Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/323830343a363661303a3a2f33322d3332203d3e20323639353732.roa
File:                     323830343a363661303a3a2f33322d3332203d3e20323639353732.roa (raw, json)
Hash identifier:          yiVukT4EP7VVuLrrOjKoJV0bpgwbTDLqKYBTcNL4ccI=
Subject key identifier:   13:40:A7:41:B4:2E:AF:43:79:F6:96:FB:D7:85:70:43:B6:35:BE:EB
Certificate issuer:       /CN=FA6AA47AC450A75C30FBC2791F8614A8A805F29C
Certificate serial:       1CB03A9CE5E1D2930023A3F746A1624DF3574035
Authority key identifier: FA:6A:A4:7A:C4:50:A7:5C:30:FB:C2:79:1F:86:14:A8:A8:05:F2:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA6AA47AC450A75C30FBC2791F8614A8A805F29C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/323830343a363661303a3a2f33322d3332203d3e20323639353732.roa
Signing time:             Mon 24 Jul 2023 17:00:00 +0000
ROA not before:           Mon 24 Jul 2023 16:55:00 +0000
ROA not after:            Mon 22 Jul 2024 17:00:00 +0000
asID:                     269572
IP address blocks:        2804:66a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:b0:3a:9c:e5:e1:d2:93:00:23:a3:f7:46:a1:62:4d:f3:57:40:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA6AA47AC450A75C30FBC2791F8614A8A805F29C
        Validity
            Not Before: Jul 24 16:55:00 2023 GMT
            Not After : Jul 22 17:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:48:4e:9e:80:1b:95:82:f4:63:94:45:ed:c5:
                    a2:99:20:32:3d:d4:42:3f:ab:c4:a1:30:41:ea:82:
                    f7:1b:f9:9f:35:ef:3f:3b:0c:90:83:97:2f:2a:4a:
                    d1:5a:12:a1:8d:c3:d8:e9:e9:87:8a:5d:dc:47:f4:
                    c9:20:af:e7:1b:20:c8:82:da:46:0a:be:da:96:4e:
                    31:bc:44:34:8f:49:16:75:69:d2:ec:b1:d5:bd:8d:
                    e7:ac:e9:ab:92:9d:23:f0:03:3f:14:69:67:30:75:
                    bd:83:00:85:2c:37:20:be:66:14:81:fc:c2:1f:1d:
                    bf:d4:2c:eb:0d:85:93:32:17:fa:15:53:17:41:54:
                    33:ab:d2:0c:52:3d:ad:dd:8b:83:1b:d9:db:57:68:
                    39:78:cb:2e:c5:97:6c:40:a0:7f:51:18:8b:70:c0:
                    6e:c9:0d:c5:bc:7d:2e:7a:89:cb:55:81:6c:6f:af:
                    31:7e:26:20:82:e8:b7:85:02:f0:bc:d4:6b:f1:b2:
                    d6:de:b2:35:74:d6:02:28:5e:2e:f1:34:4f:7e:be:
                    19:47:54:23:68:08:46:14:b9:45:43:2c:67:fa:09:
                    db:05:c8:20:39:52:d9:88:56:20:dc:ac:4b:7a:b4:
                    d4:9e:56:c3:1a:a0:66:bd:d1:e5:da:4f:2d:32:69:
                    5a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:40:A7:41:B4:2E:AF:43:79:F6:96:FB:D7:85:70:43:B6:35:BE:EB
            X509v3 Authority Key Identifier:
                keyid:FA:6A:A4:7A:C4:50:A7:5C:30:FB:C2:79:1F:86:14:A8:A8:05:F2:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/FA6AA47AC450A75C30FBC2791F8614A8A805F29C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA6AA47AC450A75C30FBC2791F8614A8A805F29C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/323830343a363661303a3a2f33322d3332203d3e20323639353732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:66a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:2b:0e:9c:d9:d2:b0:c4:97:a7:e7:74:82:fa:19:76:18:0c:
         e8:57:ed:c0:12:11:7d:ff:c0:3e:ae:4a:2e:02:1b:94:97:76:
         73:8d:81:39:c6:f5:17:bc:0f:f2:26:c9:60:d2:5a:39:7b:b7:
         ef:cd:0c:95:f9:a5:4e:49:1f:3a:92:cc:cb:be:18:52:ff:55:
         ce:d3:ae:24:90:2b:e0:9e:f3:97:1f:0d:f8:e5:26:e3:5f:13:
         e9:66:c3:67:2b:73:20:64:5c:9b:1c:76:fd:be:d3:77:37:20:
         ae:0f:fa:f9:b2:9f:42:3d:5f:bc:8a:ec:46:69:0e:0c:89:62:
         22:89:f9:c6:9f:79:8e:63:d4:b4:91:e2:00:d5:c5:8a:bf:e9:
         1e:9a:3e:fd:d5:44:90:12:aa:fc:ac:91:06:04:be:a0:e3:9b:
         72:fc:62:61:18:b7:8b:83:2f:98:f3:ba:76:cc:fa:e7:0d:a4:
         e4:92:95:f3:a9:79:7f:ab:3d:f3:c1:45:87:58:58:19:0c:4d:
         5b:c5:0c:d7:ae:1c:7b:4e:03:98:d7:14:0c:46:98:42:b3:35:
         eb:31:2b:e0:2c:e1:72:e9:81:73:c7:9b:65:2b:14:6f:c1:39:
         38:60:ff:b4:b1:75:7d:9b:71:04:a3:d0:26:ac:e2:bd:ff:87:
         09:3e:f5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----