Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/0/323830343a363061303a633030303a3a2f33342d3438203d3e20323639313831.roa
File:                     323830343a363061303a633030303a3a2f33342d3438203d3e20323639313831.roa (raw, json)
Hash identifier:          qxC5T4jnq8YUREj3YgOkn3X8dh5K3MHwZJI+xl37qwc=
Subject key identifier:   2B:C6:22:46:01:C4:BF:00:EA:7E:C1:A2:78:00:60:ED:B9:5A:4C:34
Certificate issuer:       /CN=3C4CB5A739493355B552E0184545C33D55B37DD4
Certificate serial:       6FD9A968E6FC1AA3BC1A33419ED37B0549F7B30C
Authority key identifier: 3C:4C:B5:A7:39:49:33:55:B5:52:E0:18:45:45:C3:3D:55:B3:7D:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C4CB5A739493355B552E0184545C33D55B37DD4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/0/323830343a363061303a633030303a3a2f33342d3438203d3e20323639313831.roa
Signing time:             Mon 20 Nov 2023 13:16:13 +0000
ROA not before:           Mon 20 Nov 2023 13:11:13 +0000
ROA not after:            Mon 18 Nov 2024 13:16:13 +0000
asID:                     269181
IP address blocks:        2804:60a0:c000::/34 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:d9:a9:68:e6:fc:1a:a3:bc:1a:33:41:9e:d3:7b:05:49:f7:b3:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C4CB5A739493355B552E0184545C33D55B37DD4
        Validity
            Not Before: Nov 20 13:11:13 2023 GMT
            Not After : Nov 18 13:16:13 2024 GMT
        Subject: CN=2BC6224601C4BF00EA7EC1A2780060EDB95A4C34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f9:6f:00:ed:4c:0b:15:fe:eb:bb:d9:8d:88:
                    3d:59:14:aa:60:e5:23:3d:16:36:e2:f3:72:00:ee:
                    4a:c6:dc:27:74:26:6c:a7:72:50:da:90:29:76:55:
                    8e:17:0b:06:00:62:fe:f7:7b:b6:e7:4e:49:c4:c6:
                    d9:17:b9:eb:42:b2:93:11:0b:27:bf:58:bd:47:8f:
                    3c:c2:34:e1:15:05:68:41:06:8a:ec:4f:4c:e2:4d:
                    dd:11:63:b0:36:fe:86:91:b9:e9:e7:75:6b:2d:97:
                    a2:9e:ca:69:87:20:fb:cb:14:32:4f:5d:dd:6f:ab:
                    b1:69:4c:ca:2a:fd:2a:32:83:af:ee:22:f4:0b:1f:
                    d8:c0:0e:38:10:e1:19:66:fc:a7:cd:dd:0d:4d:69:
                    d6:9c:b8:3b:31:fb:7f:02:35:d6:cc:73:30:e1:74:
                    72:b8:a0:61:1d:09:6e:40:f8:1e:42:f9:5b:6b:f8:
                    81:82:61:0b:29:c2:c0:c5:23:2d:cf:be:79:d4:f3:
                    31:7a:e6:52:c3:36:e9:fa:d6:34:bc:8a:d2:b2:a2:
                    95:af:bf:4e:9a:ee:a4:7d:6e:85:f9:fa:ab:26:05:
                    54:af:6e:d3:f3:12:a9:6c:d9:e8:71:d0:81:ba:8b:
                    7e:19:f0:64:c0:bf:cc:dc:b6:85:51:94:90:27:31:
                    ee:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C6:22:46:01:C4:BF:00:EA:7E:C1:A2:78:00:60:ED:B9:5A:4C:34
            X509v3 Authority Key Identifier:
                keyid:3C:4C:B5:A7:39:49:33:55:B5:52:E0:18:45:45:C3:3D:55:B3:7D:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/0/3C4CB5A739493355B552E0184545C33D55B37DD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C4CB5A739493355B552E0184545C33D55B37DD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/0/323830343a363061303a633030303a3a2f33342d3438203d3e20323639313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60a0:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5c:1f:66:86:a8:be:c5:d2:8b:39:09:b5:fa:39:13:e9:e1:ce:
         d7:a1:bf:c3:9e:5d:c1:46:6a:4d:85:52:4f:de:2b:a5:aa:5f:
         ae:48:44:c9:63:bb:d8:16:48:26:d2:98:18:1b:b5:6b:14:77:
         20:65:d2:64:cc:a7:3b:c4:0b:49:5f:f0:a6:96:e3:dc:27:7f:
         19:6e:5e:44:37:c6:c3:e6:81:d7:0b:9f:c4:93:15:0d:53:82:
         3e:4c:41:ab:a4:d9:bb:3c:26:69:86:75:a6:6d:7b:0a:ad:78:
         7d:91:ef:34:80:bd:96:8b:a7:7a:bb:70:ff:7b:7d:f3:cd:ea:
         05:e7:cf:7a:0e:39:3e:19:5a:1a:82:e3:83:83:b6:23:87:cc:
         4d:cc:5c:38:88:7f:72:87:43:0d:14:3a:d6:50:09:eb:a5:b2:
         7b:3d:dc:a9:df:a3:19:87:b0:13:1c:61:ac:6b:5d:b0:66:cc:
         35:da:f6:40:dc:49:21:81:38:7c:01:bc:df:47:35:14:53:6b:
         2d:25:27:0b:d5:80:25:32:ed:8a:3c:b8:f8:b8:97:df:55:9e:
         07:3e:4b:7e:7d:18:76:70:95:95:0e:c6:ab:49:7f:26:8f:4c:
         6b:00:5c:b8:12:e9:e9:7e:00:68:5b:21:94:5c:3b:42:c0:e3:
         54:5d:b4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----