Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6pVJBGsQu93thvzUXRRExj5wkpffe34HEVUEgEfkp6VK/1/323830343a326138303a3a2f33322d3438203d3e203533303934.roa
File:                     323830343a326138303a3a2f33322d3438203d3e203533303934.roa (raw, json)
Hash identifier:          3Gncp1o2wuwOjUnBajNNah+vo7nuZfp+wRRo3ixrEcw=
Subject key identifier:   6C:C6:4D:B8:11:8F:51:B9:19:6F:1A:0A:79:76:A9:87:69:4E:87:B3
Certificate issuer:       /CN=CFE268146F94B25E5775F1EEA7547C0D76B04F44
Certificate serial:       278AB6772D264829450E52C1855029893C9A2ABD
Authority key identifier: CF:E2:68:14:6F:94:B2:5E:57:75:F1:EE:A7:54:7C:0D:76:B0:4F:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFE268146F94B25E5775F1EEA7547C0D76B04F44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6pVJBGsQu93thvzUXRRExj5wkpffe34HEVUEgEfkp6VK/1/323830343a326138303a3a2f33322d3438203d3e203533303934.roa
Signing time:             Fri 05 Apr 2024 19:43:28 +0000
ROA not before:           Fri 05 Apr 2024 19:38:28 +0000
ROA not after:            Fri 04 Apr 2025 19:43:28 +0000
asID:                     53094
IP address blocks:        2804:2a80::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:8a:b6:77:2d:26:48:29:45:0e:52:c1:85:50:29:89:3c:9a:2a:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFE268146F94B25E5775F1EEA7547C0D76B04F44
        Validity
            Not Before: Apr  5 19:38:28 2024 GMT
            Not After : Apr  4 19:43:28 2025 GMT
        Subject: CN=6CC64DB8118F51B9196F1A0A7976A987694E87B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e9:80:8a:95:38:84:4f:5e:c6:76:0b:48:5c:
                    13:72:40:dc:44:71:8a:25:53:91:75:f6:8e:25:b6:
                    4a:ee:39:e3:2f:9d:3f:07:78:8c:aa:0f:88:37:0b:
                    51:ba:20:d4:f8:56:27:e3:0c:6b:72:e6:d2:ff:c9:
                    31:09:e9:03:27:80:b3:04:61:0b:f5:ef:26:eb:5d:
                    99:3c:27:f3:54:36:9a:3f:bd:6d:09:cf:40:23:8a:
                    fe:76:8b:a1:10:11:93:7c:21:f8:b5:12:50:59:7a:
                    b8:5b:a0:0b:f7:74:72:1f:c2:cf:de:17:0c:48:a9:
                    f0:8b:13:fb:c4:07:d2:b8:af:09:a8:62:97:6f:3a:
                    f1:21:93:f8:75:e9:7b:41:9d:5d:f7:26:a7:9f:64:
                    6c:52:33:a1:59:a2:75:35:a4:4b:66:b8:14:b2:a0:
                    e0:32:05:41:16:a0:9a:df:79:a1:0c:5f:9a:ba:5f:
                    84:d5:75:b0:6c:da:7d:3a:57:06:03:af:01:09:18:
                    70:a6:c1:7f:fd:b9:4d:cb:fa:e1:b2:80:ca:1f:2d:
                    74:74:ae:41:19:5b:13:f7:ba:6d:23:a2:3a:70:79:
                    20:b7:a6:d1:76:e9:57:20:5a:5e:57:13:5e:a5:3c:
                    07:df:55:c6:74:67:a6:c1:ad:e7:f6:6f:c6:88:d2:
                    eb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C6:4D:B8:11:8F:51:B9:19:6F:1A:0A:79:76:A9:87:69:4E:87:B3
            X509v3 Authority Key Identifier:
                keyid:CF:E2:68:14:6F:94:B2:5E:57:75:F1:EE:A7:54:7C:0D:76:B0:4F:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6pVJBGsQu93thvzUXRRExj5wkpffe34HEVUEgEfkp6VK/1/CFE268146F94B25E5775F1EEA7547C0D76B04F44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFE268146F94B25E5775F1EEA7547C0D76B04F44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6pVJBGsQu93thvzUXRRExj5wkpffe34HEVUEgEfkp6VK/1/323830343a326138303a3a2f33322d3438203d3e203533303934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2a80::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:c1:dd:ce:d4:ca:9b:3f:90:b5:95:34:89:ef:70:bb:98:9d:
         7f:51:da:9c:4b:91:bb:99:4d:e3:05:f2:be:a7:f7:f8:55:84:
         43:dc:f8:c2:ed:f7:6d:43:77:76:6e:7a:38:7d:cf:dd:d3:53:
         48:ad:44:30:40:6f:93:ce:4d:c5:aa:18:86:83:ce:af:5d:b1:
         6a:f3:61:a7:94:dc:72:c2:db:da:c1:2c:37:46:c9:f1:d9:c5:
         f7:c4:12:90:d7:e5:fe:61:8d:f5:0b:8d:02:17:95:ae:56:d3:
         ba:4e:80:91:71:28:57:40:36:e7:b7:ce:e5:ec:8d:b3:7a:e2:
         95:06:50:b4:a9:f0:ca:b6:15:0a:17:09:1a:fd:63:b1:3d:65:
         70:3d:f7:e8:2d:a0:d9:d8:3b:90:e8:16:0a:8e:21:06:25:5f:
         ef:58:fe:50:ce:12:9a:9d:8e:f8:47:8e:65:05:2f:13:80:9f:
         e2:d5:b1:a9:68:b7:08:d4:92:f1:7b:b6:cc:20:3c:2b:21:b0:
         b7:d2:d4:e8:a2:15:fc:48:92:1a:c0:bb:70:a8:3e:e1:3e:41:
         63:b5:ee:4b:4f:79:27:31:30:23:36:f0:5e:16:37:1a:44:d5:
         48:40:d5:e9:67:d0:c4:ec:d7:c1:72:52:f2:fb:48:3f:c5:d5:
         0e:af:48:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----