Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0/323830343a336564343a313030313a3a2f34382d3438203d3e20323636363233.roa
File:                     323830343a336564343a313030313a3a2f34382d3438203d3e20323636363233.roa (raw, json)
Hash identifier:          wEMuYycA7xNWx9zrYg0kp/0y7pkSns2RC5BLCzUfzRk=
Subject key identifier:   A3:34:33:49:45:D6:1B:74:43:5D:30:38:06:6D:FB:F5:9A:AD:5F:BE
Certificate issuer:       /CN=3D4374364DEF0A3AD31C3F4544E415B9EC6C7083
Certificate serial:       6F46B9937886B8D0BDA41DB654EAB64D5BE94E9A
Authority key identifier: 3D:43:74:36:4D:EF:0A:3A:D3:1C:3F:45:44:E4:15:B9:EC:6C:70:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D4374364DEF0A3AD31C3F4544E415B9EC6C7083.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0/323830343a336564343a313030313a3a2f34382d3438203d3e20323636363233.roa
Signing time:             Thu 14 Mar 2024 02:18:25 +0000
ROA not before:           Thu 14 Mar 2024 02:13:25 +0000
ROA not after:            Thu 13 Mar 2025 02:18:25 +0000
asID:                     266623
IP address blocks:        2804:3ed4:1001::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:46:b9:93:78:86:b8:d0:bd:a4:1d:b6:54:ea:b6:4d:5b:e9:4e:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D4374364DEF0A3AD31C3F4544E415B9EC6C7083
        Validity
            Not Before: Mar 14 02:13:25 2024 GMT
            Not After : Mar 13 02:18:25 2025 GMT
        Subject: CN=A334334945D61B74435D3038066DFBF59AAD5FBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:13:a7:26:86:22:25:82:6b:dd:13:95:6b:3e:
                    f8:9f:36:69:db:9a:19:04:5c:0e:8c:5d:d8:4b:9f:
                    b2:ed:d2:46:dc:8b:d4:19:bf:c8:27:ac:1c:66:39:
                    4b:94:13:ff:3d:48:8f:11:a9:50:20:b6:65:e6:c8:
                    2c:9f:6a:47:c0:9b:a9:ca:c1:ac:4a:4c:41:82:d5:
                    b4:b3:b5:72:62:99:56:29:8b:a1:93:30:eb:c4:55:
                    45:46:66:ca:c9:27:1c:6c:fe:e6:dc:a5:29:e3:13:
                    0d:b0:3b:c8:98:10:d5:1a:1b:04:1c:41:83:88:7a:
                    dd:4b:c1:81:df:11:82:bd:e9:d5:5a:05:b4:0e:35:
                    55:ad:3c:1e:f3:1a:e2:a8:7b:e0:1b:e1:e8:59:47:
                    77:58:05:bf:b8:e7:c7:fa:a5:65:57:92:a3:37:70:
                    1e:9a:4d:f3:b6:55:98:58:d1:13:ec:64:81:80:89:
                    9b:7b:0b:ca:d7:bb:2a:3f:31:bf:93:65:6d:74:ff:
                    7a:cf:8d:5f:60:df:bb:89:c9:ec:e7:c8:51:fc:ec:
                    8d:65:17:45:4f:42:a8:bf:d9:38:a2:25:96:cc:cc:
                    75:d6:9d:0b:08:2b:19:85:7b:0a:be:ee:3b:3c:70:
                    4a:d0:a7:e6:af:af:0a:30:21:b6:8f:f2:19:1b:7f:
                    6d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:34:33:49:45:D6:1B:74:43:5D:30:38:06:6D:FB:F5:9A:AD:5F:BE
            X509v3 Authority Key Identifier:
                keyid:3D:43:74:36:4D:EF:0A:3A:D3:1C:3F:45:44:E4:15:B9:EC:6C:70:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0/3D4374364DEF0A3AD31C3F4544E415B9EC6C7083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D4374364DEF0A3AD31C3F4544E415B9EC6C7083.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0/323830343a336564343a313030313a3a2f34382d3438203d3e20323636363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ed4:1001::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:c5:7d:d7:75:d9:a8:a5:d4:46:91:cc:ad:d1:c0:27:55:eb:
         35:4e:2f:5e:2a:c6:01:4f:d6:e9:d6:8d:4f:ca:0e:7f:b2:3c:
         4d:c3:b2:da:43:55:95:6d:cd:0f:f8:ba:9b:db:b0:ed:63:3c:
         ec:85:08:d8:41:07:b9:fa:69:26:ec:87:a0:c0:34:71:64:f0:
         98:66:69:be:ef:59:cb:fe:e0:8a:1d:63:29:91:04:1f:a4:3e:
         aa:93:27:1e:90:94:49:a4:9f:45:d0:4e:15:f3:d3:91:06:3d:
         25:57:5a:38:ea:6d:94:7b:0a:40:25:72:d8:cb:16:c1:11:10:
         97:0e:3c:9b:d4:4f:84:55:6d:b2:a1:3c:a1:11:db:75:65:f8:
         fe:5d:1a:73:82:54:ae:1d:73:e3:7a:3b:23:18:18:0d:97:19:
         23:b8:0f:42:e1:5c:a1:ed:f1:be:2d:b4:9e:40:1d:27:c7:c1:
         00:bb:a1:31:71:0f:91:69:98:7b:62:0f:24:d7:ae:0c:66:49:
         9d:65:f5:11:72:d6:69:82:40:c5:c2:ad:be:d6:4a:25:3d:21:
         e2:47:76:45:0a:83:31:04:7f:fb:55:17:d1:ef:16:74:6e:60:
         cb:3e:16:97:3c:fa:86:a1:16:9d:98:ab:b6:03:e1:ec:24:f9:
         69:4b:da:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----