Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/1/323830343a333635343a3a2f33322d3332203d3e20323636333432.roa
File:                     323830343a333635343a3a2f33322d3332203d3e20323636333432.roa (raw, json)
Hash identifier:          VBcigQ56uRHrat1Bvu/iV8QOMN4x8NY6DsO9Z6DDcEY=
Subject key identifier:   16:13:CC:02:33:09:B8:AA:B2:CB:BF:6F:D8:EB:B9:00:0E:E4:71:2D
Certificate issuer:       /CN=FF9C06663C253EE2ECBDB5AA095105FC47957945
Certificate serial:       73F145A02691695B55124430FADD6D8F7D94E935
Authority key identifier: FF:9C:06:66:3C:25:3E:E2:EC:BD:B5:AA:09:51:05:FC:47:95:79:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF9C06663C253EE2ECBDB5AA095105FC47957945.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/1/323830343a333635343a3a2f33322d3332203d3e20323636333432.roa
Signing time:             Thu 04 Apr 2024 16:41:07 +0000
ROA not before:           Thu 04 Apr 2024 16:36:07 +0000
ROA not after:            Thu 03 Apr 2025 16:41:07 +0000
asID:                     266342
IP address blocks:        2804:3654::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:f1:45:a0:26:91:69:5b:55:12:44:30:fa:dd:6d:8f:7d:94:e9:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF9C06663C253EE2ECBDB5AA095105FC47957945
        Validity
            Not Before: Apr  4 16:36:07 2024 GMT
            Not After : Apr  3 16:41:07 2025 GMT
        Subject: CN=1613CC023309B8AAB2CBBF6FD8EBB9000EE4712D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3a:8e:42:f5:4e:98:49:b3:4f:3e:a3:f9:ef:
                    e6:0f:85:50:0e:34:8d:05:d1:96:99:31:fb:8a:1c:
                    fc:9e:72:4b:6f:51:36:94:86:45:ad:5d:19:b8:79:
                    a6:98:71:47:26:9f:a8:de:ac:12:9a:0e:52:65:6a:
                    42:d9:b4:fe:be:ed:55:1e:5f:68:25:3d:94:5f:aa:
                    d5:72:4a:69:c6:d4:aa:a0:4d:07:99:bf:13:ce:52:
                    d9:0f:6f:bc:ba:00:73:99:08:e6:11:12:9d:1e:f2:
                    24:b9:5e:d5:85:95:56:91:5d:b5:55:2b:9c:91:14:
                    28:64:80:b9:36:17:48:a8:16:20:d3:93:dd:d9:45:
                    ea:69:f9:05:25:fd:ab:8a:e2:97:bd:1c:de:ce:63:
                    6c:39:15:68:6a:62:a1:2a:0b:fd:79:82:44:bf:d2:
                    74:35:4a:99:c4:dc:81:21:ad:3c:96:b0:a4:54:92:
                    a1:5a:95:f6:9d:0a:fc:62:18:e7:22:04:44:b7:cb:
                    83:6d:4f:79:0f:78:e6:f4:22:a9:12:1d:eb:1d:8c:
                    cb:48:ff:79:de:49:19:80:d1:10:e4:7c:c2:82:f7:
                    4e:8c:d1:40:f9:4d:fe:1f:23:b3:c1:7e:32:ae:42:
                    d9:20:cf:14:9c:e5:01:fe:b5:74:37:65:8a:83:d0:
                    91:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:13:CC:02:33:09:B8:AA:B2:CB:BF:6F:D8:EB:B9:00:0E:E4:71:2D
            X509v3 Authority Key Identifier:
                keyid:FF:9C:06:66:3C:25:3E:E2:EC:BD:B5:AA:09:51:05:FC:47:95:79:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/1/FF9C06663C253EE2ECBDB5AA095105FC47957945.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF9C06663C253EE2ECBDB5AA095105FC47957945.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/1/323830343a333635343a3a2f33322d3332203d3e20323636333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3654::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:cf:ee:3c:7a:54:24:29:37:17:55:f8:29:14:a7:1f:52:fd:
         ca:65:33:c2:96:4e:e6:a3:f2:cc:32:5d:4a:b2:ca:62:e9:c4:
         15:c9:80:5d:44:da:7b:2f:0c:c1:5b:67:51:c2:e9:46:f6:af:
         6f:4e:f5:d6:ec:ea:9d:81:52:d3:51:61:d8:1a:23:eb:2f:a4:
         99:7c:8d:c8:b5:52:39:25:23:0a:fc:57:64:e7:bf:5f:0e:12:
         d0:17:6d:49:43:8c:5e:b0:a1:24:88:6c:c0:18:4d:7a:70:fa:
         d9:ed:58:b0:94:2d:c0:46:d7:99:e7:bf:94:89:ca:ba:01:d2:
         80:17:06:0f:19:49:e1:70:a5:01:ea:a7:d0:72:7a:e4:60:b4:
         08:95:c8:f3:77:b1:e2:e7:49:8c:18:f1:b0:fe:4a:04:2e:04:
         42:f0:21:ab:44:4e:df:59:55:b2:93:d8:a2:26:40:e1:11:9c:
         8c:1d:89:71:78:5e:e4:06:fd:ee:85:3f:4f:36:81:a6:20:e7:
         8b:28:53:34:6c:97:17:2a:d2:65:b0:5b:bb:59:0e:de:1e:db:
         d7:d6:c1:a5:b5:c4:1d:9d:a5:f5:ad:17:97:e5:8b:f1:ff:93:
         f1:87:33:94:8f:9e:1a:55:99:b5:6a:34:eb:7d:e2:8f:88:29:
         91:c8:3a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----