Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/0/323830343a366332633a3a2f33322d3438203d3e20323730343530.roa
File:                     323830343a366332633a3a2f33322d3438203d3e20323730343530.roa (raw, json)
Hash identifier:          TVC/ZBnvUNzp0+k/1tAzw1vXy9CQKA/vOh6zuMGXAmQ=
Subject key identifier:   75:38:83:1E:E1:40:85:A3:D5:63:7E:4D:CA:D3:83:DC:EF:68:3E:94
Certificate issuer:       /CN=CF6EBB49C2AE6F92DEC6A1B3B2E2749C1F539AA5
Certificate serial:       10C405EF78DAE63E5CB9FCF009BB2A5CD57408B4
Authority key identifier: CF:6E:BB:49:C2:AE:6F:92:DE:C6:A1:B3:B2:E2:74:9C:1F:53:9A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF6EBB49C2AE6F92DEC6A1B3B2E2749C1F539AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/0/323830343a366332633a3a2f33322d3438203d3e20323730343530.roa
Signing time:             Tue 13 Feb 2024 21:18:00 +0000
ROA not before:           Tue 13 Feb 2024 21:13:00 +0000
ROA not after:            Tue 11 Feb 2025 21:18:00 +0000
asID:                     270450
IP address blocks:        2804:6c2c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c4:05:ef:78:da:e6:3e:5c:b9:fc:f0:09:bb:2a:5c:d5:74:08:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF6EBB49C2AE6F92DEC6A1B3B2E2749C1F539AA5
        Validity
            Not Before: Feb 13 21:13:00 2024 GMT
            Not After : Feb 11 21:18:00 2025 GMT
        Subject: CN=7538831EE14085A3D5637E4DCAD383DCEF683E94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8c:b0:1f:8c:4f:1c:6d:3a:34:58:2d:68:c3:
                    5a:11:a8:d7:bf:35:1b:1a:fd:dc:e4:e1:9c:62:94:
                    db:e3:ff:9e:2c:9f:57:32:f2:0c:3b:6e:17:f7:e6:
                    7e:92:7e:79:cb:4b:92:b3:b0:3b:da:65:f9:d9:ca:
                    4f:c2:82:e1:09:20:52:6d:d7:7a:b1:99:60:a6:c2:
                    6e:ca:f3:b9:3e:10:58:20:ad:ca:4f:51:ee:be:70:
                    fa:6b:99:a3:10:6f:68:a3:9a:11:41:86:08:ea:fb:
                    15:d2:3d:7c:03:15:ca:69:86:6e:7a:38:5e:1b:23:
                    1a:33:a8:ad:f3:8f:f3:04:58:02:de:0d:88:f3:61:
                    01:90:d5:f6:95:7b:a8:27:d6:55:d8:e4:87:f0:42:
                    5d:e8:b8:28:66:c5:5a:eb:fc:cd:d2:f5:8a:49:5f:
                    d6:c7:7e:80:d5:d7:d0:9a:b8:56:40:41:de:07:a5:
                    20:e2:92:5a:cc:71:1f:6c:ba:32:60:69:37:a7:5e:
                    f6:f3:ec:5a:20:54:fc:64:03:1c:1c:78:f4:7b:0c:
                    25:07:08:71:67:fb:c7:f5:0b:90:ef:cd:17:a7:74:
                    69:4a:82:01:4e:d2:d5:f4:6c:21:2a:07:5b:11:46:
                    3f:e4:b2:5f:3a:32:d3:83:02:d0:0e:f0:df:b0:dd:
                    7f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:38:83:1E:E1:40:85:A3:D5:63:7E:4D:CA:D3:83:DC:EF:68:3E:94
            X509v3 Authority Key Identifier:
                keyid:CF:6E:BB:49:C2:AE:6F:92:DE:C6:A1:B3:B2:E2:74:9C:1F:53:9A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/0/CF6EBB49C2AE6F92DEC6A1B3B2E2749C1F539AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF6EBB49C2AE6F92DEC6A1B3B2E2749C1F539AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/0/323830343a366332633a3a2f33322d3438203d3e20323730343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         bd:5f:44:2e:29:8d:93:3a:38:b7:a3:93:61:d5:fd:e7:d5:0f:
         00:a0:d8:83:6a:a4:86:06:93:10:35:db:c8:73:8c:32:b6:12:
         0b:1a:67:92:72:af:dc:94:13:60:f5:b0:16:15:d9:04:90:88:
         f3:ea:06:9e:e3:4a:6f:eb:fd:63:55:74:ee:df:a0:00:a4:3b:
         bc:6c:cc:72:e8:a9:d9:94:cc:4d:a1:37:68:c7:7a:cd:6d:fa:
         74:37:60:49:c0:c0:7a:f7:3b:65:f4:a2:d6:12:98:cd:4a:d0:
         42:e0:e8:f0:8a:8c:55:59:c5:84:a2:fa:b7:2c:a9:47:37:18:
         ba:23:73:80:a7:76:9c:59:86:e9:3f:ed:14:b3:17:b9:f9:f9:
         d7:51:aa:15:83:d4:32:75:42:05:a9:52:96:18:01:fc:06:4c:
         5d:68:36:c7:dd:2d:88:ab:86:ee:7c:79:64:8e:17:a4:dc:98:
         cf:35:0a:b5:22:84:7c:9b:66:41:96:35:69:b1:f2:fd:d9:99:
         fa:09:a7:dd:64:65:ff:52:43:d8:ee:13:38:58:78:a5:6e:90:
         67:41:d1:e8:6e:06:32:1e:60:fc:f9:38:ff:79:25:93:f6:23:
         f4:7f:1c:0b:29:dd:49:ec:2c:e8:69:d2:60:a4:ac:63:b8:8d:
         4c:35:24:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----