Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/1/323830343a373131303a3a2f33322d3332203d3e20323730373634.roa
File:                     323830343a373131303a3a2f33322d3332203d3e20323730373634.roa (raw, json)
Hash identifier:          LM5RC0rcgXUM8fp/MdU8CvEfiN+w7NQuskMTmmFObQk=
Subject key identifier:   5D:07:13:F1:F1:5C:28:C2:2C:82:C8:4F:D2:BC:81:C0:ED:78:82:54
Certificate issuer:       /CN=6F24DF4A84CC21337AB0CA314C265DC9D5DDA9A0
Certificate serial:       43E1CE826EB6BFD52A205562A42B4F0427FF9107
Authority key identifier: 6F:24:DF:4A:84:CC:21:33:7A:B0:CA:31:4C:26:5D:C9:D5:DD:A9:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F24DF4A84CC21337AB0CA314C265DC9D5DDA9A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/1/323830343a373131303a3a2f33322d3332203d3e20323730373634.roa
Signing time:             Thu 04 Apr 2024 18:05:30 +0000
ROA not before:           Thu 04 Apr 2024 18:00:30 +0000
ROA not after:            Thu 03 Apr 2025 18:05:30 +0000
asID:                     270764
IP address blocks:        2804:7110::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:e1:ce:82:6e:b6:bf:d5:2a:20:55:62:a4:2b:4f:04:27:ff:91:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F24DF4A84CC21337AB0CA314C265DC9D5DDA9A0
        Validity
            Not Before: Apr  4 18:00:30 2024 GMT
            Not After : Apr  3 18:05:30 2025 GMT
        Subject: CN=5D0713F1F15C28C22C82C84FD2BC81C0ED788254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:97:33:8f:8f:72:e4:19:cb:8b:e2:b8:27:26:
                    8a:68:94:81:23:c9:c5:d4:79:db:f9:bf:80:99:b3:
                    57:de:1a:e3:58:f4:89:92:5c:1d:ba:e2:61:a6:04:
                    3d:17:3f:0d:c2:cc:97:94:38:9f:fc:3e:b1:ca:17:
                    5a:0d:1b:5b:d5:c4:5d:69:72:5f:49:95:a7:b7:3a:
                    38:87:6b:fd:f9:13:cc:25:05:a3:26:13:90:19:7a:
                    7f:a5:7b:25:d7:eb:03:84:ed:7c:7b:34:b5:e7:b7:
                    dd:8d:61:42:1c:e2:9f:93:9c:f2:49:70:8a:d8:30:
                    66:b0:15:9f:27:fa:10:9b:49:fa:13:85:a6:49:1b:
                    61:03:cb:6b:38:9d:72:1e:53:ba:35:fd:8c:9d:92:
                    3b:2a:c8:f0:44:4b:52:d3:31:f5:89:85:7f:1f:a5:
                    80:5d:9f:e2:14:aa:9c:b2:ee:f0:37:94:1a:1b:de:
                    0a:de:e6:f3:96:f8:c4:c8:0c:13:67:6b:17:23:41:
                    56:f6:31:39:49:48:5a:d7:52:c9:31:a0:42:48:18:
                    73:16:6b:5a:75:3b:aa:1a:9d:9e:ca:98:ec:74:d4:
                    a9:be:81:6d:ef:13:19:41:f7:2e:dc:b7:f0:d8:78:
                    ff:d0:cc:9c:1c:04:88:10:48:e6:b9:8c:97:0a:a6:
                    fe:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:07:13:F1:F1:5C:28:C2:2C:82:C8:4F:D2:BC:81:C0:ED:78:82:54
            X509v3 Authority Key Identifier:
                keyid:6F:24:DF:4A:84:CC:21:33:7A:B0:CA:31:4C:26:5D:C9:D5:DD:A9:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/1/6F24DF4A84CC21337AB0CA314C265DC9D5DDA9A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F24DF4A84CC21337AB0CA314C265DC9D5DDA9A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/1/323830343a373131303a3a2f33322d3332203d3e20323730373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7110::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:ca:79:c9:2f:46:b4:b1:c6:88:e0:fe:ae:0f:14:76:ab:be:
         dd:f2:3b:e7:a1:f8:a9:7e:03:58:35:a3:ae:aa:b2:36:34:ba:
         ba:25:b5:88:26:17:d9:22:32:fa:d8:a6:27:ea:dc:3d:7b:e8:
         32:12:51:f1:5d:8f:53:02:9c:f4:bc:7c:53:f7:cc:84:8c:c3:
         89:43:20:f5:46:23:e3:f9:81:ad:4b:cc:c1:95:b3:36:7a:92:
         f7:93:ce:1b:0e:97:e1:40:33:01:a7:a6:c2:db:ce:23:ad:dc:
         84:53:99:72:f6:36:30:21:aa:1d:25:5b:d9:02:92:0c:0b:6d:
         1a:70:e5:5c:61:f6:8c:cf:49:d5:3a:6d:4f:1d:33:9b:81:bc:
         a6:69:b7:59:e1:14:e7:b3:04:25:f5:6f:03:44:3c:a3:3c:2f:
         61:d2:32:2d:73:30:61:6e:73:16:ad:79:1c:36:4a:7a:79:1a:
         47:32:96:5c:5a:ee:41:b7:4f:00:3b:41:9f:40:6f:99:e6:6e:
         b6:21:fd:61:c4:ee:37:51:a9:92:11:9c:77:a6:1f:59:e9:00:
         bf:32:b9:09:2e:9d:d8:54:15:af:a1:d3:a6:bd:26:4d:64:4e:
         0f:c1:ff:36:e5:ad:be:ab:8e:89:62:6e:77:41:57:28:58:12:
         56:a3:87:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----