Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8KS6JPTQchwPwmMcJpzVqKVG3AZ1mgWgnUbPB9XyaXFL/0/323830343a363466633a3a2f33322d3332203d3e20323639343631.roa
File:                     323830343a363466633a3a2f33322d3332203d3e20323639343631.roa (raw, json)
Hash identifier:          H5uxRDWD0/dSaZzSHTPy6IC5zDGhml+mw4je92ckJpE=
Subject key identifier:   F2:5F:DC:72:CB:CF:11:BD:13:CA:FA:4C:B3:9B:3E:1B:EB:91:E6:57
Certificate issuer:       /CN=2F01BE16D3A51E20A05820B976FF259FD4D960FE
Certificate serial:       02DA3302B5B39483A92E5E353F0DA343B00956FF
Authority key identifier: 2F:01:BE:16:D3:A5:1E:20:A0:58:20:B9:76:FF:25:9F:D4:D9:60:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F01BE16D3A51E20A05820B976FF259FD4D960FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8KS6JPTQchwPwmMcJpzVqKVG3AZ1mgWgnUbPB9XyaXFL/0/323830343a363466633a3a2f33322d3332203d3e20323639343631.roa
Signing time:             Wed 16 Aug 2023 16:59:21 +0000
ROA not before:           Wed 16 Aug 2023 16:54:21 +0000
ROA not after:            Wed 14 Aug 2024 16:59:21 +0000
asID:                     269461
IP address blocks:        2804:64fc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:da:33:02:b5:b3:94:83:a9:2e:5e:35:3f:0d:a3:43:b0:09:56:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F01BE16D3A51E20A05820B976FF259FD4D960FE
        Validity
            Not Before: Aug 16 16:54:21 2023 GMT
            Not After : Aug 14 16:59:21 2024 GMT
        Subject: CN=F25FDC72CBCF11BD13CAFA4CB39B3E1BEB91E657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bf:df:bc:67:82:07:1f:5e:fd:58:40:92:eb:
                    64:ac:30:6d:04:ad:27:3b:51:3c:5f:7c:66:f6:ba:
                    2e:74:3b:2b:50:6d:6b:63:da:e2:bc:8f:ee:33:c8:
                    d3:ea:52:af:7b:da:4b:dd:ca:19:74:12:d1:92:e7:
                    6e:51:ae:3e:3f:c2:71:0d:54:56:02:30:3d:86:4d:
                    f3:78:29:d7:2c:b7:e2:2d:69:26:d5:94:31:81:fe:
                    76:49:e6:77:ba:55:e2:6b:ad:a7:53:0c:dc:0c:4f:
                    74:05:5d:40:e3:2f:c0:4f:c4:73:88:98:9c:1f:1b:
                    85:38:78:b1:a8:9f:93:d9:e9:0b:d0:d5:f6:b4:9f:
                    c0:96:1e:35:ef:1e:01:40:a8:37:e0:66:fc:16:d1:
                    9b:28:f3:7f:57:ae:2f:67:9a:c9:0b:9c:e8:1e:67:
                    1c:cb:ca:a7:9c:a5:23:49:fe:c0:84:e0:84:80:6b:
                    0f:ff:0b:99:ad:19:ca:32:67:76:9f:17:f8:e2:87:
                    e4:bd:bb:3d:84:13:4a:20:04:3f:81:02:f0:40:13:
                    5d:04:c1:36:c6:41:1a:6c:74:fe:be:f2:e0:43:18:
                    9b:0f:2f:7d:24:93:72:24:7f:44:69:63:a8:b8:b8:
                    d0:02:5c:b9:a5:44:55:b7:85:5a:05:38:06:d1:ed:
                    73:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:5F:DC:72:CB:CF:11:BD:13:CA:FA:4C:B3:9B:3E:1B:EB:91:E6:57
            X509v3 Authority Key Identifier:
                keyid:2F:01:BE:16:D3:A5:1E:20:A0:58:20:B9:76:FF:25:9F:D4:D9:60:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8KS6JPTQchwPwmMcJpzVqKVG3AZ1mgWgnUbPB9XyaXFL/0/2F01BE16D3A51E20A05820B976FF259FD4D960FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F01BE16D3A51E20A05820B976FF259FD4D960FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8KS6JPTQchwPwmMcJpzVqKVG3AZ1mgWgnUbPB9XyaXFL/0/323830343a363466633a3a2f33322d3332203d3e20323639343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:64fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:1b:7c:f8:3a:22:e7:85:83:66:9d:4d:f8:bc:61:1c:5a:ef:
         1c:fc:9f:2c:cb:e8:f4:9c:e0:a3:17:df:78:f2:1e:f5:7e:92:
         b2:74:af:03:c9:62:73:3f:c7:84:fc:f1:b3:b1:bf:e9:11:10:
         39:40:1f:77:b1:86:3c:2e:4a:e1:23:24:65:b7:dd:dc:ea:8f:
         07:3d:9b:d2:5d:b5:22:e4:72:6b:e5:f6:57:ba:69:a5:91:32:
         5c:ec:e8:14:94:f8:be:ee:26:cf:86:8e:33:7b:44:d6:69:8b:
         bf:f4:7e:5b:48:42:58:41:ad:42:ba:bb:85:3d:62:b4:9b:f2:
         5b:0d:01:e8:fe:04:5c:07:a7:59:11:0f:ba:59:c8:f5:ae:3b:
         e2:74:11:8f:6b:93:bc:ff:11:ac:30:be:14:62:a9:17:58:db:
         7b:cc:26:c7:5c:46:68:2b:70:74:79:05:7b:d8:2c:98:42:97:
         58:ec:3c:04:0a:86:3b:54:69:44:be:33:86:e8:a7:07:ec:bb:
         0f:04:74:b9:0c:c0:35:aa:82:9d:dd:aa:1b:30:1f:2b:00:55:
         e7:82:be:51:e5:d6:69:0c:be:39:c2:fa:2f:bc:71:e5:aa:f9:
         30:25:e0:72:89:e3:0f:7f:60:45:33:80:9c:5e:2d:98:3f:6d:
         2d:66:82:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----