Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/0/323830343a363438383a3a2f33322d3332203d3e20323639343333.roa
File:                     323830343a363438383a3a2f33322d3332203d3e20323639343333.roa (raw, json)
Hash identifier:          Qg9nGakaHBmN27DbODYpgykN2gd+2nlNDKDdcFjBxUo=
Subject key identifier:   3E:AB:B9:C2:FD:23:18:D7:94:5E:22:04:FB:F3:19:CA:B3:13:39:39
Certificate issuer:       /CN=5BAB3FF323D6A7D4A97FF77435AA4AD5072A0115
Certificate serial:       32586E15435FD593B5FE06E55AD73F969691E397
Authority key identifier: 5B:AB:3F:F3:23:D6:A7:D4:A9:7F:F7:74:35:AA:4A:D5:07:2A:01:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BAB3FF323D6A7D4A97FF77435AA4AD5072A0115.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/0/323830343a363438383a3a2f33322d3332203d3e20323639343333.roa
Signing time:             Mon 19 Jun 2023 17:18:27 +0000
ROA not before:           Mon 19 Jun 2023 17:13:27 +0000
ROA not after:            Mon 17 Jun 2024 17:18:27 +0000
asID:                     269433
IP address blocks:        2804:6488::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:58:6e:15:43:5f:d5:93:b5:fe:06:e5:5a:d7:3f:96:96:91:e3:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BAB3FF323D6A7D4A97FF77435AA4AD5072A0115
        Validity
            Not Before: Jun 19 17:13:27 2023 GMT
            Not After : Jun 17 17:18:27 2024 GMT
        Subject: CN=3EABB9C2FD2318D7945E2204FBF319CAB3133939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:83:a9:16:6c:4d:65:bf:95:65:dc:25:3f:79:
                    31:de:2b:5e:54:f0:ad:b5:fa:ce:67:cb:9a:49:dc:
                    11:8a:41:97:b5:1c:9a:3f:f9:6b:26:6a:07:c6:11:
                    52:da:23:1a:a3:60:e9:13:cc:7c:67:b7:da:1f:9e:
                    c4:ff:c7:ac:b9:5b:d6:b8:55:fc:c8:4a:60:de:5e:
                    ee:cd:ac:71:f4:89:55:b4:6e:90:81:ad:1c:7f:68:
                    cf:86:96:7c:7f:8b:ad:a5:26:4c:61:ce:6f:1f:67:
                    18:32:e1:75:4e:46:fd:7a:00:6e:10:81:06:5c:a8:
                    b0:f7:d2:09:17:25:84:41:dc:5e:ec:18:b9:8b:1f:
                    5a:00:ea:a4:3b:41:59:99:87:e1:e6:52:8b:4a:a0:
                    68:8f:fe:4d:52:b7:1f:bd:02:35:cd:cc:72:72:37:
                    d6:67:fd:a6:c4:5f:46:4d:dc:c0:19:cb:d3:9a:0a:
                    97:7e:ed:45:d1:53:85:85:5b:3c:fa:54:08:67:18:
                    fc:f6:a1:72:db:07:00:4e:3d:a0:84:3c:6b:e4:13:
                    db:8c:20:a0:81:f8:d2:2e:ed:8f:e4:7d:f2:ae:7c:
                    f7:c9:41:44:e2:c5:57:76:77:11:09:f7:c7:56:59:
                    5b:0b:8c:ff:f0:bb:06:72:ec:37:f4:7e:99:32:2d:
                    c0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:AB:B9:C2:FD:23:18:D7:94:5E:22:04:FB:F3:19:CA:B3:13:39:39
            X509v3 Authority Key Identifier:
                keyid:5B:AB:3F:F3:23:D6:A7:D4:A9:7F:F7:74:35:AA:4A:D5:07:2A:01:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/0/5BAB3FF323D6A7D4A97FF77435AA4AD5072A0115.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BAB3FF323D6A7D4A97FF77435AA4AD5072A0115.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/0/323830343a363438383a3a2f33322d3332203d3e20323639343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6488::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:fd:f2:f2:f7:3d:13:0a:db:27:42:e7:24:97:4b:c8:2e:23:
         d3:83:9b:31:26:b9:7e:ca:16:07:93:f4:5d:5b:27:e5:bf:df:
         04:fc:53:11:88:ce:0a:28:e9:30:2c:f8:6d:ee:69:d6:7b:95:
         a2:95:de:56:7b:61:e0:0d:c9:70:53:ba:bd:22:dc:6b:aa:4a:
         8a:be:fd:de:39:59:98:36:7d:7e:7b:71:6a:82:11:6a:13:78:
         02:44:a4:80:65:c0:f8:cb:25:5f:98:60:0c:38:e5:7b:72:f6:
         81:3f:75:5b:35:21:cf:06:5b:ba:a8:14:58:5c:4c:5c:29:b4:
         6a:7c:35:d0:f8:32:1c:18:c6:2d:0b:75:e8:bb:fd:bb:f8:57:
         2a:2f:77:af:7b:17:98:b6:88:be:4e:2b:0b:73:73:0a:65:af:
         3d:3d:d1:01:3d:47:79:c0:1f:59:85:b5:2c:3f:b0:50:8b:0d:
         39:6e:28:7d:6f:ae:24:2c:61:13:62:81:7b:44:33:af:04:d1:
         82:48:b5:ef:39:32:9a:11:4b:5b:ce:5c:91:9d:4b:ba:d3:c5:
         58:ed:32:2a:6b:a9:02:bc:e7:4d:db:fd:46:67:ce:e9:13:b7:
         64:dd:ab:1e:4a:95:25:09:b2:a0:20:72:9d:47:72:4b:0a:4e:
         03:f9:43:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----