DuM4dgBCrb7bMtBtcSds/0/323830343a363733343a3a2f33322d313238203d3e20323639363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6734::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:f9:63:bc:de:ff:60:d7:0c:1f:f3:ad:fb:d1:3a:8c:7d:88:
         17:85:cf:f6:dc:2d:00:0b:79:30:6e:63:1f:d7:e9:a4:92:c8:
         4e:68:29:e5:4b:bf:bd:7c:5a:bb:8c:ac:60:9b:34:e1:4e:9e:
         eb:84:40:3f:78:bb:2c:9e:a2:9a:68:00:02:39:2f:17:3e:f1:
         f9:81:5d:ea:da:cf:5b:b3:c3:57:f4:32:bb:f4:f0:56:cb:76:
         26:64:08:0b:9e:35:33:b5:6d:f1:7e:5f:e3:78:84:40:74:89:
         25:01:10:69:35:ee:2b:99:f6:76:c6:a5:26:ac:50:3c:d7:49:
         22:bf:57:3b:e8:90:18:ac:30:16:ae:14:ee:30:96:ad:9d:a3:
         8f:ff:1f:d0:9c:5e:9b:9b:be:4a:83:83:dd:cf:02:4d:4e:37:
         5e:4e:cd:40:81:01:8f:f3:b9:92:0b:12:32:5f:51:6a:07:10:
         89:fd:07:cc:74:88:5a:2b:6e:b9:b0:82:8d:90:b9:c2:7c:72:
         e2:10:98:a2:9c:3f:60:fa:fb:cf:18:5a:3e:8e:75:5d:c4:c2:
         c6:18:0f:86:23:02:38:f0:db:6a:26:15:0e:56:a4:af:23:6c:
         91:b0:fd:e6:8e:e2:1f:59:a7:7d:9f:56:2b:92:c3:b9:0c:f0:
         c7:97:ea:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----