Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6dGmNshsi14s8SnyQWQhcfG5RiYdfcBTkwDMYxiQdVD9/0/323830343a373632303a3a2f33322d3332203d3e20323731303931.roa
File:                     323830343a373632303a3a2f33322d3332203d3e20323731303931.roa (raw, json)
Hash identifier:          TijdzrmvWp+Bx18dRWlwXcluTv7o6EKbE+z+bfGVrhI=
Subject key identifier:   2D:3B:AA:DC:5D:5F:4C:BB:28:BB:F7:21:1F:E9:3D:58:23:E3:49:CD
Certificate issuer:       /CN=CF765AF73EDCA320D37792FD19B73025D1DBDDE3
Certificate serial:       4B228924861476B490EC2149AEB2659AC264CE3A
Authority key identifier: CF:76:5A:F7:3E:DC:A3:20:D3:77:92:FD:19:B7:30:25:D1:DB:DD:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF765AF73EDCA320D37792FD19B73025D1DBDDE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dGmNshsi14s8SnyQWQhcfG5RiYdfcBTkwDMYxiQdVD9/0/323830343a373632303a3a2f33322d3332203d3e20323731303931.roa
Signing time:             Wed 03 May 2023 19:04:04 +0000
ROA not before:           Wed 03 May 2023 18:59:04 +0000
ROA not after:            Wed 01 May 2024 19:04:04 +0000
asID:                     271091
IP address blocks:        2804:7620::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:22:89:24:86:14:76:b4:90:ec:21:49:ae:b2:65:9a:c2:64:ce:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF765AF73EDCA320D37792FD19B73025D1DBDDE3
        Validity
            Not Before: May  3 18:59:04 2023 GMT
            Not After : May  1 19:04:04 2024 GMT
        Subject: CN=2D3BAADC5D5F4CBB28BBF7211FE93D5823E349CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:98:77:dd:c6:42:c6:91:3b:58:09:02:1c:66:
                    65:4f:1b:f8:ef:f7:cb:9b:37:51:1c:41:f3:19:cd:
                    32:8c:6e:cf:28:42:9a:3a:97:e9:12:f5:05:27:30:
                    04:71:e5:57:c4:a6:6b:08:9e:9d:50:51:db:4b:ec:
                    c2:4a:f5:12:ed:96:94:a6:ec:11:a4:20:4c:b6:65:
                    33:69:e9:e8:4a:ea:a5:62:33:3c:5d:46:dd:08:0b:
                    00:3d:7f:37:a2:70:ab:f5:d0:63:34:13:81:5d:ad:
                    75:d8:e3:e1:57:9e:b0:08:45:63:5a:0a:97:1a:ff:
                    9c:13:6d:dc:5d:8b:b6:f4:85:99:d1:77:14:6e:47:
                    59:10:08:25:50:89:c5:18:84:c6:fa:ab:47:0c:09:
                    92:a5:f0:9d:78:a9:7c:e6:f4:1e:b6:f0:69:44:e7:
                    67:ab:60:b3:c8:4d:2d:05:f8:8d:78:50:1b:53:1d:
                    37:8c:55:e7:99:14:5d:48:e4:f4:76:03:35:54:45:
                    c8:6d:c4:ca:38:cd:a3:45:dd:25:7f:2e:85:25:fb:
                    64:0e:32:29:41:5a:b0:3b:88:3a:12:e0:90:a4:3c:
                    64:63:48:d5:c1:e2:f2:71:81:ff:7d:1e:4e:4e:66:
                    85:c5:6f:2a:cd:e9:54:67:19:b6:20:41:20:42:85:
                    7a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:3B:AA:DC:5D:5F:4C:BB:28:BB:F7:21:1F:E9:3D:58:23:E3:49:CD
            X509v3 Authority Key Identifier:
                keyid:CF:76:5A:F7:3E:DC:A3:20:D3:77:92:FD:19:B7:30:25:D1:DB:DD:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dGmNshsi14s8SnyQWQhcfG5RiYdfcBTkwDMYxiQdVD9/0/CF765AF73EDCA320D37792FD19B73025D1DBDDE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF765AF73EDCA320D37792FD19B73025D1DBDDE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dGmNshsi14s8SnyQWQhcfG5RiYdfcBTkwDMYxiQdVD9/0/323830343a373632303a3a2f33322d3332203d3e20323731303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7620::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:db:7b:3c:31:05:b7:c0:ff:fb:3c:1c:02:15:ce:d9:20:c0:
         01:49:65:fc:51:ad:d3:c1:04:e2:5f:03:63:bf:13:af:38:3b:
         b0:7d:9f:82:3b:77:18:a6:86:fb:41:5a:9c:de:48:e6:43:f7:
         73:08:e4:42:2b:9e:55:d4:4a:f1:d8:ab:9a:4b:bb:76:d0:70:
         b2:b6:ee:ce:cf:31:ca:b6:ce:7e:7a:6e:7d:0b:13:55:1c:c0:
         d6:cf:0f:54:19:67:fc:bb:e1:0d:a7:d1:a9:7b:76:2a:c9:c0:
         f0:49:71:da:bc:49:f7:21:4f:5b:f8:60:5e:69:c6:4a:b9:51:
         1c:ba:a7:84:14:a5:4e:4e:9c:cd:72:ca:50:d9:07:bf:f9:86:
         f5:3e:e9:52:c1:94:d6:1a:a2:74:1c:8e:d4:fa:34:72:29:c5:
         d5:d4:57:a7:cb:1d:96:0b:fd:42:ae:17:b5:7f:5f:e4:31:f2:
         01:53:75:93:ab:cb:c9:15:9a:fa:1b:20:d2:cd:5b:c8:81:3c:
         b1:02:d4:48:70:1a:39:c5:c0:6f:f9:62:d4:78:9e:a7:99:73:
         87:e2:bb:50:cd:50:6b:da:50:78:79:1a:3a:db:ac:e0:5a:0f:
         fc:7e:07:d1:f1:57:c7:ff:74:87:ad:96:ed:10:d1:68:39:cf:
         97:3c:80:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----