Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/323830343a316535383a313a3a2f34382d3438203d3e20323634343232.roa
File:                     323830343a316535383a313a3a2f34382d3438203d3e20323634343232.roa (raw, json)
Hash identifier:          hs5gWOrAdlKAN0q0DIz+WWKh8XzJXYV8TdwNHbaksUA=
Subject key identifier:   E6:66:B4:55:E7:25:8B:C4:4A:74:17:7E:B3:B2:3C:B1:23:B5:2A:D7
Certificate issuer:       /CN=F9A73C97014A0F1C02C22BBF01151B9C8F06FD53
Certificate serial:       1BD70F67BC1647CBBC635D50005DBDFA3C82A484
Authority key identifier: F9:A7:3C:97:01:4A:0F:1C:02:C2:2B:BF:01:15:1B:9C:8F:06:FD:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/323830343a316535383a313a3a2f34382d3438203d3e20323634343232.roa
Signing time:             Thu 04 Apr 2024 11:34:04 +0000
ROA not before:           Thu 04 Apr 2024 11:29:04 +0000
ROA not after:            Thu 03 Apr 2025 11:34:04 +0000
asID:                     264422
IP address blocks:        2804:1e58:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:d7:0f:67:bc:16:47:cb:bc:63:5d:50:00:5d:bd:fa:3c:82:a4:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9A73C97014A0F1C02C22BBF01151B9C8F06FD53
        Validity
            Not Before: Apr  4 11:29:04 2024 GMT
            Not After : Apr  3 11:34:04 2025 GMT
        Subject: CN=E666B455E7258BC44A74177EB3B23CB123B52AD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:79:d4:ce:ea:e4:19:28:fc:dc:a1:f0:06:70:
                    e5:e5:28:32:cf:05:ed:f3:34:be:67:37:a3:58:04:
                    54:4d:a0:89:d2:97:02:65:42:0d:a6:7e:c1:98:46:
                    e8:57:90:bc:0c:5e:b6:d0:c5:df:e8:53:a2:49:6b:
                    69:26:72:8d:cc:0a:96:b6:66:b5:df:1b:11:9a:91:
                    6a:0a:e9:c2:4b:bf:b7:0c:6d:1a:07:52:31:ed:9e:
                    4d:35:e7:ae:f6:b5:dd:b6:c6:75:d6:5b:e8:b4:f5:
                    f0:d9:c6:96:93:7c:23:7c:cd:2f:34:83:52:30:b4:
                    93:25:18:9d:af:90:df:59:04:d7:e7:de:29:4d:a1:
                    ac:97:73:fc:11:51:f5:e0:00:02:dd:28:24:27:a2:
                    da:26:7a:aa:dc:d1:b5:d7:01:3f:77:a0:79:68:29:
                    84:86:ea:f0:8e:8e:77:8d:03:62:21:bb:ee:e3:ab:
                    9e:b4:28:9f:d5:c7:0c:f3:f6:95:c2:b0:e6:0e:56:
                    81:ad:de:91:fc:24:a3:21:29:58:63:d1:ea:60:41:
                    30:f4:67:b8:25:5d:bf:24:df:60:4b:e4:ef:c7:d5:
                    35:92:96:ef:05:24:d1:0f:5c:25:18:1f:8f:9c:3c:
                    ab:1d:41:92:85:cc:77:6a:be:c3:b5:ad:9c:ca:0e:
                    18:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:66:B4:55:E7:25:8B:C4:4A:74:17:7E:B3:B2:3C:B1:23:B5:2A:D7
            X509v3 Authority Key Identifier:
                keyid:F9:A7:3C:97:01:4A:0F:1C:02:C2:2B:BF:01:15:1B:9C:8F:06:FD:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/323830343a316535383a313a3a2f34382d3438203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:1d:0a:dd:c3:b6:88:01:15:77:81:e7:58:2c:37:1d:c7:38:
         ba:af:04:b9:31:fb:28:48:4e:ac:98:a7:b0:f3:2e:01:5e:89:
         8b:a4:82:95:9a:24:f2:f3:7e:a2:f4:d5:1e:ae:50:bf:4e:9d:
         f4:3f:24:e7:7b:d6:60:d9:02:62:bb:07:d8:bf:34:99:18:3e:
         1d:aa:f5:f9:36:c9:28:06:5b:62:75:f1:47:e4:37:1e:86:2a:
         7b:86:86:0c:d8:ff:3a:89:63:06:80:10:af:f7:4b:63:55:96:
         36:69:eb:e0:fa:54:20:cf:d8:6e:0d:a2:d7:cd:cb:a8:f5:9d:
         30:7e:63:55:6d:94:d8:26:50:4e:ca:c1:a1:aa:19:97:ab:28:
         9d:1b:6e:65:31:f4:2f:cf:9f:bc:28:1a:98:68:e4:84:30:f3:
         a5:cf:3a:d5:e1:f9:47:84:02:24:fd:f1:41:67:6d:2c:0f:63:
         d3:3b:72:ca:c2:50:3b:97:9b:ab:54:6a:75:cd:15:5c:13:2c:
         b1:ba:0b:48:5b:48:02:b5:d3:7d:6f:4e:67:3a:92:36:61:3a:
         f8:ea:76:5c:8e:0b:3b:25:e9:c0:2c:24:20:d5:61:74:a7:de:
         13:ae:86:df:2e:56:25:11:bc:c6:1c:81:f6:67:18:5a:20:93:
         78:71:24:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----