Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/0/323830343a326334343a383030303a3a2f33342d3334203d3e20323635323037.roa
File:                     323830343a326334343a383030303a3a2f33342d3334203d3e20323635323037.roa (raw, json)
Hash identifier:          maqSzxpxE+47WooFiYZfEcCDhtqTxXTvp+Gs/Mq7S7M=
Subject key identifier:   60:1B:A8:3A:ED:FB:63:87:D8:95:26:F7:EF:48:0F:50:48:A2:AB:75
Certificate issuer:       /CN=61E46AB86B3164E82DDF72DDCF607FFCC4FAC22B
Certificate serial:       699EF7E54D3C4115704E2A365C89F5420B2D9B59
Authority key identifier: 61:E4:6A:B8:6B:31:64:E8:2D:DF:72:DD:CF:60:7F:FC:C4:FA:C2:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61E46AB86B3164E82DDF72DDCF607FFCC4FAC22B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/0/323830343a326334343a383030303a3a2f33342d3334203d3e20323635323037.roa
Signing time:             Fri 30 Jun 2023 13:06:36 +0000
ROA not before:           Fri 30 Jun 2023 13:01:36 +0000
ROA not after:            Fri 28 Jun 2024 13:06:36 +0000
asID:                     265207
IP address blocks:        2804:2c44:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:9e:f7:e5:4d:3c:41:15:70:4e:2a:36:5c:89:f5:42:0b:2d:9b:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61E46AB86B3164E82DDF72DDCF607FFCC4FAC22B
        Validity
            Not Before: Jun 30 13:01:36 2023 GMT
            Not After : Jun 28 13:06:36 2024 GMT
        Subject: CN=601BA83AEDFB6387D89526F7EF480F5048A2AB75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c4:09:fb:3c:5b:03:6f:d2:9a:4b:d8:46:95:
                    bc:cc:f7:4b:6c:e3:c8:20:83:ae:90:0d:ec:cb:25:
                    ef:82:33:44:3c:82:95:3e:ba:09:9f:3c:d5:ad:4b:
                    07:e0:c0:e4:58:62:a2:d4:f2:ab:60:42:61:a7:1d:
                    c6:d9:5f:97:01:67:79:d5:22:5a:7e:5b:da:b1:86:
                    8f:6b:0c:ee:a3:c4:ee:a0:c3:91:8a:39:07:bf:1b:
                    49:de:ca:72:ed:e4:14:f7:10:7e:67:4b:2e:74:44:
                    0a:6c:6a:b3:d1:c3:e2:3d:6d:46:80:2e:de:e0:5d:
                    89:c3:2e:d9:36:bc:9c:a8:e7:17:17:a4:9d:e0:6c:
                    24:d9:e6:5c:11:fa:da:19:94:2f:69:e5:37:ad:f5:
                    b9:93:10:11:17:a5:fc:8b:e2:9c:21:d6:17:ff:b4:
                    b4:20:ca:cf:b4:20:a0:95:32:ca:d3:8d:da:db:a6:
                    00:27:b2:1f:63:76:68:42:6d:1f:c9:f9:fc:10:51:
                    db:d8:6b:1d:b2:63:7a:53:15:52:e6:62:f1:7c:35:
                    10:39:3f:86:cd:7a:88:43:80:eb:ab:9f:cf:16:00:
                    96:05:ed:a5:3f:d1:4d:05:bc:bb:4f:a3:8f:43:4d:
                    b5:f9:af:2e:e3:4c:5a:91:ee:b0:ac:16:7d:f7:83:
                    dd:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:1B:A8:3A:ED:FB:63:87:D8:95:26:F7:EF:48:0F:50:48:A2:AB:75
            X509v3 Authority Key Identifier:
                keyid:61:E4:6A:B8:6B:31:64:E8:2D:DF:72:DD:CF:60:7F:FC:C4:FA:C2:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/0/61E46AB86B3164E82DDF72DDCF607FFCC4FAC22B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61E46AB86B3164E82DDF72DDCF607FFCC4FAC22B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/0/323830343a326334343a383030303a3a2f33342d3334203d3e20323635323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c44:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         70:84:1f:db:ee:6e:1a:94:2f:21:89:04:dd:73:bc:31:6d:ef:
         b9:39:41:e9:ca:97:4f:23:6b:ff:ad:c5:65:99:01:f8:df:8e:
         48:9f:14:ae:fb:76:b6:89:ff:5c:b1:40:f6:ce:8f:f7:87:67:
         13:72:25:4a:6a:93:b3:15:82:4a:cc:9c:26:03:e4:3b:58:29:
         db:74:12:a1:75:c9:01:34:f9:d5:3c:20:e1:98:bf:2d:56:20:
         30:df:71:e7:e4:59:4e:c3:ba:e4:89:c4:a2:e7:d9:6b:a4:17:
         f0:86:ce:da:a2:39:6f:b9:98:df:58:e8:5f:e9:6d:13:6a:f5:
         b9:98:29:87:c6:9a:05:20:6f:81:39:5b:1d:ee:18:67:66:f9:
         de:44:1b:0a:b8:2f:ca:67:c0:5b:8b:c9:f1:6f:c6:94:0c:55:
         c6:e3:f8:4e:8c:28:67:93:79:b0:90:b1:c9:b9:87:36:e0:06:
         d8:5d:7e:b2:25:83:ef:ad:87:62:37:36:02:5f:c7:42:4a:22:
         3e:da:d2:b9:55:ac:84:08:aa:12:f8:9e:08:0b:45:6c:e2:f8:
         23:b6:e9:d7:b6:fa:58:da:97:77:b0:b6:67:22:5e:46:36:68:
         13:4d:60:d5:ac:0a:f3:4d:e1:60:73:8e:4e:3a:e1:9e:f3:43:
         52:af:47:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----