Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/0/323830343a373635343a3a2f33322d3332203d3e20323731313034.roa
File:                     323830343a373635343a3a2f33322d3332203d3e20323731313034.roa (raw, json)
Hash identifier:          GrDL6GFNx9Bh8CtMhwJdd67RoPRgZj7wOAOYb9H533k=
Subject key identifier:   04:E2:F3:6F:E4:F5:47:E0:BB:77:B9:D3:19:59:F6:F3:75:95:3F:D9
Certificate issuer:       /CN=696EBF66C996090BCB0C788A9A0A4BFCD2E1B31C
Certificate serial:       770E0C6145B55AD2F35F2253832319D62E95E7AC
Authority key identifier: 69:6E:BF:66:C9:96:09:0B:CB:0C:78:8A:9A:0A:4B:FC:D2:E1:B3:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/696EBF66C996090BCB0C788A9A0A4BFCD2E1B31C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/0/323830343a373635343a3a2f33322d3332203d3e20323731313034.roa
Signing time:             Tue 18 Apr 2023 23:42:14 +0000
ROA not before:           Tue 18 Apr 2023 23:37:14 +0000
ROA not after:            Tue 16 Apr 2024 23:42:14 +0000
asID:                     271104
IP address blocks:        2804:7654::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:0e:0c:61:45:b5:5a:d2:f3:5f:22:53:83:23:19:d6:2e:95:e7:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=696EBF66C996090BCB0C788A9A0A4BFCD2E1B31C
        Validity
            Not Before: Apr 18 23:37:14 2023 GMT
            Not After : Apr 16 23:42:14 2024 GMT
        Subject: CN=04E2F36FE4F547E0BB77B9D31959F6F375953FD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:50:ca:a0:37:a0:14:e3:f8:b2:e5:25:84:90:
                    0d:81:e1:fb:b9:b6:5a:c9:82:59:3b:dd:03:00:ca:
                    bc:04:ae:53:c6:6a:b0:b2:c6:66:cd:f7:34:af:12:
                    32:e6:e7:eb:28:f1:25:c8:5c:d6:ee:e5:83:b0:b0:
                    12:78:6f:dd:0d:af:4c:08:97:89:b9:36:95:4f:56:
                    d8:3d:e8:83:ff:c0:25:d6:31:eb:fa:cd:61:8d:78:
                    a7:20:9f:56:f9:de:e6:d3:b7:68:39:4b:bc:02:eb:
                    ad:b0:2c:9a:be:3c:86:d9:1e:c3:e9:63:cb:69:2c:
                    79:79:7e:63:69:f2:6f:31:13:32:10:29:c5:dc:c3:
                    d1:8b:ce:1d:b7:54:ae:98:2e:57:2a:26:fc:03:0e:
                    2e:bc:3d:3d:03:48:58:e8:bb:9f:01:41:1c:8d:da:
                    85:24:6c:f3:50:f8:49:0b:56:f1:43:da:e2:7e:38:
                    98:1e:87:00:4c:53:04:c1:65:88:47:39:68:83:95:
                    fc:62:aa:26:e2:1f:f2:de:9b:18:16:95:88:bc:f5:
                    84:47:ee:2e:d4:e4:d9:74:c4:a5:8d:48:0c:0f:89:
                    21:48:3d:4d:3a:d6:9b:e5:8f:20:5e:4a:b2:01:1d:
                    3b:fb:bc:04:7f:52:41:03:33:42:3a:72:4a:67:a6:
                    6f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E2:F3:6F:E4:F5:47:E0:BB:77:B9:D3:19:59:F6:F3:75:95:3F:D9
            X509v3 Authority Key Identifier:
                keyid:69:6E:BF:66:C9:96:09:0B:CB:0C:78:8A:9A:0A:4B:FC:D2:E1:B3:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/0/696EBF66C996090BCB0C788A9A0A4BFCD2E1B31C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/696EBF66C996090BCB0C788A9A0A4BFCD2E1B31C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/0/323830343a373635343a3a2f33322d3332203d3e20323731313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7654::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:98:0a:f5:fd:07:dd:d2:23:5f:28:de:df:f8:3d:a5:96:9e:
         75:6f:16:ab:98:c0:f7:e6:71:20:74:60:2c:fc:23:ea:8c:9d:
         ea:5b:e4:a2:da:27:0c:32:c6:8a:2d:7f:87:27:87:7a:a0:9c:
         f4:b2:ca:90:be:8c:21:6d:d2:fa:0c:78:23:22:94:e8:03:3a:
         ed:2d:60:6a:25:37:e5:82:f5:88:a0:3e:93:9e:c4:ea:92:84:
         1c:32:48:e5:48:0c:48:40:ea:4d:13:a1:9a:86:6c:71:d3:58:
         20:87:e9:be:95:04:4f:9b:ad:97:28:5b:87:3e:98:9c:73:91:
         2b:24:5e:1f:bf:8f:1e:19:ce:53:00:7c:8b:78:53:ae:e1:24:
         b3:07:40:19:e0:73:56:a2:91:58:e6:11:b3:b1:69:42:fb:03:
         f1:0f:67:42:bb:da:a1:0a:90:05:89:95:47:a7:ec:c5:bc:60:
         ef:3f:25:dc:c2:ae:8c:90:03:6f:c4:06:af:3b:89:43:d8:a0:
         ba:a6:9a:18:02:3a:a7:44:d1:11:a0:af:77:10:22:57:9c:14:
         47:fa:85:db:0c:e9:38:9f:78:a8:21:e6:f0:a9:37:88:92:e1:
         38:b6:78:1d:68:41:a3:53:59:91:d6:d3:08:16:b9:b7:72:85:
         0c:17:bf:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----