Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/0/323830343a336562303a3a2f33322d3438203d3e20323636363135.roa
File:                     323830343a336562303a3a2f33322d3438203d3e20323636363135.roa (raw, json)
Hash identifier:          nK6ysinnacBGvYQwLmRa16Rp2M6EPgWZlNRH8R3e9P0=
Subject key identifier:   08:9F:FE:49:68:C8:1F:F5:5A:6F:B9:28:8C:42:30:5D:B8:CA:0E:D3
Certificate issuer:       /CN=6BD4739E1EF64752F6C47E6066F4EE428D519B9D
Certificate serial:       70D93CC8C7F372FA8FBA856BCCA6799507829948
Authority key identifier: 6B:D4:73:9E:1E:F6:47:52:F6:C4:7E:60:66:F4:EE:42:8D:51:9B:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BD4739E1EF64752F6C47E6066F4EE428D519B9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/0/323830343a336562303a3a2f33322d3438203d3e20323636363135.roa
Signing time:             Thu 15 Feb 2024 23:45:52 +0000
ROA not before:           Thu 15 Feb 2024 23:40:52 +0000
ROA not after:            Thu 13 Feb 2025 23:45:52 +0000
asID:                     266615
IP address blocks:        2804:3eb0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:d9:3c:c8:c7:f3:72:fa:8f:ba:85:6b:cc:a6:79:95:07:82:99:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BD4739E1EF64752F6C47E6066F4EE428D519B9D
        Validity
            Not Before: Feb 15 23:40:52 2024 GMT
            Not After : Feb 13 23:45:52 2025 GMT
        Subject: CN=089FFE4968C81FF55A6FB9288C42305DB8CA0ED3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:97:20:d1:ef:36:d5:e1:58:bf:02:2a:29:b6:
                    38:fb:6c:6e:3a:d1:d3:ef:2e:f0:d6:d2:a1:6d:21:
                    e6:3e:25:55:14:49:5e:3d:0f:cd:bb:51:c9:d5:64:
                    63:ac:07:86:7b:00:21:53:50:41:c3:cd:e4:bd:7b:
                    46:cf:ee:bc:b6:7f:80:d5:d9:e7:d9:6e:84:4a:36:
                    48:d6:97:8b:4d:eb:1e:f4:14:31:0a:fa:b6:39:ba:
                    d6:bb:ec:c1:59:48:61:ee:96:cb:69:22:4e:d6:8c:
                    0a:7b:9f:53:1e:32:c1:13:da:83:a0:83:fa:9d:cb:
                    f2:96:5a:1e:8a:fa:9e:f6:a0:d1:d3:a5:39:f8:f7:
                    92:5f:40:4d:83:0d:62:51:e2:be:58:ca:95:cf:ac:
                    00:58:61:76:73:83:59:99:37:c4:60:c0:d9:cf:fc:
                    5f:e1:e3:28:2a:9d:02:1e:24:2b:55:41:7d:d3:20:
                    fc:63:e0:68:8c:6b:79:af:29:f4:21:91:82:74:0f:
                    bb:8f:a1:4c:37:be:54:4c:a6:c3:a3:94:1c:e8:c2:
                    24:c8:4c:79:09:f8:38:e9:57:3c:5c:41:39:f7:8a:
                    33:0c:bd:a8:15:a2:dd:15:9e:c9:94:03:4d:ee:b5:
                    7f:21:bf:d3:4f:6d:30:4f:5b:e5:ae:e2:bd:57:2c:
                    4e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:9F:FE:49:68:C8:1F:F5:5A:6F:B9:28:8C:42:30:5D:B8:CA:0E:D3
            X509v3 Authority Key Identifier:
                keyid:6B:D4:73:9E:1E:F6:47:52:F6:C4:7E:60:66:F4:EE:42:8D:51:9B:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/0/6BD4739E1EF64752F6C47E6066F4EE428D519B9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BD4739E1EF64752F6C47E6066F4EE428D519B9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/0/323830343a336562303a3a2f33322d3438203d3e20323636363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3eb0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:16:94:5c:7b:1e:b4:fb:2a:f9:96:78:82:de:08:f2:e5:f6:
         53:58:1b:bb:fb:7b:4f:c1:b1:9f:25:40:a6:59:87:5b:a9:68:
         8b:d2:73:7f:be:be:4b:e7:54:2d:b7:4b:85:9b:6e:3b:ac:6c:
         bb:a2:51:0a:1b:05:d0:75:11:e8:0c:a9:ac:f0:2f:83:47:8a:
         05:46:8b:fd:20:ba:06:a7:b2:bc:c2:08:c6:75:65:25:ae:35:
         08:6c:66:f5:5b:a3:cd:a7:01:ab:ef:9e:bf:71:64:01:72:24:
         ae:0e:a8:80:0f:02:f8:95:0b:56:36:64:d2:1b:11:5a:64:99:
         d1:7a:10:bb:58:d2:07:24:ca:fd:39:6e:41:dd:c0:36:71:c7:
         56:7c:b3:9a:58:e9:da:ca:90:12:37:9d:eb:13:c4:e8:7b:93:
         aa:7b:f2:5f:1e:c2:db:9a:fe:91:31:75:7e:45:d1:0c:50:83:
         c8:a6:70:bf:6b:74:5f:c0:e3:b2:21:5a:5b:75:dc:c4:ce:c6:
         84:62:a7:03:58:7a:f2:f7:05:45:fb:15:df:1c:f9:fd:33:69:
         6b:07:37:04:d5:1f:48:4c:8b:11:c4:9f:8a:61:2e:57:ef:8f:
         d9:12:b2:47:a6:6e:97:e7:d2:2c:69:59:49:e7:64:0e:f0:52:
         e4:db:a6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----