Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D9fvSw8R3fiuREoP2LjmD1HpEguzb3be4sFDzqsy8mo1/1/323830343a343538383a3a2f33322d313238203d3e20323636393333.roa
File:                     323830343a343538383a3a2f33322d313238203d3e20323636393333.roa (raw, json)
Hash identifier:          aCgDEz08RD8KOspGqORQHMO2gXOJqU4K9wxu3fR7k0w=
Subject key identifier:   8B:32:FE:89:31:9E:03:02:A7:C4:B6:8F:02:EC:79:D0:0B:65:8E:B1
Certificate issuer:       /CN=6F6DFF0B38F4FB597A0F7EAF363EDA374F9F6EA2
Certificate serial:       5146C92C3D7467235C212C66CAAE6591A0F7E752
Authority key identifier: 6F:6D:FF:0B:38:F4:FB:59:7A:0F:7E:AF:36:3E:DA:37:4F:9F:6E:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F6DFF0B38F4FB597A0F7EAF363EDA374F9F6EA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9fvSw8R3fiuREoP2LjmD1HpEguzb3be4sFDzqsy8mo1/1/323830343a343538383a3a2f33322d313238203d3e20323636393333.roa
Signing time:             Thu 11 Apr 2024 12:20:11 +0000
ROA not before:           Thu 11 Apr 2024 12:15:11 +0000
ROA not after:            Thu 10 Apr 2025 12:20:11 +0000
asID:                     266933
IP address blocks:        2804:4588::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:46:c9:2c:3d:74:67:23:5c:21:2c:66:ca:ae:65:91:a0:f7:e7:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F6DFF0B38F4FB597A0F7EAF363EDA374F9F6EA2
        Validity
            Not Before: Apr 11 12:15:11 2024 GMT
            Not After : Apr 10 12:20:11 2025 GMT
        Subject: CN=8B32FE89319E0302A7C4B68F02EC79D00B658EB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:91:f4:4b:47:a0:d3:3d:1d:1a:09:fe:23:0d:
                    c7:8d:b1:ad:b9:1b:6d:f6:34:ca:32:44:07:cc:40:
                    70:99:39:10:83:3d:3e:85:f2:43:87:6b:a8:eb:f4:
                    72:8e:bb:2a:a2:3f:e7:e3:d7:13:3c:6b:cf:b1:43:
                    2c:90:d8:41:4f:aa:1f:93:16:97:ee:39:78:19:1d:
                    94:31:30:31:d3:03:ea:fc:4a:87:c2:07:6d:4c:a5:
                    fe:64:11:64:f6:a4:41:97:e3:4b:06:fe:41:a9:50:
                    fd:22:0e:1b:15:c6:44:c8:d1:75:0d:e7:95:49:d6:
                    74:f8:c0:38:61:46:5c:cb:0f:9f:f9:d0:92:65:3e:
                    21:37:94:a1:b7:d3:fe:5a:98:e4:bb:af:11:41:5f:
                    34:b9:34:0a:a2:41:e3:27:d4:35:5c:d3:84:10:21:
                    e5:be:59:b2:0a:9e:a8:bc:e0:35:7b:9d:b5:81:b7:
                    d3:9a:ef:62:ff:78:39:13:9e:28:7d:92:e1:be:a3:
                    34:4b:a7:ed:a8:69:72:75:89:18:95:1f:d4:d2:7e:
                    1b:fb:92:09:5a:20:bb:eb:f0:ea:bf:97:e2:6e:72:
                    28:8d:bf:9f:a8:fe:66:98:54:31:10:d3:0e:6a:54:
                    0a:b5:6f:6b:e1:0e:80:f1:65:eb:89:28:21:da:c4:
                    f9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:32:FE:89:31:9E:03:02:A7:C4:B6:8F:02:EC:79:D0:0B:65:8E:B1
            X509v3 Authority Key Identifier:
                keyid:6F:6D:FF:0B:38:F4:FB:59:7A:0F:7E:AF:36:3E:DA:37:4F:9F:6E:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9fvSw8R3fiuREoP2LjmD1HpEguzb3be4sFDzqsy8mo1/1/6F6DFF0B38F4FB597A0F7EAF363EDA374F9F6EA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F6DFF0B38F4FB597A0F7EAF363EDA374F9F6EA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9fvSw8R3fiuREoP2LjmD1HpEguzb3be4sFDzqsy8mo1/1/323830343a343538383a3a2f33322d313238203d3e20323636393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4588::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:54:45:2a:a9:66:fc:ef:20:eb:3f:fb:c0:16:af:ac:16:0e:
         27:f0:0e:69:71:ad:c1:8a:da:c7:ef:2e:0f:c9:32:f9:93:78:
         3f:ce:ab:3e:2d:03:a1:b7:41:a9:cd:bc:ff:43:76:5e:8d:cc:
         30:5e:fb:85:b2:5f:b3:00:46:29:c4:cd:12:72:ec:4b:80:48:
         d2:16:fd:28:56:20:e4:59:38:ff:a1:35:86:76:39:a8:62:ac:
         77:d5:fc:90:30:a8:f0:4b:c6:b1:96:21:f3:4e:94:aa:6f:fb:
         30:76:bf:78:f4:7c:9c:7b:9f:99:e8:54:50:17:f4:12:ab:41:
         db:ae:7d:58:34:65:27:0f:54:06:80:9a:87:27:ab:d6:40:8d:
         dd:6a:8e:8e:29:c6:23:2e:2d:6b:8f:cd:cf:8b:a7:41:58:e4:
         51:57:5f:48:50:ed:12:86:9e:28:af:e1:35:0d:43:34:fc:e3:
         b2:f0:bc:c8:80:02:4f:72:16:c1:a5:a4:d7:53:6c:55:c1:d0:
         1b:6b:74:ef:38:45:aa:4d:39:7c:5b:37:13:69:82:3f:e6:f7:
         03:61:c1:11:97:25:9b:d3:d9:d6:12:40:5e:6f:0e:86:fd:08:
         f3:01:0a:a8:f2:a1:79:2f:2d:b7:d5:05:67:3b:7e:c0:e0:2d:
         71:cb:88:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----