Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/0/323830343a363866383a3a2f33322d3438203d3e20323730323430.roa
File:                     323830343a363866383a3a2f33322d3438203d3e20323730323430.roa (raw, json)
Hash identifier:          UY4KynMsFPjPWiackF78y/k+/uc6yyrAs44ZzaqLKzk=
Subject key identifier:   C8:93:86:41:6C:88:11:BC:F8:E3:9F:E2:C0:17:92:56:0C:58:70:62
Certificate issuer:       /CN=3A120A308B3DB51C52A4F4C0A374481656D3FA1B
Certificate serial:       072BEE485ACE24E42C3307A2B702A166FB1756E2
Authority key identifier: 3A:12:0A:30:8B:3D:B5:1C:52:A4:F4:C0:A3:74:48:16:56:D3:FA:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3A120A308B3DB51C52A4F4C0A374481656D3FA1B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/0/323830343a363866383a3a2f33322d3438203d3e20323730323430.roa
Signing time:             Thu 22 Jun 2023 17:17:38 +0000
ROA not before:           Thu 22 Jun 2023 17:12:38 +0000
ROA not after:            Thu 20 Jun 2024 17:17:38 +0000
asID:                     270240
IP address blocks:        2804:68f8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:2b:ee:48:5a:ce:24:e4:2c:33:07:a2:b7:02:a1:66:fb:17:56:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A120A308B3DB51C52A4F4C0A374481656D3FA1B
        Validity
            Not Before: Jun 22 17:12:38 2023 GMT
            Not After : Jun 20 17:17:38 2024 GMT
        Subject: CN=C89386416C8811BCF8E39FE2C01792560C587062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:da:29:31:c4:d7:bf:78:12:a3:b8:29:48:c3:
                    99:81:84:d9:d5:fb:e3:e9:86:de:74:c9:a1:4f:a6:
                    60:9a:8b:36:06:ac:94:3e:a8:18:82:56:c2:b5:0e:
                    48:9e:b2:c2:c4:1f:0d:34:d0:f5:8b:59:f2:72:b7:
                    2f:57:d4:fc:68:6e:36:56:64:5f:86:ba:4e:93:5f:
                    cb:e3:8a:b6:c1:93:29:38:48:4d:8f:b0:91:1d:52:
                    cb:f2:6d:7c:4e:64:bf:6d:7b:df:04:54:fb:22:91:
                    2f:5e:63:43:8e:d3:12:04:45:c2:b1:9c:16:74:ec:
                    32:c4:40:43:91:42:13:63:4b:13:39:4f:66:ac:82:
                    78:58:d1:68:61:42:31:24:56:71:74:d6:32:86:ec:
                    ae:3b:b6:1d:01:4c:7a:d0:a5:41:c6:13:9f:16:93:
                    7a:71:f9:c1:97:54:b8:52:b9:c3:d1:cc:dd:14:73:
                    54:19:b4:6e:22:2a:d5:cd:a6:1b:ba:0a:93:77:0e:
                    10:df:ca:56:69:0c:30:e5:61:19:fb:91:17:2c:f5:
                    34:e0:df:98:3b:3f:50:52:13:42:a8:4b:7a:60:51:
                    e7:b2:21:97:eb:0e:5c:89:b4:da:30:04:84:74:52:
                    b6:91:01:f6:9b:04:88:40:57:dc:6b:06:29:46:e3:
                    2c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:93:86:41:6C:88:11:BC:F8:E3:9F:E2:C0:17:92:56:0C:58:70:62
            X509v3 Authority Key Identifier:
                keyid:3A:12:0A:30:8B:3D:B5:1C:52:A4:F4:C0:A3:74:48:16:56:D3:FA:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/0/3A120A308B3DB51C52A4F4C0A374481656D3FA1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3A120A308B3DB51C52A4F4C0A374481656D3FA1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/0/323830343a363866383a3a2f33322d3438203d3e20323730323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:68f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:bc:3a:8a:cd:9e:28:8b:ae:4b:81:72:25:69:30:c7:48:75:
         a0:ae:34:12:0a:a0:03:3f:0f:25:a8:43:62:cd:d0:14:f2:7e:
         e2:3b:cd:86:08:cc:4c:c7:78:24:6b:73:37:02:9c:9f:c0:11:
         e5:b7:40:b4:52:68:81:a5:8c:47:2e:ab:0f:71:db:16:1f:f8:
         32:c4:9e:a7:3e:67:8f:53:38:12:ac:ee:a8:4f:96:27:eb:72:
         1f:77:8a:89:54:da:0c:5f:8c:40:c4:45:51:8e:84:b3:72:1b:
         72:6d:b8:72:e8:11:19:4f:25:a7:dd:a9:34:f5:6a:10:f8:bb:
         c7:f1:26:3a:c4:2a:d6:cd:f6:3b:87:a0:51:9e:ad:19:de:14:
         98:5b:95:8b:26:6b:73:d0:f2:ca:e6:8f:fa:3d:da:8b:19:85:
         5a:b3:2d:75:54:ad:4d:44:90:26:0e:9b:a8:03:88:54:fd:f9:
         2d:17:f5:5e:c9:12:e4:26:ab:04:a4:b5:ef:cd:d0:ba:e7:33:
         bd:7d:f9:52:06:78:f8:4f:46:30:bd:7d:12:f1:bb:ce:e0:58:
         de:69:85:9c:7c:86:e8:3f:24:e1:2f:82:92:32:4c:43:60:bb:
         dd:5e:f1:96:6d:b4:e2:fa:f9:b3:f0:b2:d5:61:5f:ae:bd:e9:
         78:db:fd:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----