Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/0/323830343a313362343a3a2f33322d3438203d3e20323632323838.roa
File:                     323830343a313362343a3a2f33322d3438203d3e20323632323838.roa (raw, json)
Hash identifier:          TCOUSf3HVSInM2GLAL5tP+M+Udvto39eNfm3DXHHshw=
Subject key identifier:   79:38:EF:FD:D2:B5:FA:7A:DA:35:FC:C9:A0:78:0E:77:7C:81:7F:DE
Certificate issuer:       /CN=B01DA4E6B1788F2115423DAD9B220AC26F1AA123
Certificate serial:       719A0FBD6E6C118944EA40C9F94352111790F922
Authority key identifier: B0:1D:A4:E6:B1:78:8F:21:15:42:3D:AD:9B:22:0A:C2:6F:1A:A1:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B01DA4E6B1788F2115423DAD9B220AC26F1AA123.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/0/323830343a313362343a3a2f33322d3438203d3e20323632323838.roa
Signing time:             Sat 27 May 2023 13:07:07 +0000
ROA not before:           Sat 27 May 2023 13:02:07 +0000
ROA not after:            Sat 25 May 2024 13:07:07 +0000
asID:                     262288
IP address blocks:        2804:13b4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:9a:0f:bd:6e:6c:11:89:44:ea:40:c9:f9:43:52:11:17:90:f9:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B01DA4E6B1788F2115423DAD9B220AC26F1AA123
        Validity
            Not Before: May 27 13:02:07 2023 GMT
            Not After : May 25 13:07:07 2024 GMT
        Subject: CN=7938EFFDD2B5FA7ADA35FCC9A0780E777C817FDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b2:c6:7c:af:8a:ec:8e:3b:0f:04:fa:c0:98:
                    02:f8:c5:21:ce:45:80:a8:2e:e5:37:6e:35:fe:fe:
                    4a:e5:80:a9:02:42:72:b5:ea:a4:fe:bd:37:2e:93:
                    b4:3b:3b:5e:76:ad:15:d1:b0:b7:bf:61:2e:4d:ce:
                    9f:fb:85:9e:d3:0b:b9:00:07:cc:3d:09:80:f8:0a:
                    aa:48:8a:f9:ae:b7:08:e2:28:77:38:d2:c6:39:13:
                    28:0e:d1:52:6e:9f:57:dd:20:33:38:1c:ab:d7:c6:
                    7a:42:f5:4a:82:37:d1:63:25:7f:28:44:a8:09:e0:
                    58:48:07:e0:0b:c7:ab:5e:ec:e4:1d:26:24:42:4b:
                    c9:28:e6:a3:4f:c1:be:3d:10:77:30:24:44:4e:26:
                    bb:d4:36:6d:d6:a9:f3:9b:5b:dd:9f:69:d9:b8:2d:
                    1b:5e:07:45:c6:05:f6:85:1b:b9:55:f4:32:cc:66:
                    89:43:7d:68:11:a1:44:e5:a4:72:fb:82:5a:92:26:
                    c7:3d:37:8d:6d:f6:5b:c4:de:5b:08:84:20:1c:d8:
                    16:6c:a2:c5:84:b5:68:f3:ad:20:4b:40:92:31:7e:
                    61:f0:14:1c:51:1a:e5:fe:e5:d3:76:14:05:b2:16:
                    cb:70:6b:df:61:52:e6:28:3d:a3:76:57:f6:a7:16:
                    8f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:38:EF:FD:D2:B5:FA:7A:DA:35:FC:C9:A0:78:0E:77:7C:81:7F:DE
            X509v3 Authority Key Identifier:
                keyid:B0:1D:A4:E6:B1:78:8F:21:15:42:3D:AD:9B:22:0A:C2:6F:1A:A1:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/0/B01DA4E6B1788F2115423DAD9B220AC26F1AA123.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B01DA4E6B1788F2115423DAD9B220AC26F1AA123.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/0/323830343a313362343a3a2f33322d3438203d3e20323632323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:13b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:56:79:c9:88:b0:82:c6:ed:b4:f0:0d:fa:fe:06:6f:1c:1a:
         11:0f:60:36:16:66:06:ea:c8:bb:8a:22:5b:55:fe:4b:c7:f0:
         6c:a1:34:ee:e3:9d:2d:54:74:84:ef:d7:6a:6a:81:77:f5:de:
         32:3a:ed:52:3e:32:e7:2c:e6:3b:8c:df:02:22:f0:35:d8:b8:
         05:53:dc:8a:aa:f3:79:60:9c:85:f8:a2:34:cb:be:fa:5f:f2:
         6f:d2:9a:dc:f3:40:25:67:b7:43:3f:24:24:92:aa:b5:7f:99:
         f3:0e:1c:27:bf:d5:d3:e2:ae:29:77:a7:8a:44:1f:d5:31:79:
         98:f5:c9:ff:fd:30:7d:b2:eb:04:04:c6:cd:28:4d:70:4e:c0:
         2a:27:a2:42:52:f6:29:32:5d:01:16:75:0e:86:7e:f9:99:48:
         93:09:91:48:30:00:fd:cc:e7:ab:5e:0f:e3:6c:94:fe:71:fa:
         f1:73:b3:23:fa:a3:65:21:88:10:3e:24:e6:10:90:38:12:33:
         6c:01:14:aa:b3:62:3c:dc:8e:38:17:3d:dc:9e:b1:e8:e5:ff:
         98:d0:b7:10:dc:78:7c:0d:31:da:ac:53:6d:52:dd:5c:29:55:
         8e:e5:14:49:ca:2a:13:53:fe:f3:82:c7:6c:ce:5a:86:7d:a9:
         1c:9a:51:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----