Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/0/323830343a366635343a3a2f33322d3332203d3e20323730363533.roa
File:                     323830343a366635343a3a2f33322d3332203d3e20323730363533.roa (raw, json)
Hash identifier:          DlcMzcM46JtXpRM0t87yb0AyJSvfQQ3zrUTuhzt/vRw=
Subject key identifier:   6E:98:11:60:1C:4B:25:50:0D:37:43:27:14:7F:99:AD:A5:54:43:4B
Certificate issuer:       /CN=04BA3EC01D42C9A7C4994EA65409D6A8711A0FD7
Certificate serial:       4D9391FFB4CA71B3E8A4EB78DF8F07D2502E831D
Authority key identifier: 04:BA:3E:C0:1D:42:C9:A7:C4:99:4E:A6:54:09:D6:A8:71:1A:0F:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04BA3EC01D42C9A7C4994EA65409D6A8711A0FD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/0/323830343a366635343a3a2f33322d3332203d3e20323730363533.roa
Signing time:             Wed 28 Jun 2023 15:00:00 +0000
ROA not before:           Wed 28 Jun 2023 14:55:00 +0000
ROA not after:            Wed 26 Jun 2024 15:00:00 +0000
asID:                     270653
IP address blocks:        2804:6f54::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:93:91:ff:b4:ca:71:b3:e8:a4:eb:78:df:8f:07:d2:50:2e:83:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04BA3EC01D42C9A7C4994EA65409D6A8711A0FD7
        Validity
            Not Before: Jun 28 14:55:00 2023 GMT
            Not After : Jun 26 15:00:00 2024 GMT
        Subject: CN=6E9811601C4B25500D374327147F99ADA554434B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3b:ff:0b:d8:f2:81:70:c5:4c:7c:47:4a:73:
                    53:13:ea:ef:b7:af:e9:6d:e5:8f:b4:a0:dd:df:2b:
                    7a:26:f7:bb:f7:95:04:b5:6b:1c:55:8e:2d:aa:16:
                    0e:13:93:f4:37:9a:73:0f:0d:9f:7b:eb:fb:a6:91:
                    4b:f0:22:9e:d3:b6:ae:83:bc:a8:f5:af:5c:72:83:
                    ec:2b:d7:9e:57:5b:71:fe:47:21:a7:c8:41:4d:d8:
                    58:4d:22:c6:34:cd:69:a9:c1:7c:8c:2a:c5:1a:f2:
                    07:67:67:8a:81:3e:c9:64:12:ab:a1:f8:e1:35:5f:
                    bf:62:a6:74:91:be:6c:21:bf:e5:fd:92:cc:b7:12:
                    e2:2b:1b:cc:a0:f5:d5:81:22:7d:9b:9f:7a:53:19:
                    9a:06:7e:62:eb:3f:d7:13:e4:a9:6d:68:27:55:f9:
                    fe:3c:ea:4e:17:c1:f1:82:65:45:54:b0:1d:84:02:
                    ab:2e:f1:42:4a:37:e0:22:f0:ac:9a:6e:97:40:b3:
                    36:c5:d5:32:3a:44:2d:75:53:78:b8:60:2e:c2:8d:
                    78:92:4b:ec:b3:b5:51:aa:f1:6f:86:4f:a5:0f:a2:
                    42:a3:d1:1f:b0:cd:0a:02:1d:64:06:b1:a2:ad:58:
                    6a:59:44:b9:63:62:c2:51:19:a2:b6:c7:7d:72:64:
                    97:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:98:11:60:1C:4B:25:50:0D:37:43:27:14:7F:99:AD:A5:54:43:4B
            X509v3 Authority Key Identifier:
                keyid:04:BA:3E:C0:1D:42:C9:A7:C4:99:4E:A6:54:09:D6:A8:71:1A:0F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/0/04BA3EC01D42C9A7C4994EA65409D6A8711A0FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04BA3EC01D42C9A7C4994EA65409D6A8711A0FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/0/323830343a366635343a3a2f33322d3332203d3e20323730363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f54::/32

    Signature Algorithm: sha256WithRSAEncryption
         dc:ac:ca:79:3d:98:31:2e:8e:0c:5c:7a:ba:6c:16:62:1d:f2:
         c4:ba:b0:4f:19:98:b4:1e:33:ca:eb:17:26:da:4f:77:b0:e9:
         e3:7f:43:ce:75:6f:81:cc:28:52:4f:0a:21:1f:e6:17:7e:5e:
         91:83:d8:04:75:9c:de:61:2e:cc:b7:26:fe:8a:44:6b:46:8f:
         02:3a:f7:b1:e2:de:d3:3e:a0:a4:d0:93:e3:f0:ab:b2:7b:fd:
         5c:bd:e7:bf:e1:5b:d0:02:34:bb:87:ed:b6:b0:6b:8f:48:9d:
         71:9a:8e:b6:48:ee:fe:c1:b5:4e:63:1a:01:b9:33:3c:2b:a7:
         f1:b9:ef:2a:fe:db:6c:e4:65:d4:10:a5:f5:f3:32:8d:b3:5a:
         1b:57:a9:b0:35:7e:e2:63:10:be:f8:44:76:c3:15:85:d6:2e:
         ef:e0:2d:31:4c:17:49:de:86:64:06:dc:59:c8:a7:85:19:18:
         47:d8:44:06:ae:c8:48:ed:9e:a1:7e:f1:e9:a3:04:59:ba:21:
         eb:67:33:c1:90:2b:5f:7d:ee:91:21:47:24:49:5c:9f:a0:37:
         9f:56:ed:cd:dc:00:52:51:3f:c8:d1:fb:eb:b8:f3:6b:d2:d6:
         96:24:4b:94:2c:f2:82:5a:6d:6f:f1:f8:cd:f4:ba:d7:0d:c7:
         22:dd:50:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----