Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/323830343a313333383a3a2f33322d3438203d3e20323633353232.roa
File:                     323830343a313333383a3a2f33322d3438203d3e20323633353232.roa (raw, json)
Hash identifier:          +8I4x/OX5HmaAAlG7iiKcO2rh4TDufFBGEN4Q1khLTU=
Subject key identifier:   CF:A6:73:2C:86:B8:93:39:D1:83:23:8B:1C:72:34:00:5C:DB:B4:C6
Certificate issuer:       /CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
Certificate serial:       24F2B54F0360DD949C968D0A63DDA53B42FC8E5B
Authority key identifier: 6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/323830343a313333383a3a2f33322d3438203d3e20323633353232.roa
Signing time:             Wed 25 Oct 2023 14:25:35 +0000
ROA not before:           Wed 25 Oct 2023 14:20:35 +0000
ROA not after:            Wed 23 Oct 2024 14:25:35 +0000
asID:                     263522
IP address blocks:        2804:1338::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:f2:b5:4f:03:60:dd:94:9c:96:8d:0a:63:dd:a5:3b:42:fc:8e:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
        Validity
            Not Before: Oct 25 14:20:35 2023 GMT
            Not After : Oct 23 14:25:35 2024 GMT
        Subject: CN=CFA6732C86B89339D183238B1C7234005CDBB4C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8a:e7:fd:3b:eb:52:e3:11:a3:97:40:36:88:
                    33:75:3b:fe:7a:17:9b:cc:a4:f2:ee:c1:b8:8d:d3:
                    dd:cb:53:d8:11:32:5f:d2:b8:77:98:54:a3:3a:5e:
                    3b:6d:9d:64:64:07:68:6c:b6:b4:7d:54:17:52:c9:
                    fa:e6:5a:93:0d:9e:ef:e8:7a:62:cc:97:71:11:8b:
                    eb:b0:b5:43:61:c4:2b:02:15:8b:ff:37:77:68:40:
                    b4:b6:53:f4:ff:9a:89:1d:df:c4:1a:37:04:e2:39:
                    03:12:26:42:1c:90:da:19:84:f1:f7:bb:ef:96:dd:
                    88:13:45:ea:37:cf:e9:67:f7:26:45:f1:6b:52:f0:
                    5b:28:39:97:eb:76:7c:e8:f2:4d:f6:c8:fe:1a:b7:
                    f9:f5:1e:d2:8a:51:7c:fc:5d:4c:15:89:39:9c:32:
                    b0:8e:05:e3:5c:49:54:a1:9f:50:e9:9b:63:05:ee:
                    cf:5a:02:1f:b3:bc:bf:dd:54:48:19:42:87:c8:7f:
                    46:89:29:01:93:99:e3:74:8c:a3:c2:41:f1:73:0d:
                    7c:ed:e2:94:42:c2:e8:a7:21:3b:7b:fa:b8:78:d9:
                    d5:01:ca:56:7a:58:68:47:d9:21:1c:f6:50:7b:dd:
                    cd:0a:44:b1:3f:af:c2:76:65:c5:27:17:a5:2f:6a:
                    0a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A6:73:2C:86:B8:93:39:D1:83:23:8B:1C:72:34:00:5C:DB:B4:C6
            X509v3 Authority Key Identifier:
                keyid:6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/323830343a313333383a3a2f33322d3438203d3e20323633353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1338::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:0e:96:d1:dd:a7:05:49:33:ec:b5:a2:4b:9e:41:fd:17:06:
         1a:0e:af:c4:a9:4a:30:f5:87:14:f8:b0:36:ff:d7:5d:c6:8c:
         bb:1d:72:83:28:3c:a9:67:0e:2c:16:cf:2d:95:8a:77:3c:01:
         6f:b7:66:d4:17:32:46:fb:20:d7:bf:5d:bd:c2:0d:75:01:b6:
         3b:d5:87:8d:2c:ea:dc:1e:d9:fd:5f:55:ed:e3:5c:6f:b2:69:
         c5:cf:3a:40:bd:0e:e5:9c:17:8c:7e:83:12:c2:b7:5d:f1:95:
         38:3d:bc:b3:81:90:11:bf:71:2d:c0:47:74:87:d1:21:ef:04:
         5d:3d:0a:15:3a:c8:16:63:b8:fe:06:7d:44:76:82:3d:51:fc:
         a2:a6:2e:8b:78:16:54:5f:6e:83:f8:8f:a1:f9:4e:0f:ac:e8:
         49:f7:bc:96:61:c5:ce:5e:ad:15:90:b9:60:fc:0c:2b:8d:a8:
         7b:88:7e:9d:1c:14:13:34:5d:77:6a:98:80:db:de:11:f5:fe:
         12:bd:a0:2b:1d:09:d0:61:06:0e:de:21:f4:d3:37:cf:f3:de:
         b5:fa:5a:91:b2:a0:51:c9:4e:df:78:1d:41:c7:76:f7:e5:36:
         fa:2a:36:82:0b:aa:52:36:25:a9:21:0a:80:63:92:8b:7d:19:
         9f:77:41:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----