Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0/323830343a336564343a313030303a3a2f34382d3438203d3e20323636363233.roa
File:                     323830343a336564343a313030303a3a2f34382d3438203d3e20323636363233.roa (raw, json)
Hash identifier:          5+dPF49hqR8FCABY/8wk8sB1Ax80Wh99Sp+AhVBb7Dc=
Subject key identifier:   70:F2:3B:AC:92:D6:F1:89:08:93:4E:58:26:5E:15:11:4D:0E:62:E3
Certificate issuer:       /CN=3D4374364DEF0A3AD31C3F4544E415B9EC6C7083
Certificate serial:       1DE3426D4F1FACE31036F0FB660CBF3D99194BA2
Authority key identifier: 3D:43:74:36:4D:EF:0A:3A:D3:1C:3F:45:44:E4:15:B9:EC:6C:70:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D4374364DEF0A3AD31C3F4544E415B9EC6C7083.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0/323830343a336564343a313030303a3a2f34382d3438203d3e20323636363233.roa
Signing time:             Thu 14 Mar 2024 02:18:18 +0000
ROA not before:           Thu 14 Mar 2024 02:13:18 +0000
ROA not after:            Thu 13 Mar 2025 02:18:18 +0000
asID:                     266623
IP address blocks:        2804:3ed4:1000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:e3:42:6d:4f:1f:ac:e3:10:36:f0:fb:66:0c:bf:3d:99:19:4b:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D4374364DEF0A3AD31C3F4544E415B9EC6C7083
        Validity
            Not Before: Mar 14 02:13:18 2024 GMT
            Not After : Mar 13 02:18:18 2025 GMT
        Subject: CN=70F23BAC92D6F18908934E58265E15114D0E62E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9c:b6:04:3b:48:f7:03:bd:cc:e0:5b:72:10:
                    a7:73:e0:91:58:62:5e:cd:ec:94:c6:cc:88:54:41:
                    7b:82:7c:90:e9:c0:1b:02:27:cf:c3:1a:f4:68:a0:
                    1a:ad:bc:d1:28:d7:ec:a5:85:93:46:65:58:55:af:
                    ec:68:db:6c:14:02:7a:f2:34:80:a3:f6:9a:d8:f5:
                    b3:cd:a8:bd:8e:28:a2:d9:65:d1:39:78:a8:fb:6a:
                    32:12:ef:5c:f5:43:f3:94:bc:2a:d5:c1:e2:d1:90:
                    d1:a9:19:47:14:59:3a:ec:a2:b3:30:42:9a:01:8e:
                    16:66:70:8d:69:31:39:b0:42:d3:34:89:1f:65:89:
                    28:45:9a:c8:ec:ad:f2:97:c3:c5:86:f0:83:7e:0c:
                    91:4c:ef:35:be:74:ba:c0:7f:ab:45:4d:b2:d6:3a:
                    cd:db:83:e4:fb:fb:38:c7:1f:69:d8:78:be:e2:59:
                    7a:b6:ce:8b:ba:27:62:c2:1c:21:87:ea:59:57:91:
                    1c:22:62:ae:71:e7:69:fa:03:cf:b5:07:bf:5f:bf:
                    98:1e:af:59:cf:d4:e8:0e:21:4e:a0:12:ea:40:28:
                    c2:84:78:22:8c:96:dd:59:66:83:65:9e:c1:0a:22:
                    21:b9:e7:30:b4:6e:68:82:66:c1:02:b7:ea:a3:a3:
                    b4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F2:3B:AC:92:D6:F1:89:08:93:4E:58:26:5E:15:11:4D:0E:62:E3
            X509v3 Authority Key Identifier:
                keyid:3D:43:74:36:4D:EF:0A:3A:D3:1C:3F:45:44:E4:15:B9:EC:6C:70:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0/3D4374364DEF0A3AD31C3F4544E415B9EC6C7083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D4374364DEF0A3AD31C3F4544E415B9EC6C7083.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0/323830343a336564343a313030303a3a2f34382d3438203d3e20323636363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ed4:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:5e:2d:1f:f7:ed:39:98:de:0b:86:ed:2e:31:11:ab:1a:b7:
         47:1f:f9:f3:e5:84:cf:31:aa:6f:a0:79:07:91:45:84:5b:a5:
         64:65:4d:07:54:ef:b6:ae:08:87:7f:f4:bc:96:8a:2f:62:63:
         9c:15:bd:8d:b1:b3:e7:f6:17:ef:7c:6f:b3:23:40:ea:f0:55:
         4b:25:f9:a6:48:96:1c:78:33:37:c6:2f:14:4f:b0:43:2b:49:
         8c:51:9e:2b:79:c1:4e:bc:fc:fc:7d:a8:c2:9b:0e:84:09:da:
         99:92:eb:79:70:01:83:e9:31:ea:b6:10:8d:c4:91:b1:d0:03:
         ee:5f:11:d0:17:36:1c:6d:a0:fe:71:15:48:d6:b2:91:cd:ee:
         8c:aa:5c:a3:a7:f3:0e:59:6d:58:c4:ab:2d:f5:26:cd:7b:10:
         b8:03:88:88:ab:87:c7:fe:93:b5:99:c5:d4:22:19:49:ea:52:
         02:4f:b6:70:d4:f0:01:45:cc:99:3a:91:be:51:2d:0e:38:8a:
         1f:53:4b:7d:7a:c0:dd:ce:60:f9:7e:b5:ee:7f:1a:c2:95:97:
         36:60:36:3f:77:1f:87:38:72:34:bc:3e:67:81:c5:57:d6:3d:
         71:01:f8:ff:a4:22:82:ba:5e:c6:9a:87:97:72:49:3c:92:d9:
         b7:06:6c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----