Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/323830343a316535383a653030303a3a2f34362d3436203d3e20323634343232.roa
File:                     323830343a316535383a653030303a3a2f34362d3436203d3e20323634343232.roa (raw, json)
Hash identifier:          kY6eN+08bueRachrYMyTOVBMYWYI5ikVIG0YgHSqctw=
Subject key identifier:   E4:61:0A:98:6E:FD:AE:9F:DC:49:1C:09:66:27:E1:6C:76:4B:40:AC
Certificate issuer:       /CN=F9A73C97014A0F1C02C22BBF01151B9C8F06FD53
Certificate serial:       531B7ED4DB5733F078D9104D02DFFACE3E2A9F55
Authority key identifier: F9:A7:3C:97:01:4A:0F:1C:02:C2:2B:BF:01:15:1B:9C:8F:06:FD:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/323830343a316535383a653030303a3a2f34362d3436203d3e20323634343232.roa
Signing time:             Thu 04 Apr 2024 11:34:01 +0000
ROA not before:           Thu 04 Apr 2024 11:29:01 +0000
ROA not after:            Thu 03 Apr 2025 11:34:01 +0000
asID:                     264422
IP address blocks:        2804:1e58:e000::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:1b:7e:d4:db:57:33:f0:78:d9:10:4d:02:df:fa:ce:3e:2a:9f:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9A73C97014A0F1C02C22BBF01151B9C8F06FD53
        Validity
            Not Before: Apr  4 11:29:01 2024 GMT
            Not After : Apr  3 11:34:01 2025 GMT
        Subject: CN=E4610A986EFDAE9FDC491C096627E16C764B40AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:41:c9:01:f1:b1:98:f9:b8:84:9f:cb:58:6f:
                    24:c2:e3:8f:0b:4d:32:fa:a7:00:21:2d:0e:ba:dc:
                    6d:9d:f6:b2:4d:86:fa:97:da:ac:4a:40:da:1c:d5:
                    e9:d0:a6:0a:50:30:88:35:48:9d:84:88:90:4f:6d:
                    5b:92:44:46:34:2c:1b:99:1e:8f:be:74:3e:fe:2c:
                    ca:f4:7f:fe:88:bc:87:54:9d:51:bc:dc:70:8b:3b:
                    8e:25:9e:ce:93:7c:a3:32:43:ae:3f:14:93:38:54:
                    7c:3e:ba:1a:68:55:79:55:5b:8f:39:a8:05:38:97:
                    43:5e:6a:a9:86:65:12:d8:4c:07:b2:cf:8f:82:10:
                    8f:a7:3c:4c:f6:dc:66:e4:c5:c1:da:86:3b:71:70:
                    e8:fe:cd:e3:66:6b:6f:7e:f3:49:63:91:f3:61:87:
                    e7:e0:4d:31:cd:c6:e2:2a:ab:ad:8c:74:37:cc:fa:
                    d5:46:d7:97:00:d5:74:d0:f0:d8:56:0d:4f:93:18:
                    f1:a7:ce:2b:66:78:1f:89:41:c5:21:97:4b:c1:61:
                    9d:ab:58:fc:84:88:1f:08:e5:0a:af:23:2d:65:1e:
                    da:2f:5c:d0:da:62:17:58:44:35:1a:d0:5e:20:a8:
                    48:8e:76:6d:eb:37:d3:4c:8f:ae:f9:e5:fe:92:18:
                    dc:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:61:0A:98:6E:FD:AE:9F:DC:49:1C:09:66:27:E1:6C:76:4B:40:AC
            X509v3 Authority Key Identifier:
                keyid:F9:A7:3C:97:01:4A:0F:1C:02:C2:2B:BF:01:15:1B:9C:8F:06:FD:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/323830343a316535383a653030303a3a2f34362d3436203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:e000::/46

    Signature Algorithm: sha256WithRSAEncryption
         90:94:46:dc:3f:52:27:7f:28:fc:15:b7:e1:be:ec:58:89:67:
         a3:cc:30:0b:01:97:c0:fe:c2:df:5a:1b:d1:95:40:c6:e0:d2:
         00:a2:af:28:62:94:52:01:ba:aa:50:71:50:23:67:4a:87:8d:
         b6:c0:e1:45:54:b8:39:08:3a:d5:0f:39:ae:33:21:3b:6b:a7:
         f5:2d:f7:ec:57:55:8d:36:04:64:bc:82:c2:f5:03:e3:5d:3e:
         9a:eb:77:ec:d6:be:32:43:08:20:b3:0d:b1:d5:b1:fe:42:e1:
         06:df:17:a5:81:44:38:87:e8:52:ea:8e:97:c1:ed:e0:80:2f:
         48:ca:d4:9e:8a:80:41:5b:59:65:e3:5b:e9:d3:d2:6e:8d:07:
         fa:96:ae:00:65:0b:ef:d0:e5:e9:24:d7:63:43:e8:ea:3f:12:
         cb:d5:56:a8:32:30:24:90:ba:f1:eb:1b:60:11:8f:40:9a:84:
         19:e1:14:97:d0:2c:ab:ea:0c:c4:1d:f4:24:ea:26:ca:1a:bb:
         4c:53:e1:6f:bf:68:a1:0d:99:e1:a9:6d:2e:40:27:f2:88:01:
         ef:10:59:a7:1f:36:8c:fa:9f:e3:9e:21:8e:1f:ba:54:35:14:
         16:cc:e3:ae:26:91:29:b5:84:e4:d1:35:df:d5:ee:59:c4:1e:
         74:b9:b2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----