Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fc99dqVeQW26eSoW87ho6AcTGgatndcEFXaokMps5mFV/0/323830343a326133383a3a2f33322d313238203d3e20323634303635.roa
File:                     323830343a326133383a3a2f33322d313238203d3e20323634303635.roa (raw, json)
Hash identifier:          niLZgULHh5V4SUHV/uSMHSU6zt724vVbqLlaYeIas+s=
Subject key identifier:   44:4E:8E:6F:F2:A4:37:AB:D8:7F:49:26:6F:E3:09:3E:67:E8:9B:D2
Certificate issuer:       /CN=6B2DAC24BDC35F37446BBA0CA7F3EC2AB4E23BAB
Certificate serial:       5A71941E4C817DD97802FBDB43120DB6E823010D
Authority key identifier: 6B:2D:AC:24:BD:C3:5F:37:44:6B:BA:0C:A7:F3:EC:2A:B4:E2:3B:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B2DAC24BDC35F37446BBA0CA7F3EC2AB4E23BAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fc99dqVeQW26eSoW87ho6AcTGgatndcEFXaokMps5mFV/0/323830343a326133383a3a2f33322d313238203d3e20323634303635.roa
Signing time:             Fri 30 Aug 2024 20:45:18 +0000
ROA not before:           Fri 30 Aug 2024 20:40:18 +0000
ROA not after:            Fri 29 Aug 2025 20:45:18 +0000
asID:                     264065
IP address blocks:        2804:2a38::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:71:94:1e:4c:81:7d:d9:78:02:fb:db:43:12:0d:b6:e8:23:01:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B2DAC24BDC35F37446BBA0CA7F3EC2AB4E23BAB
        Validity
            Not Before: Aug 30 20:40:18 2024 GMT
            Not After : Aug 29 20:45:18 2025 GMT
        Subject: CN=444E8E6FF2A437ABD87F49266FE3093E67E89BD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:08:05:ec:ea:7a:39:fd:fa:eb:81:a1:3f:f8:
                    b6:08:57:ae:e4:8f:d4:71:87:c6:de:9e:65:16:f4:
                    3f:8c:ab:97:f0:e8:81:42:8d:4b:19:13:91:d7:8f:
                    41:52:a8:7c:83:8e:0b:78:d1:c9:4c:d0:c3:89:59:
                    a1:93:6d:4b:89:01:15:5f:96:cd:94:42:ae:dd:61:
                    cd:bd:1e:cf:c3:dc:62:04:e3:77:69:4d:eb:45:f2:
                    66:95:d6:40:fc:bd:a3:c5:7a:d8:8b:15:ed:40:59:
                    71:5d:07:08:cf:a4:db:f4:4e:33:fa:4d:45:f0:7e:
                    e0:96:5d:5a:7b:ee:c3:00:08:85:87:a4:34:d5:64:
                    6a:02:73:8e:b6:4a:ae:e5:54:d0:88:05:dd:34:b3:
                    5d:a0:e1:71:d1:c2:61:24:08:51:93:38:6f:a7:32:
                    1f:91:ca:88:b5:88:c0:95:ab:fb:7e:57:0a:73:92:
                    d1:7d:ee:b6:e4:cf:c5:93:23:c0:7b:27:80:60:ab:
                    69:94:1b:07:86:96:4b:95:50:a4:86:a0:73:70:76:
                    88:75:f4:fd:61:86:6c:7c:74:74:5c:99:a1:c1:18:
                    1c:84:48:86:0e:84:27:c3:72:d9:c7:29:b1:57:6e:
                    1f:ce:03:2f:2c:24:21:d1:34:37:83:90:39:b8:44:
                    18:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:4E:8E:6F:F2:A4:37:AB:D8:7F:49:26:6F:E3:09:3E:67:E8:9B:D2
            X509v3 Authority Key Identifier:
                keyid:6B:2D:AC:24:BD:C3:5F:37:44:6B:BA:0C:A7:F3:EC:2A:B4:E2:3B:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fc99dqVeQW26eSoW87ho6AcTGgatndcEFXaokMps5mFV/0/6B2DAC24BDC35F37446BBA0CA7F3EC2AB4E23BAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B2DAC24BDC35F37446BBA0CA7F3EC2AB4E23BAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fc99dqVeQW26eSoW87ho6AcTGgatndcEFXaokMps5mFV/0/323830343a326133383a3a2f33322d313238203d3e20323634303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2a38::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:12:8b:01:75:7c:98:91:a2:58:32:2a:1f:2c:84:62:d0:d1:
         88:09:06:a3:e0:fb:25:77:8f:8c:c6:19:ae:7f:b2:fa:5e:35:
         d8:72:e5:f3:14:29:81:dc:1e:50:b1:74:5c:67:12:a4:3d:83:
         b4:15:97:6f:c9:6c:99:e4:d3:02:95:36:04:b1:ee:85:28:3f:
         64:7e:04:7a:9c:07:98:dc:ee:25:00:b0:0f:7e:50:cf:09:5f:
         df:07:74:11:e7:8c:52:ac:52:26:72:3f:f3:11:1c:1e:a9:e0:
         79:c4:d8:ee:81:9f:19:df:76:ff:fd:46:34:4f:ce:63:00:84:
         00:14:3c:10:55:b1:d3:d0:09:09:45:f8:d6:1d:d1:ae:72:5a:
         ae:90:a0:d1:c2:2c:ce:3c:83:f8:e4:cd:fa:5b:7d:b4:ac:dc:
         0c:8c:80:09:d7:b4:65:82:49:8d:ef:a3:7c:e1:40:7c:09:3a:
         1a:16:f5:87:df:15:39:0c:c7:ba:72:68:63:4f:c0:a2:b9:04:
         28:c0:21:72:a9:25:2f:09:fb:0f:29:cb:f8:56:5c:2f:98:08:
         75:06:99:31:1b:b6:05:49:cb:cb:33:2e:48:85:34:bb:be:5f:
         2d:2c:17:8b:f5:b7:82:ee:ac:f8:17:ba:f9:32:33:2b:ec:ff:
         19:48:61:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----