Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/323830343a356366633a3a2f33322d3332203d3e20323638393434.roa
File:                     323830343a356366633a3a2f33322d3332203d3e20323638393434.roa (raw, json)
Hash identifier:          79T9XlVhVPf69YsQsDbQX7DMC1OcJjHOFfV8aVMZSFY=
Subject key identifier:   60:7B:6D:BB:EA:A1:27:63:34:B4:24:55:0C:75:16:27:DE:0E:32:CE
Certificate issuer:       /CN=D1DA329465F62BCE99280EB16F4260FB32AE9DED
Certificate serial:       6C5DF3235174600D71457CAC807B554A6FE30B71
Authority key identifier: D1:DA:32:94:65:F6:2B:CE:99:28:0E:B1:6F:42:60:FB:32:AE:9D:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1DA329465F62BCE99280EB16F4260FB32AE9DED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/323830343a356366633a3a2f33322d3332203d3e20323638393434.roa
Signing time:             Mon 22 May 2023 18:44:46 +0000
ROA not before:           Mon 22 May 2023 18:39:46 +0000
ROA not after:            Mon 20 May 2024 18:44:46 +0000
asID:                     268944
IP address blocks:        2804:5cfc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:5d:f3:23:51:74:60:0d:71:45:7c:ac:80:7b:55:4a:6f:e3:0b:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1DA329465F62BCE99280EB16F4260FB32AE9DED
        Validity
            Not Before: May 22 18:39:46 2023 GMT
            Not After : May 20 18:44:46 2024 GMT
        Subject: CN=607B6DBBEAA1276334B424550C751627DE0E32CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ca:7f:70:e6:c0:17:ee:f5:7a:33:1c:a6:ef:
                    f7:80:fa:79:a2:37:89:e6:bc:e6:49:b6:c1:87:28:
                    47:c7:37:c8:24:e4:3b:1c:d0:1f:30:06:ce:31:61:
                    f0:5d:79:23:5b:aa:b1:dd:e2:fc:aa:61:27:98:84:
                    a7:ce:f6:c1:22:42:04:29:79:bb:eb:e8:85:63:ee:
                    2c:44:89:0b:f5:74:36:13:55:61:5c:b1:9c:30:46:
                    d0:59:ee:cd:fb:dd:b2:20:d8:2e:d5:fd:64:3f:4d:
                    2f:1d:e9:ca:0a:fb:77:c6:ae:5d:fa:07:5e:da:dd:
                    7f:22:b7:a4:b1:17:9f:ea:ec:63:5e:fd:33:fb:bd:
                    e9:b6:bc:d0:eb:2a:03:fb:1d:0c:43:ec:77:b8:9b:
                    6a:cb:3d:ca:81:4c:8c:4a:c4:a3:71:13:3f:a2:f4:
                    79:97:bc:55:c1:36:96:4b:d5:ad:ac:78:77:37:5d:
                    57:c7:42:4a:bc:8a:a8:3b:9c:a3:b1:a6:aa:26:a9:
                    8d:94:7f:22:36:58:a8:13:ad:37:ef:2c:92:63:92:
                    67:f5:d9:b8:03:84:b4:00:56:86:30:e8:78:c2:b1:
                    ec:8e:40:7f:21:9e:cc:60:12:a2:b8:f2:4e:9f:f5:
                    98:b9:28:7d:4e:42:78:43:3f:fa:d6:bc:e2:58:63:
                    4d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:7B:6D:BB:EA:A1:27:63:34:B4:24:55:0C:75:16:27:DE:0E:32:CE
            X509v3 Authority Key Identifier:
                keyid:D1:DA:32:94:65:F6:2B:CE:99:28:0E:B1:6F:42:60:FB:32:AE:9D:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/D1DA329465F62BCE99280EB16F4260FB32AE9DED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1DA329465F62BCE99280EB16F4260FB32AE9DED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/323830343a356366633a3a2f33322d3332203d3e20323638393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5cfc::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:26:71:f1:46:3b:ef:20:24:19:70:1f:8e:fa:84:9e:cb:7b:
         52:8e:25:89:30:fc:e2:fa:e8:39:86:ea:27:89:c9:17:de:eb:
         28:6a:a9:60:58:6f:25:6b:d8:d7:8b:f6:6d:b0:18:55:76:92:
         41:6c:2c:19:f9:32:1b:57:43:b3:07:86:a8:fa:dc:79:7a:02:
         6c:7d:77:36:93:12:16:da:4b:43:6c:5e:33:b2:fa:fb:bb:f0:
         3d:0c:07:e7:e8:44:23:10:85:85:e2:76:4c:e9:38:69:da:a1:
         5d:ed:ab:b4:8e:a3:e8:16:34:06:ec:c7:22:69:9b:b0:91:0e:
         0e:ef:77:bb:b0:2c:09:8e:e7:7c:da:10:10:74:5e:fa:17:8d:
         04:98:73:22:58:da:9c:40:46:36:7f:d7:4f:40:21:9c:63:bc:
         3c:1b:ae:9b:a0:b0:92:13:5e:f8:69:f4:bf:f3:0b:7a:05:7c:
         1a:b0:07:1d:91:7c:bf:8e:e6:b0:0e:fd:b5:fe:bd:27:f2:b0:
         38:bd:4d:b0:ce:90:1d:9e:b5:2b:13:08:0f:99:31:0f:84:a4:
         f1:11:ce:10:97:0d:0e:b6:a0:c9:64:ef:08:35:4f:3c:2e:b7:
         34:6c:bf:a0:89:6f:06:db:41:22:cc:c1:fd:2f:b9:62:52:4a:
         e3:41:ae:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----