Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6qjy6j3vvbkzsK5FaEM8KdVXgtnoGW7TUb8PNHryDQao/0/323830343a356465303a3a2f33322d313238203d3e20323638393938.roa
File:                     323830343a356465303a3a2f33322d313238203d3e20323638393938.roa (raw, json)
Hash identifier:          dLA7RYsreZv88JX/u/JqHW1y4DyBezLAEklnMRs7xw4=
Subject key identifier:   FF:9A:C7:F2:0F:64:A2:FF:E3:32:CD:5B:6A:CA:CF:AB:0E:D5:C0:56
Certificate issuer:       /CN=63B0E3CA66D44E26679E4B62E4AA160AC0F42B66
Certificate serial:       444AEB20C23991C843F7AD674AC10E96D45A06A8
Authority key identifier: 63:B0:E3:CA:66:D4:4E:26:67:9E:4B:62:E4:AA:16:0A:C0:F4:2B:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63B0E3CA66D44E26679E4B62E4AA160AC0F42B66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6qjy6j3vvbkzsK5FaEM8KdVXgtnoGW7TUb8PNHryDQao/0/323830343a356465303a3a2f33322d313238203d3e20323638393938.roa
Signing time:             Tue 26 Dec 2023 23:23:39 +0000
ROA not before:           Tue 26 Dec 2023 23:18:39 +0000
ROA not after:            Tue 24 Dec 2024 23:23:39 +0000
asID:                     268998
IP address blocks:        2804:5de0::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:4a:eb:20:c2:39:91:c8:43:f7:ad:67:4a:c1:0e:96:d4:5a:06:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63B0E3CA66D44E26679E4B62E4AA160AC0F42B66
        Validity
            Not Before: Dec 26 23:18:39 2023 GMT
            Not After : Dec 24 23:23:39 2024 GMT
        Subject: CN=FF9AC7F20F64A2FFE332CD5B6ACACFAB0ED5C056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c2:84:60:aa:25:62:3c:57:35:ca:90:5a:04:
                    9e:99:1b:cb:e9:8e:d7:04:82:f1:33:76:d4:5b:5d:
                    7b:5c:46:f4:9f:99:8b:a4:04:b1:c8:10:aa:8b:71:
                    b9:f0:cb:55:11:f0:97:d1:d0:83:77:e6:ef:99:cf:
                    a6:ba:23:f5:02:a6:cb:f3:54:fc:5e:ab:3d:e6:54:
                    24:e2:fc:b9:24:18:31:28:b8:f5:a9:40:25:3a:5f:
                    54:67:f2:ad:0d:ba:36:d2:b6:9c:6e:56:65:ef:c6:
                    db:3e:b6:97:13:05:15:a6:06:51:91:7d:86:20:8f:
                    0d:62:73:1f:0c:36:f8:40:71:59:54:2f:1e:7d:e1:
                    3c:ed:0a:81:9a:bd:9e:8d:ed:8b:9e:53:68:60:f4:
                    c0:43:91:0b:42:7a:7d:6b:6d:85:da:85:35:8c:ca:
                    a2:75:47:d3:2c:e6:1d:9c:3d:e3:d3:f8:df:ad:5c:
                    1d:18:2d:69:1e:93:d3:ca:82:11:24:3e:f6:8d:41:
                    bf:d1:c6:87:d5:db:8d:59:03:dc:e7:95:27:19:a4:
                    2b:48:51:3f:6b:18:b3:46:44:95:97:8f:33:67:f4:
                    4d:ef:aa:9e:e8:d1:3b:e1:70:66:b9:32:29:62:99:
                    2b:85:6e:f9:97:63:db:66:89:bf:28:bf:74:a3:0e:
                    35:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:9A:C7:F2:0F:64:A2:FF:E3:32:CD:5B:6A:CA:CF:AB:0E:D5:C0:56
            X509v3 Authority Key Identifier:
                keyid:63:B0:E3:CA:66:D4:4E:26:67:9E:4B:62:E4:AA:16:0A:C0:F4:2B:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6qjy6j3vvbkzsK5FaEM8KdVXgtnoGW7TUb8PNHryDQao/0/63B0E3CA66D44E26679E4B62E4AA160AC0F42B66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63B0E3CA66D44E26679E4B62E4AA160AC0F42B66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6qjy6j3vvbkzsK5FaEM8KdVXgtnoGW7TUb8PNHryDQao/0/323830343a356465303a3a2f33322d313238203d3e20323638393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5de0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:18:a8:30:3d:1a:4e:ee:e6:d1:cb:92:58:5b:84:7d:03:55:
         f5:9c:cc:51:39:59:91:da:db:4b:38:dc:71:74:5f:4f:70:9e:
         f0:d8:64:fb:71:fa:ff:a0:ec:6b:f5:c5:23:98:6d:0f:0a:e3:
         98:3d:ff:d4:95:3f:72:cf:03:33:c3:b0:f5:e4:6c:44:eb:1b:
         fa:53:95:dd:89:2f:6d:4c:7c:2b:21:25:cd:7b:9c:93:27:85:
         01:f0:a1:0b:2e:8d:76:a0:6b:91:4c:37:73:e9:ee:1e:30:d3:
         a9:29:b8:2d:96:f0:53:b4:0c:73:d2:1f:41:c0:07:a8:c8:56:
         86:a3:bc:2f:ec:db:1d:bf:48:87:d0:68:ee:52:4f:67:87:bd:
         b8:61:ca:7a:27:81:ca:4b:46:2f:26:00:22:e6:29:d9:3e:bf:
         27:e0:6e:7a:5d:4a:df:0c:0c:39:9d:30:58:a4:78:2f:6a:93:
         94:ba:61:6d:42:1c:5e:80:83:c6:39:5a:0e:05:20:d6:cb:22:
         db:b0:6c:06:1c:bd:0e:b1:14:2a:89:92:d2:de:f5:39:e9:8a:
         60:73:10:5a:d0:c5:0e:c8:3b:3a:f3:22:02:d7:4c:a2:8c:b3:
         bc:03:d1:9b:e2:21:f3:df:b5:0f:15:e4:8d:a6:18:a6:ae:66:
         d6:58:0b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----