Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/0/323830343a353662633a3a2f33322d3332203d3e20323638303230.roa
File:                     323830343a353662633a3a2f33322d3332203d3e20323638303230.roa (raw, json)
Hash identifier:          9IuthnSRorWI26urkXg11y4PMg8xHh+4btdzbJa7qZk=
Subject key identifier:   93:23:E5:1F:CD:E4:7C:50:A0:21:C9:E2:5D:D6:86:20:4D:4E:FE:B2
Certificate issuer:       /CN=6580BDD93E3899BECA2788EB019377F40796F1AB
Certificate serial:       658AFBC82683AA4026543634C7CDB09E55225BFC
Authority key identifier: 65:80:BD:D9:3E:38:99:BE:CA:27:88:EB:01:93:77:F4:07:96:F1:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6580BDD93E3899BECA2788EB019377F40796F1AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/0/323830343a353662633a3a2f33322d3332203d3e20323638303230.roa
Signing time:             Wed 20 Sep 2023 19:26:09 +0000
ROA not before:           Wed 20 Sep 2023 19:21:09 +0000
ROA not after:            Wed 18 Sep 2024 19:26:09 +0000
asID:                     268020
IP address blocks:        2804:56bc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:8a:fb:c8:26:83:aa:40:26:54:36:34:c7:cd:b0:9e:55:22:5b:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6580BDD93E3899BECA2788EB019377F40796F1AB
        Validity
            Not Before: Sep 20 19:21:09 2023 GMT
            Not After : Sep 18 19:26:09 2024 GMT
        Subject: CN=9323E51FCDE47C50A021C9E25DD686204D4EFEB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:12:d2:df:96:ec:27:d8:00:d4:34:b9:03:e3:
                    33:d1:ac:dc:6b:44:e5:51:6c:3f:94:13:ed:09:44:
                    74:46:66:54:f5:d1:e7:79:de:39:4d:15:47:a7:f2:
                    54:e8:13:01:ba:ee:a4:0b:97:90:7c:47:79:b9:27:
                    86:4e:7b:76:33:ae:59:4a:0b:98:f9:6b:6e:fa:ba:
                    4b:e0:58:21:09:e5:1c:fb:9a:b4:06:2b:46:69:0d:
                    e9:3a:4f:3f:06:9b:18:c3:5e:37:c3:6b:f9:57:e2:
                    67:8a:6d:ab:7a:f4:65:22:f7:b2:2f:48:bb:b5:82:
                    bc:2c:65:49:ba:ad:63:09:4b:d1:09:36:87:02:f3:
                    f4:99:3a:3a:dc:ab:e3:95:c0:59:fd:3b:8f:82:42:
                    13:56:63:bd:8f:2a:fd:d1:27:8c:84:c2:4a:5d:c3:
                    76:56:01:53:d7:b4:ee:69:49:3d:bd:e2:03:fc:af:
                    fd:a8:c6:f0:24:ff:9d:af:ee:cb:d8:94:d0:bf:1b:
                    fb:be:b0:12:94:e0:a0:45:bf:74:95:9f:51:4f:3e:
                    89:61:0c:1c:cb:da:c9:f8:c2:60:f3:d3:e8:c5:01:
                    bc:d6:63:db:39:85:3c:55:4a:f7:87:92:b7:98:ea:
                    d1:76:b6:c8:89:0a:e5:4b:70:57:79:12:a7:15:96:
                    45:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:23:E5:1F:CD:E4:7C:50:A0:21:C9:E2:5D:D6:86:20:4D:4E:FE:B2
            X509v3 Authority Key Identifier:
                keyid:65:80:BD:D9:3E:38:99:BE:CA:27:88:EB:01:93:77:F4:07:96:F1:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/0/6580BDD93E3899BECA2788EB019377F40796F1AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6580BDD93E3899BECA2788EB019377F40796F1AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/0/323830343a353662633a3a2f33322d3332203d3e20323638303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:6f:fc:f6:76:80:b3:4b:ec:6b:cc:50:80:be:5f:71:6b:3b:
         6d:58:9e:f8:bb:10:d1:06:0b:02:6f:2c:40:b4:83:63:72:f8:
         1b:14:11:d0:f9:73:81:06:15:74:f6:43:1a:bc:7d:f0:5a:eb:
         ae:4c:d8:08:12:15:96:7e:f1:d4:32:9f:b5:f2:5a:52:0d:26:
         5c:3e:38:d4:61:5b:c9:02:99:42:16:22:49:75:88:b7:92:e4:
         f6:a0:6d:f5:84:dc:ff:1b:f8:3a:f5:cb:75:66:88:14:e9:d3:
         56:11:52:d7:e2:85:78:60:99:be:a8:01:c6:e5:58:b1:53:69:
         05:82:00:c1:fc:66:7a:85:9c:7a:58:26:14:fb:cd:83:18:47:
         69:71:b5:1f:ae:25:a9:b8:e5:33:72:c4:f0:ec:1d:7e:2b:50:
         ee:c0:c6:b8:3d:ee:fc:7c:0a:fd:41:57:9f:97:42:df:cc:f2:
         2c:6e:c6:d7:a5:2c:4e:a7:af:a0:9a:ea:44:ae:83:5e:e0:be:
         54:bf:c6:b8:59:c0:a5:3d:fb:94:dc:7b:a6:9f:17:eb:fb:fa:
         a6:81:4b:64:f6:82:5e:16:28:88:60:84:30:d2:b4:ee:cd:aa:
         23:7f:55:4a:fd:c4:fb:09:eb:23:78:18:45:95:8c:ed:46:f3:
         cf:3e:96:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----