Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/323830343a356539303a3a2f33322d3332203d3e20323639303431.roa
File:                     323830343a356539303a3a2f33322d3332203d3e20323639303431.roa (raw, json)
Hash identifier:          bDyc4PVJTYA0dRMsRr6P1a0kA86KscbJ+IROrIt60Do=
Subject key identifier:   DD:EA:C8:6D:71:08:06:A9:55:05:8A:EC:30:BB:2C:48:8B:83:0F:19
Certificate issuer:       /CN=14F61AD290A8DAF8B52D14976633A357B454AB5B
Certificate serial:       2B55364CC6BBE76D00AFC97DF19C6E4AA79A8D07
Authority key identifier: 14:F6:1A:D2:90:A8:DA:F8:B5:2D:14:97:66:33:A3:57:B4:54:AB:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14F61AD290A8DAF8B52D14976633A357B454AB5B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/323830343a356539303a3a2f33322d3332203d3e20323639303431.roa
Signing time:             Mon 12 Feb 2024 12:26:44 +0000
ROA not before:           Mon 12 Feb 2024 12:21:44 +0000
ROA not after:            Mon 10 Feb 2025 12:26:44 +0000
asID:                     269041
IP address blocks:        2804:5e90::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:55:36:4c:c6:bb:e7:6d:00:af:c9:7d:f1:9c:6e:4a:a7:9a:8d:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14F61AD290A8DAF8B52D14976633A357B454AB5B
        Validity
            Not Before: Feb 12 12:21:44 2024 GMT
            Not After : Feb 10 12:26:44 2025 GMT
        Subject: CN=DDEAC86D710806A955058AEC30BB2C488B830F19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b4:cc:43:73:32:26:c2:f6:05:77:fc:a3:37:
                    9f:ac:93:81:34:e5:2e:d1:38:84:88:b0:ba:da:74:
                    52:f2:46:ef:6e:50:d8:59:8c:82:96:2c:b5:15:dd:
                    48:36:09:55:7c:fe:51:f5:6f:d1:f7:9d:25:04:00:
                    36:05:44:4a:39:6a:d0:82:0a:71:aa:9b:cc:67:cd:
                    26:c0:80:ea:31:73:f2:89:b1:ae:8d:8b:83:ee:45:
                    61:d9:65:e1:6e:3c:c9:c5:07:65:a8:f7:55:9d:2e:
                    dc:11:44:96:d3:51:65:54:d8:a2:85:0a:87:a0:30:
                    78:95:87:be:0d:93:23:0d:b7:eb:b1:86:4d:af:ab:
                    3d:fd:71:f0:a9:74:bb:4b:ef:5e:35:64:cc:fc:70:
                    59:5c:4c:36:8e:f1:de:87:93:40:b9:9e:f7:8b:23:
                    87:ef:a5:cd:37:d8:e1:8a:bc:bf:64:bf:08:13:d2:
                    0a:fd:3e:cd:98:a5:82:70:17:52:bf:bf:99:e3:47:
                    5c:7e:13:b2:90:98:4d:46:37:29:f4:99:0d:e0:ed:
                    8a:b1:6e:47:a1:61:ed:84:cc:c9:18:1a:d6:3c:3d:
                    a8:dd:e3:a5:f0:ab:03:44:16:f9:88:f4:e8:51:aa:
                    59:93:e6:a9:b5:ad:2f:e6:41:c5:8d:ff:ed:6a:d2:
                    1e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:EA:C8:6D:71:08:06:A9:55:05:8A:EC:30:BB:2C:48:8B:83:0F:19
            X509v3 Authority Key Identifier:
                keyid:14:F6:1A:D2:90:A8:DA:F8:B5:2D:14:97:66:33:A3:57:B4:54:AB:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/14F61AD290A8DAF8B52D14976633A357B454AB5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14F61AD290A8DAF8B52D14976633A357B454AB5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/323830343a356539303a3a2f33322d3332203d3e20323639303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e90::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:81:7a:24:e2:57:50:fc:bb:75:30:0b:af:d9:bf:4a:4b:59:
         12:d3:df:8e:fc:df:b3:80:f7:9f:0b:36:2e:d8:29:99:b6:f8:
         c1:17:b4:0d:d5:5d:e7:23:9d:9b:8c:a5:ba:de:a0:4d:70:e4:
         1c:28:19:6a:ae:8b:e2:54:8b:a0:4f:3f:7d:93:20:00:a5:7b:
         c2:08:ea:9c:a2:b7:68:12:e9:57:6c:e4:aa:df:ad:3b:eb:d9:
         8a:87:b0:07:ad:db:35:39:6f:3c:2f:4e:dd:78:64:4e:d7:02:
         d1:d9:24:5a:50:a6:95:b3:ec:02:a7:41:aa:e1:aa:fb:42:c0:
         25:13:c0:0c:11:90:f6:f6:c5:2b:54:7c:be:82:a8:97:5c:d1:
         b5:47:12:cb:f0:87:0d:93:ab:78:94:1b:7a:be:68:f8:b3:52:
         81:8b:b9:43:01:1b:c5:25:e4:ad:da:86:97:08:41:56:19:32:
         26:cd:cc:df:50:1f:b2:77:ed:7a:b5:55:fb:77:a9:fa:e5:a2:
         f4:de:ae:e9:6b:0c:50:eb:a3:f2:f4:1e:a4:96:2f:ce:37:bd:
         9f:a7:64:ba:b5:f5:40:4c:0c:bc:57:07:9e:87:ea:bc:12:ce:
         b9:c2:0a:d0:e8:f9:43:61:21:c8:b4:b6:83:98:fd:7c:cd:62:
         ad:d4:97:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----