Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/323830343a373030343a3a2f33322d3332203d3e203631363032.roa
File:                     323830343a373030343a3a2f33322d3332203d3e203631363032.roa (raw, json)
Hash identifier:          Cq1vt49GTCB+m5ZOnenyfQTYIyidfd1lBTSOEP/WMpo=
Subject key identifier:   2B:15:9E:83:83:0E:70:D5:33:35:61:C6:FC:E4:26:A1:7B:CA:AD:E3
Certificate issuer:       /CN=1DA586C2B2DD0A7F0D4468C37B32464203B4C007
Certificate serial:       39A47BB50DCD3F53206718C908C707F226929F5F
Authority key identifier: 1D:A5:86:C2:B2:DD:0A:7F:0D:44:68:C3:7B:32:46:42:03:B4:C0:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DA586C2B2DD0A7F0D4468C37B32464203B4C007.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/323830343a373030343a3a2f33322d3332203d3e203631363032.roa
Signing time:             Sun 24 Sep 2023 21:58:55 +0000
ROA not before:           Sun 24 Sep 2023 21:53:55 +0000
ROA not after:            Sun 22 Sep 2024 21:58:55 +0000
asID:                     61602
IP address blocks:        2804:7004::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:a4:7b:b5:0d:cd:3f:53:20:67:18:c9:08:c7:07:f2:26:92:9f:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DA586C2B2DD0A7F0D4468C37B32464203B4C007
        Validity
            Not Before: Sep 24 21:53:55 2023 GMT
            Not After : Sep 22 21:58:55 2024 GMT
        Subject: CN=2B159E83830E70D5333561C6FCE426A17BCAADE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f6:90:7d:13:b2:9e:85:99:0f:db:c0:af:a0:
                    fe:5e:e3:77:f6:8a:8c:85:bf:2c:60:7b:aa:9b:71:
                    4a:38:43:04:91:1f:61:24:0c:60:88:87:0b:f5:7d:
                    5e:3c:e8:ab:c0:0e:91:43:7a:48:68:a6:81:bd:02:
                    4e:ea:f9:0b:1e:5e:4f:6e:96:81:28:6c:7a:aa:f0:
                    9c:11:a2:d3:ca:90:e0:46:d8:c2:b2:85:ea:74:66:
                    db:45:f5:7e:db:a2:e4:a4:a6:ac:b6:9c:97:af:b3:
                    a3:6c:6c:47:82:fd:2c:89:2b:5d:a2:ab:c1:52:32:
                    08:84:8e:ff:db:8a:b4:d7:a2:f0:db:e7:09:ec:68:
                    2c:e7:1d:84:76:8f:91:03:55:3e:56:ee:75:ab:5d:
                    4a:01:56:f1:f1:bd:d0:b6:5a:4a:ba:86:7e:49:57:
                    b3:18:b5:c3:3d:f9:1f:b6:8a:f4:7f:16:b6:46:f9:
                    28:d4:db:9c:da:14:e5:f9:2a:a4:87:94:1c:16:4f:
                    e3:87:2d:a6:1a:07:52:eb:8c:4f:5e:04:1d:81:b4:
                    49:02:f8:c7:16:d1:87:48:a9:41:31:11:df:1b:be:
                    55:e3:8e:f9:95:1c:e6:b7:e9:b7:96:b6:53:a8:29:
                    48:4a:21:e1:b0:fc:09:6c:c4:72:ea:24:6d:8b:b2:
                    73:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:15:9E:83:83:0E:70:D5:33:35:61:C6:FC:E4:26:A1:7B:CA:AD:E3
            X509v3 Authority Key Identifier:
                keyid:1D:A5:86:C2:B2:DD:0A:7F:0D:44:68:C3:7B:32:46:42:03:B4:C0:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/1DA586C2B2DD0A7F0D4468C37B32464203B4C007.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DA586C2B2DD0A7F0D4468C37B32464203B4C007.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/323830343a373030343a3a2f33322d3332203d3e203631363032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7004::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:1b:cb:33:c3:52:b4:b8:e6:67:9b:87:8d:47:01:88:ff:cd:
         5d:91:c0:7d:56:37:cc:b3:e0:3d:60:40:95:b0:55:0e:d9:29:
         c1:38:ff:fc:80:69:ba:b5:c8:a9:ac:a6:e5:f9:d4:2b:87:98:
         cf:75:90:42:44:0d:df:3b:04:9a:a5:81:fe:e3:39:3a:b9:3c:
         99:cf:8a:e0:bc:55:5f:5d:1f:53:55:6b:1e:7d:76:bd:d0:88:
         36:07:b6:2f:58:09:dc:2b:5f:10:9f:29:da:3c:87:86:69:a3:
         a6:80:b2:dc:1a:3e:4f:80:36:40:b1:48:f1:d6:07:2d:2d:9b:
         e7:53:03:35:13:6b:9c:63:bd:29:ae:d4:18:4b:72:6a:70:da:
         8e:50:0f:9f:96:26:91:77:bd:e3:8c:c9:44:90:35:cc:a1:c1:
         2e:e9:0f:85:59:60:10:97:67:7d:03:7c:65:71:1f:73:66:28:
         b7:41:84:fc:f4:75:f3:f4:ee:ed:13:0d:22:85:68:27:b7:e8:
         4f:50:df:99:62:fa:db:ed:e9:05:c0:6f:b6:91:51:ec:f7:b8:
         16:6b:84:38:f8:4e:c4:ab:89:34:82:5f:76:4d:30:6d:c0:68:
         d8:2f:51:6c:a0:04:ea:38:d2:bd:d7:cd:05:b8:ba:94:bf:1e:
         c0:f7:02:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----