Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6pkJd12NzyxnZPvRo7G4D3SJr7NB7TaxiQZWdgD9CN9T/0/323830343a3665343a3a2f33322d3438203d3e20323632363132.roa
File:                     323830343a3665343a3a2f33322d3438203d3e20323632363132.roa (raw, json)
Hash identifier:          bu3uDIsJcFl+HuMn9eCODt9P5KviBYrTZuCc6/Ss+bk=
Subject key identifier:   99:F0:F5:86:B9:10:88:01:1A:DA:A3:40:8F:C6:68:18:A5:A8:03:49
Certificate issuer:       /CN=A94A599704715D29A27EB08841A9EF2E8D361EE6
Certificate serial:       6B432F3C7DE7E45DF5D1DFDA63B4ACE1AA9AE4BD
Authority key identifier: A9:4A:59:97:04:71:5D:29:A2:7E:B0:88:41:A9:EF:2E:8D:36:1E:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A94A599704715D29A27EB08841A9EF2E8D361EE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6pkJd12NzyxnZPvRo7G4D3SJr7NB7TaxiQZWdgD9CN9T/0/323830343a3665343a3a2f33322d3438203d3e20323632363132.roa
Signing time:             Tue 12 Dec 2023 11:12:28 +0000
ROA not before:           Tue 12 Dec 2023 11:07:28 +0000
ROA not after:            Tue 10 Dec 2024 11:12:28 +0000
asID:                     262612
IP address blocks:        2804:6e4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:43:2f:3c:7d:e7:e4:5d:f5:d1:df:da:63:b4:ac:e1:aa:9a:e4:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A94A599704715D29A27EB08841A9EF2E8D361EE6
        Validity
            Not Before: Dec 12 11:07:28 2023 GMT
            Not After : Dec 10 11:12:28 2024 GMT
        Subject: CN=99F0F586B91088011ADAA3408FC66818A5A80349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:82:10:1d:3e:06:bc:a7:31:82:d4:27:04:85:
                    37:17:67:92:07:c6:74:9c:79:7c:ae:73:df:fb:46:
                    26:c5:86:0a:fe:ed:18:b2:2d:8a:3e:97:eb:fa:81:
                    67:58:1d:05:f2:55:65:63:79:ec:bb:6e:d6:89:20:
                    25:72:7e:44:44:f8:17:1c:31:4c:d6:3c:41:54:ff:
                    e6:53:92:cd:5b:80:fd:94:30:62:aa:82:93:6d:d6:
                    47:ae:04:d8:d1:5b:28:ce:cd:43:2e:69:e2:55:47:
                    ed:dc:8b:db:c7:b0:71:2d:e3:c0:88:4b:07:48:54:
                    dd:cd:a9:09:02:5b:f7:8b:78:3a:a5:88:93:84:03:
                    64:7a:24:f4:4d:96:d4:b3:cf:90:59:7c:2e:96:ab:
                    7f:2d:71:90:2e:2b:40:51:64:3a:3c:45:f6:35:6c:
                    24:ab:3a:ed:5b:fb:50:18:97:59:f5:d1:cf:38:ae:
                    b8:bf:bb:b0:35:e4:76:cf:57:9f:0f:0f:e0:1a:d1:
                    d7:e0:c4:cb:e0:de:4c:aa:4f:08:bf:d7:67:29:37:
                    18:00:10:34:00:a6:13:80:33:87:8f:ca:62:1d:4e:
                    33:6e:d8:70:3f:68:f7:6e:7d:50:c9:f0:8b:3f:cf:
                    97:71:38:a4:6e:2c:54:05:b2:34:67:d2:8a:0b:5a:
                    15:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F0:F5:86:B9:10:88:01:1A:DA:A3:40:8F:C6:68:18:A5:A8:03:49
            X509v3 Authority Key Identifier:
                keyid:A9:4A:59:97:04:71:5D:29:A2:7E:B0:88:41:A9:EF:2E:8D:36:1E:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6pkJd12NzyxnZPvRo7G4D3SJr7NB7TaxiQZWdgD9CN9T/0/A94A599704715D29A27EB08841A9EF2E8D361EE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A94A599704715D29A27EB08841A9EF2E8D361EE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6pkJd12NzyxnZPvRo7G4D3SJr7NB7TaxiQZWdgD9CN9T/0/323830343a3665343a3a2f33322d3438203d3e20323632363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:f2:8e:56:3b:88:28:cc:b7:d0:eb:8b:07:51:11:5b:ca:d6:
         a3:40:f4:3b:8e:df:3f:4d:2e:5d:ef:cf:24:42:1b:28:da:fb:
         59:d7:8b:40:a2:f9:c0:7b:57:b1:48:aa:40:e1:0f:56:82:34:
         d0:ed:db:19:13:df:2c:d4:f1:37:0e:64:57:0c:ec:39:0d:5c:
         fd:e7:b2:33:d0:76:63:2f:d7:d3:c7:62:64:be:96:e1:0f:f1:
         5e:72:37:83:f7:61:d7:fa:8b:57:d9:c5:96:99:e9:74:63:c7:
         f3:b5:91:f8:63:1d:43:7d:86:d2:88:88:17:53:b0:5c:2d:c5:
         13:ef:dc:0a:62:37:6d:21:15:69:31:97:ec:4d:bf:a8:42:66:
         c1:8b:79:a2:af:2d:46:55:98:e7:d0:0c:56:82:c5:ba:c1:d5:
         ee:b6:02:25:cc:f8:49:48:e9:93:66:39:f7:62:48:bb:10:b8:
         98:7d:24:5a:6e:9f:11:20:42:dc:25:dd:a9:f8:5e:61:30:91:
         e7:b7:d8:05:6c:58:64:5e:07:5d:15:e2:60:26:9c:24:d2:ba:
         b6:3b:8a:9d:bb:63:91:84:5d:4c:80:3b:d9:03:4d:d1:99:50:
         fd:3b:ee:21:d8:0f:6f:b1:d9:1b:61:54:9b:db:86:aa:2f:8b:
         96:d9:ad:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----