Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/0/323830343a386563383a3a2f33322d3438203d3e203631363136.roa
File:                     323830343a386563383a3a2f33322d3438203d3e203631363136.roa (raw, json)
Hash identifier:          4lQrPKTAnuwhYlZv4AhR+BhTQ7ijt1H6O6IZieFM+2Q=
Subject key identifier:   F5:D2:3B:97:E9:BA:CC:C9:A2:C3:08:BC:F6:D9:0F:58:72:F2:33:5D
Certificate issuer:       /CN=1A6E686960A7D47F1286E3D15A8DA89E120888BD
Certificate serial:       7F9E84EA1C2E236CDEB6137323265076E9DBFF03
Authority key identifier: 1A:6E:68:69:60:A7:D4:7F:12:86:E3:D1:5A:8D:A8:9E:12:08:88:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A6E686960A7D47F1286E3D15A8DA89E120888BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/0/323830343a386563383a3a2f33322d3438203d3e203631363136.roa
Signing time:             Sat 02 Mar 2024 02:20:51 +0000
ROA not before:           Sat 02 Mar 2024 02:15:51 +0000
ROA not after:            Sat 01 Mar 2025 02:20:51 +0000
asID:                     61616
IP address blocks:        2804:8ec8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:9e:84:ea:1c:2e:23:6c:de:b6:13:73:23:26:50:76:e9:db:ff:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A6E686960A7D47F1286E3D15A8DA89E120888BD
        Validity
            Not Before: Mar  2 02:15:51 2024 GMT
            Not After : Mar  1 02:20:51 2025 GMT
        Subject: CN=F5D23B97E9BACCC9A2C308BCF6D90F5872F2335D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:51:a8:b8:54:86:5f:ce:5f:4c:1c:0a:d0:42:
                    93:36:f9:fd:e2:84:34:8b:91:2f:ed:dd:67:f5:7c:
                    be:d4:74:fe:35:ed:8f:84:ea:9f:9d:66:eb:85:1d:
                    20:8a:15:4c:f2:4d:0c:39:95:00:d6:d8:46:ee:46:
                    e8:5c:f6:65:93:48:ac:e2:38:1c:b0:10:34:f0:b7:
                    af:0d:3b:81:95:72:ec:67:b5:ef:29:45:60:8c:ab:
                    03:56:84:a3:09:6f:ea:e5:e6:ed:ff:df:1b:f1:63:
                    08:14:86:7d:3f:2a:1f:0b:c6:04:1d:d2:bb:7f:40:
                    d1:34:34:9d:33:4f:93:7e:dc:88:69:0d:08:44:94:
                    f0:0c:ab:ae:9b:9c:44:7c:52:cb:87:d4:d1:3e:b2:
                    2c:64:fe:20:4f:85:e1:7f:59:49:70:f5:66:fe:74:
                    40:1e:4f:70:ee:17:1b:a0:56:b6:2d:9e:64:97:d2:
                    96:8e:9a:49:71:a4:67:15:80:ac:8e:9b:4a:97:e0:
                    48:fd:77:cc:37:bf:09:1c:e2:e9:a3:83:5c:20:36:
                    30:99:c2:0d:05:3a:f5:07:f6:65:a0:e4:97:98:c7:
                    ea:8b:5a:76:c9:b3:fe:12:2f:03:a8:e4:61:bd:66:
                    c8:fc:f0:f8:c9:39:6c:f3:b1:56:98:9f:34:92:77:
                    dc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:D2:3B:97:E9:BA:CC:C9:A2:C3:08:BC:F6:D9:0F:58:72:F2:33:5D
            X509v3 Authority Key Identifier:
                keyid:1A:6E:68:69:60:A7:D4:7F:12:86:E3:D1:5A:8D:A8:9E:12:08:88:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/0/1A6E686960A7D47F1286E3D15A8DA89E120888BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A6E686960A7D47F1286E3D15A8DA89E120888BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/0/323830343a386563383a3a2f33322d3438203d3e203631363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ec8::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:44:9c:c8:18:60:f2:38:45:7c:62:27:68:19:b8:14:bf:80:
         59:d7:bb:46:72:6e:59:e1:37:16:a8:f4:bd:d2:33:8b:22:ef:
         41:f2:70:9c:dc:a4:54:0b:a5:fe:fe:65:98:d8:0b:b9:bb:f1:
         90:10:f1:40:09:a9:f3:dc:34:ab:e9:ac:07:98:b6:99:41:21:
         11:5c:97:ed:be:27:a1:6b:67:47:cb:3d:c7:d6:a9:30:7c:54:
         96:af:29:f5:6a:f6:33:d4:a6:c5:95:d1:e6:f9:0b:e8:d1:9c:
         c9:5d:9a:26:94:c3:56:17:d0:b0:c6:0d:63:02:34:8f:ed:1b:
         c5:d4:9d:5b:73:ec:f8:1a:55:44:46:22:0e:3a:52:a1:96:c0:
         df:b5:b7:1d:93:11:dc:d8:60:0a:44:e6:d7:ad:08:8c:35:76:
         ca:9e:4e:5a:68:f8:fb:34:a8:ae:46:5f:04:2b:f3:25:f5:83:
         fc:d4:6b:fa:e0:b3:7e:1b:f9:fc:2d:bd:bb:91:1e:d5:75:32:
         51:05:cd:22:f7:c6:9a:85:54:09:20:36:0e:25:a5:e4:3f:60:
         10:3a:fa:94:33:69:40:51:bb:b5:27:bf:2f:e3:90:84:8a:27:
         73:60:2f:74:a1:49:bd:f2:e1:a1:c5:77:91:36:fd:18:cd:fc:
         6a:81:69:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----