Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/0/323830343a323737383a3a2f33322d3438203d3e20323633393033.roa
File:                     323830343a323737383a3a2f33322d3438203d3e20323633393033.roa (raw, json)
Hash identifier:          tVmJpUtAuvlfO+0EBewM+K9b4l9ihVi3sxTpvhgYw6Y=
Subject key identifier:   1F:D8:9E:5D:DC:F5:44:38:C2:A4:A0:9C:DA:B5:4C:00:D0:45:DF:84
Certificate issuer:       /CN=329861E01AE7B51B7D7965F1537F72FFCB2506D3
Certificate serial:       363D4ECEEF8F77623F4FC73E375DD4C85BA09561
Authority key identifier: 32:98:61:E0:1A:E7:B5:1B:7D:79:65:F1:53:7F:72:FF:CB:25:06:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/329861E01AE7B51B7D7965F1537F72FFCB2506D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/0/323830343a323737383a3a2f33322d3438203d3e20323633393033.roa
Signing time:             Fri 24 Nov 2023 18:00:18 +0000
ROA not before:           Fri 24 Nov 2023 17:55:18 +0000
ROA not after:            Fri 22 Nov 2024 18:00:18 +0000
asID:                     263903
IP address blocks:        2804:2778::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:3d:4e:ce:ef:8f:77:62:3f:4f:c7:3e:37:5d:d4:c8:5b:a0:95:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=329861E01AE7B51B7D7965F1537F72FFCB2506D3
        Validity
            Not Before: Nov 24 17:55:18 2023 GMT
            Not After : Nov 22 18:00:18 2024 GMT
        Subject: CN=1FD89E5DDCF54438C2A4A09CDAB54C00D045DF84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:87:8d:22:e4:03:54:2b:01:dc:46:26:e2:8c:
                    9c:02:7c:0d:1c:ed:9e:9a:fb:bb:2b:f5:7e:ab:a7:
                    61:d5:fc:5a:03:f0:a1:4b:fa:b6:10:54:9b:58:81:
                    02:7c:ff:fc:a0:aa:e1:57:a2:72:65:bb:2d:b0:7f:
                    7e:39:5c:b0:e9:5c:e8:dc:9d:de:bc:d4:d4:af:be:
                    29:29:6a:de:c1:e2:3e:4b:b7:cd:ae:b8:9a:cd:03:
                    49:f6:10:bc:e9:29:f5:43:38:21:d1:eb:d7:b4:9e:
                    2e:b7:97:2e:2c:9e:48:b0:09:7a:01:b6:30:98:cb:
                    6b:d7:78:af:0d:1f:6e:34:eb:05:7b:96:0d:33:40:
                    d1:4d:25:19:c8:22:a5:88:32:95:d7:0b:28:80:e1:
                    a2:4b:95:d3:ca:40:ea:be:0d:c1:af:3b:85:7b:1f:
                    50:5a:47:29:57:69:be:7e:37:5e:ce:c3:ab:8c:f9:
                    b0:f1:d0:c0:dd:8a:2f:ca:d6:ae:d8:17:f3:bb:08:
                    36:8d:1f:7a:4a:31:e2:c3:45:9d:48:a8:06:f0:8d:
                    c3:8f:14:2f:74:16:8d:30:de:0f:15:24:e8:e1:1f:
                    7a:e0:2c:26:21:6f:45:6a:34:47:c0:55:ef:fb:bb:
                    a0:6b:1d:61:e8:82:30:e3:40:27:8f:5e:3e:cf:04:
                    04:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D8:9E:5D:DC:F5:44:38:C2:A4:A0:9C:DA:B5:4C:00:D0:45:DF:84
            X509v3 Authority Key Identifier:
                keyid:32:98:61:E0:1A:E7:B5:1B:7D:79:65:F1:53:7F:72:FF:CB:25:06:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/0/329861E01AE7B51B7D7965F1537F72FFCB2506D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/329861E01AE7B51B7D7965F1537F72FFCB2506D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/0/323830343a323737383a3a2f33322d3438203d3e20323633393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2778::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:15:75:0f:92:1e:8a:6e:e5:14:84:c5:8b:f7:31:d9:b2:42:
         dc:62:85:f7:88:05:30:a7:dd:cd:a8:aa:e9:13:f7:25:63:54:
         9a:eb:27:7b:12:b2:f3:47:9e:c8:64:50:3c:1c:a6:41:a3:2f:
         e5:ec:1f:c9:54:33:b2:8e:54:1e:5f:69:9a:af:d5:6e:7e:67:
         a2:22:9e:fd:40:75:23:34:80:12:d4:87:4b:d6:b5:9b:1d:5d:
         2f:97:e1:f5:2d:2a:d0:47:e8:f4:53:e3:99:1c:86:74:63:73:
         f1:66:e8:db:4e:c0:73:63:2c:dd:5c:80:d3:d0:64:a0:3c:25:
         5d:73:92:01:14:58:21:59:86:0a:87:96:7e:c5:da:3e:c0:a2:
         85:59:57:55:d7:05:f7:44:ab:84:9a:b7:ee:f9:a5:ad:77:ab:
         22:ed:f6:0f:ee:01:ad:2d:f5:d8:41:a3:1b:17:54:2a:36:a3:
         7e:8c:e3:7a:9e:92:b3:c6:7f:b2:85:c8:05:df:d4:39:45:53:
         d1:1e:d3:cd:08:80:40:88:37:12:11:34:3d:c7:94:0e:87:ad:
         91:7c:f9:e2:c6:f0:99:98:f2:0b:81:5b:d7:72:a3:1c:7c:b7:
         3e:15:cb:be:4d:79:a2:7e:bf:3e:ae:65:2f:44:69:11:60:e5:
         08:29:5b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----