Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/323830343a316535383a663030333a3a2f34382d3438203d3e20323634343232.roa
File:                     323830343a316535383a663030333a3a2f34382d3438203d3e20323634343232.roa (raw, json)
Hash identifier:          /Zvrlw2ogPl9HcLCSMfVNvFryERquft7i+FcEl46YHQ=
Subject key identifier:   E9:68:49:A3:A5:BB:B2:B9:CD:5C:4A:35:6B:83:3A:CD:32:94:61:16
Certificate issuer:       /CN=F9A73C97014A0F1C02C22BBF01151B9C8F06FD53
Certificate serial:       02F36824CA2404FE0F3C7238C41ED4DDF893D90B
Authority key identifier: F9:A7:3C:97:01:4A:0F:1C:02:C2:2B:BF:01:15:1B:9C:8F:06:FD:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/323830343a316535383a663030333a3a2f34382d3438203d3e20323634343232.roa
Signing time:             Thu 04 Apr 2024 11:33:59 +0000
ROA not before:           Thu 04 Apr 2024 11:28:59 +0000
ROA not after:            Thu 03 Apr 2025 11:33:59 +0000
asID:                     264422
IP address blocks:        2804:1e58:f003::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:f3:68:24:ca:24:04:fe:0f:3c:72:38:c4:1e:d4:dd:f8:93:d9:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9A73C97014A0F1C02C22BBF01151B9C8F06FD53
        Validity
            Not Before: Apr  4 11:28:59 2024 GMT
            Not After : Apr  3 11:33:59 2025 GMT
        Subject: CN=E96849A3A5BBB2B9CD5C4A356B833ACD32946116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a3:fc:b8:8c:3d:fc:0b:a7:cf:4d:df:f1:d9:
                    e3:c7:86:c2:ad:6d:cc:b1:a5:1f:bd:d4:c3:f1:0c:
                    73:fe:25:97:ba:a9:17:f2:0a:aa:96:24:73:78:d3:
                    92:aa:b8:c6:49:80:a8:60:b9:3e:31:7d:b6:4a:2a:
                    d6:e4:18:68:ae:0b:22:1c:6d:c4:22:02:1b:d2:f9:
                    27:fc:b4:6e:ac:0d:ad:1b:0e:61:77:c1:d7:44:24:
                    ca:71:68:0d:14:d3:0b:f0:44:56:ce:15:be:4c:52:
                    42:3e:23:ee:db:b6:cd:4c:3e:38:d5:c5:a6:9d:58:
                    2e:f5:49:81:a2:72:4b:de:3e:ae:de:18:70:b1:cc:
                    c7:c5:9c:77:18:b7:57:38:34:5c:0a:63:f7:aa:fc:
                    7b:10:41:3f:3d:0e:ac:2f:e9:5c:a1:94:02:a7:a4:
                    bb:4c:74:2c:66:f0:fe:37:f5:4b:2a:25:24:26:eb:
                    11:b5:ea:30:1a:90:77:52:9c:54:1e:f8:bc:0b:a8:
                    4c:ff:3e:82:1c:f0:eb:a0:4f:f8:a6:14:73:e1:08:
                    24:63:17:86:e1:fb:71:92:ac:05:94:91:ef:67:00:
                    97:bf:d2:49:14:3e:2a:75:c7:2e:6b:e3:f5:8e:54:
                    50:58:d5:1a:11:9f:42:82:18:8c:dd:6b:bc:08:7e:
                    2c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:68:49:A3:A5:BB:B2:B9:CD:5C:4A:35:6B:83:3A:CD:32:94:61:16
            X509v3 Authority Key Identifier:
                keyid:F9:A7:3C:97:01:4A:0F:1C:02:C2:2B:BF:01:15:1B:9C:8F:06:FD:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/323830343a316535383a663030333a3a2f34382d3438203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:f003::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:3a:81:57:ae:d4:b9:7b:19:b2:78:b1:ed:79:53:75:12:ac:
         f8:1f:2f:9a:5c:03:88:59:8e:f8:16:b7:27:2e:28:78:d7:39:
         9a:1d:3a:e4:03:ae:9b:f1:27:ce:13:36:95:04:48:79:b4:89:
         a0:bc:de:21:44:52:f3:f5:ac:20:3d:54:06:22:06:cd:6b:9d:
         bd:8a:12:80:53:d1:4a:a3:71:37:a6:b0:65:db:57:2f:c2:17:
         3d:33:6e:68:19:d6:e1:8c:e0:05:c5:f8:8d:f3:5a:ae:bf:4d:
         9d:3e:8c:49:60:ce:90:49:b4:21:f0:fd:bd:6e:c3:ad:36:2c:
         58:f3:70:42:29:95:cb:ac:d1:a5:a5:0f:e7:cf:81:84:17:cc:
         7d:c9:68:19:be:3a:55:9e:f1:3d:7e:82:84:1f:d0:69:2e:ce:
         81:b6:1f:e0:f7:fa:4c:27:48:b0:26:3a:d7:3a:ea:8c:85:21:
         c3:65:1f:ef:65:2e:76:fd:e1:85:27:b5:3b:07:a9:bb:44:1b:
         c8:14:01:85:9e:53:b9:1d:f6:fd:05:56:60:db:e1:fa:d0:2b:
         9e:c8:78:bb:3b:ea:e5:89:c9:3c:78:78:21:8f:bd:b5:6c:6c:
         f3:fa:5a:6d:7d:ea:dd:00:54:7c:64:30:40:ce:49:d0:93:1d:
         3c:46:21:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----