Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/1/323830343a363164633a363030303a3a2f33362d3336203d3e20323639323631.roa
File:                     323830343a363164633a363030303a3a2f33362d3336203d3e20323639323631.roa (raw, json)
Hash identifier:          iFxrL1dXOVy2b5DQl+jjsor+irlac5VG3pMHQsAZrwI=
Subject key identifier:   3A:FB:71:E0:77:AE:FF:4C:76:6D:99:31:26:76:5A:58:5A:D4:80:26
Certificate issuer:       /CN=D6839DD8077CBDD2274A32A4537520F8C2C957C6
Certificate serial:       2C6C8ADC8DD9A7CE6C41DC8A85B63D7DD98DE912
Authority key identifier: D6:83:9D:D8:07:7C:BD:D2:27:4A:32:A4:53:75:20:F8:C2:C9:57:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D6839DD8077CBDD2274A32A4537520F8C2C957C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/1/323830343a363164633a363030303a3a2f33362d3336203d3e20323639323631.roa
Signing time:             Thu 09 Mar 2023 19:09:12 +0000
ROA not before:           Thu 09 Mar 2023 19:04:12 +0000
ROA not after:            Thu 07 Mar 2024 19:09:12 +0000
asID:                     269261
IP address blocks:        2804:61dc:6000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:6c:8a:dc:8d:d9:a7:ce:6c:41:dc:8a:85:b6:3d:7d:d9:8d:e9:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6839DD8077CBDD2274A32A4537520F8C2C957C6
        Validity
            Not Before: Mar  9 19:04:12 2023 GMT
            Not After : Mar  7 19:09:12 2024 GMT
        Subject: CN=3AFB71E077AEFF4C766D993126765A585AD48026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:53:e4:ae:aa:f0:3c:42:d8:8f:b9:b8:2a:b1:
                    6f:fa:98:24:e7:0f:c7:b0:bd:bf:72:06:b2:d1:b9:
                    f5:ba:a1:5b:07:74:a0:6a:a9:50:a6:f1:88:d4:c4:
                    6b:df:1e:4c:1c:c3:6f:47:4e:e8:84:d1:3f:f1:83:
                    04:e3:64:69:26:95:0e:02:02:07:ba:92:6a:07:82:
                    80:31:38:46:d7:f4:31:50:e3:2d:ac:4c:1a:46:52:
                    ff:65:fe:e4:2a:09:47:c0:3c:64:96:19:b6:ee:16:
                    4b:7f:73:0d:c3:90:5c:fb:7b:33:7e:fa:43:07:bb:
                    90:5f:b8:21:74:4c:76:2a:d8:65:6f:38:69:85:6d:
                    cf:f6:de:28:44:8f:cc:40:8c:73:09:6a:72:90:95:
                    43:7a:fd:f7:74:a7:bc:d4:af:56:89:e7:3d:dc:d9:
                    ae:d7:fe:ca:f8:c1:3c:33:59:8b:cc:c4:fd:64:ed:
                    2e:43:da:8c:51:49:85:18:c2:fa:d2:53:01:f1:7e:
                    36:89:4d:6f:9a:45:a7:cf:40:62:12:39:83:76:ff:
                    d0:2e:b4:45:c1:9b:91:a8:eb:12:25:5e:50:8b:c7:
                    b4:bf:dc:e5:6e:18:22:f1:da:21:b1:dd:ca:a0:11:
                    dd:ae:84:bc:b4:d9:b0:98:75:fa:45:78:a1:e6:07:
                    ae:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:FB:71:E0:77:AE:FF:4C:76:6D:99:31:26:76:5A:58:5A:D4:80:26
            X509v3 Authority Key Identifier:
                keyid:D6:83:9D:D8:07:7C:BD:D2:27:4A:32:A4:53:75:20:F8:C2:C9:57:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/1/D6839DD8077CBDD2274A32A4537520F8C2C957C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D6839DD8077CBDD2274A32A4537520F8C2C957C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/1/323830343a363164633a363030303a3a2f33362d3336203d3e20323639323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:61dc:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         bb:ce:f1:f6:1f:dd:1f:a1:b5:71:57:2d:b8:a1:76:52:2d:80:
         2d:2e:4a:bc:65:3c:23:72:c8:82:67:d8:89:df:29:3b:25:70:
         02:69:12:01:cf:dc:59:49:44:b8:43:38:54:62:4c:12:cc:98:
         f6:61:d5:ba:7d:12:b2:d2:48:f3:4e:1a:03:3f:fa:a4:6b:de:
         3b:5b:04:4c:5d:f3:ad:b0:dd:fc:6c:db:9a:98:9f:97:39:1b:
         ca:19:9a:73:99:00:66:14:7b:10:d8:06:e7:94:97:6c:f4:9c:
         f5:ba:eb:df:18:fd:f2:f1:ca:08:8a:92:ca:a3:63:ad:a2:f6:
         d3:0d:9f:18:42:1b:2a:b7:d0:fa:e3:f0:e4:1a:0e:53:5a:89:
         f3:97:d1:10:f8:a2:c3:dd:0b:98:08:6a:2f:e9:9c:11:8f:c0:
         86:57:b7:44:d5:04:a2:d2:b3:25:77:25:f2:f7:1a:2f:8d:2e:
         69:c1:b2:0d:f7:62:76:73:c2:b1:f8:49:e6:13:2c:d1:4a:8b:
         44:44:b2:5c:65:f0:4d:f4:3b:59:73:33:cc:75:88:0b:b9:0d:
         f5:c8:e6:ac:3e:a1:67:8d:89:d9:6d:be:e0:c3:a4:4e:49:4a:
         28:4b:10:17:34:ad:67:f4:3c:99:e8:46:55:b6:89:f0:f2:b0:
         cf:3a:46:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----