Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a363030343a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a363030343a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          dz6L5r5za9b0embGzYhewRWci1Jyh0llZFzHI07XQz4=
Subject key identifier:   BE:FE:D6:0B:6F:C6:87:A9:B7:17:1D:3E:0A:81:A7:3B:9E:61:0B:47
Certificate issuer:       /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial:       0382943F1E27B6E09CDF00EE001101581B025F1E
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a363030343a3a2f34382d3438203d3e203532373036.roa
Signing time:             Thu 20 Jul 2023 14:40:17 +0000
ROA not before:           Thu 20 Jul 2023 14:35:17 +0000
ROA not after:            Thu 18 Jul 2024 14:40:17 +0000
asID:                     52706
IP address blocks:        2804:c70:6004::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:82:94:3f:1e:27:b6:e0:9c:df:00:ee:00:11:01:58:1b:02:5f:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
        Validity
            Not Before: Jul 20 14:35:17 2023 GMT
            Not After : Jul 18 14:40:17 2024 GMT
        Subject: CN=BEFED60B6FC687A9B7171D3E0A81A73B9E610B47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:30:7a:ce:35:be:49:00:7f:7e:34:42:5f:bb:
                    29:27:f9:d0:71:d4:14:91:b5:f5:fc:28:5f:e6:86:
                    86:a4:88:0d:73:7f:4f:a8:f9:66:b7:a2:f9:be:c6:
                    de:eb:b7:01:2d:84:63:8e:58:c2:ae:c9:2c:c6:77:
                    c5:6a:91:92:de:70:cd:e2:6f:f2:c0:18:3f:31:67:
                    1b:92:17:c6:bd:62:03:82:38:5a:94:97:55:05:65:
                    f3:a2:70:f4:40:35:24:b4:3c:7c:5e:40:fc:36:58:
                    59:03:65:34:99:4c:48:6b:78:41:bd:34:33:cc:0e:
                    ff:0b:28:3d:53:9e:b5:e3:0a:43:de:2e:1c:5a:e9:
                    a2:49:6a:b2:e4:9e:4a:75:ed:61:61:87:2b:77:cb:
                    a3:c3:e6:cb:93:2c:4d:9e:18:72:72:70:11:54:7f:
                    f7:2d:54:b3:37:21:bf:21:63:8a:39:2d:17:1b:5b:
                    1c:a1:59:36:da:2e:74:dc:48:f4:c0:f0:a7:f2:15:
                    e0:e1:a8:26:92:be:4b:58:f5:25:78:53:c8:8f:0f:
                    1f:3e:65:0a:d7:27:7f:7d:0f:cb:bf:cc:87:2c:a2:
                    3e:b2:ac:65:ab:91:31:90:f9:08:d9:ef:0c:37:65:
                    7a:01:bf:af:64:ac:e0:0e:67:ee:50:19:1b:d9:c5:
                    a7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:FE:D6:0B:6F:C6:87:A9:B7:17:1D:3E:0A:81:A7:3B:9E:61:0B:47
            X509v3 Authority Key Identifier:
                keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a363030343a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:6004::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:69:bf:0c:da:b5:05:c8:c0:85:ff:c1:4a:a5:47:5f:f1:94:
         a6:63:e9:ca:f0:b0:f6:f3:46:1d:67:07:e1:3b:7a:c8:49:f8:
         25:fd:9b:f9:86:27:87:fb:76:86:31:08:84:c8:ad:a2:e6:49:
         d7:fc:32:b4:08:75:0b:9f:99:74:fd:e5:40:29:76:1e:3a:5e:
         0b:5c:52:3a:9d:0d:eb:7d:60:ee:bc:97:7d:32:2e:33:04:5f:
         f3:6e:5c:cb:2c:37:41:d8:91:89:72:e3:d6:a5:86:57:94:6b:
         b0:bd:31:a6:18:eb:98:f6:7f:6c:0f:f6:cb:66:0b:a4:a4:c5:
         0f:c8:b3:77:fb:1f:ba:f8:58:92:aa:69:8f:3a:48:76:9f:ba:
         a7:81:2f:59:df:02:d5:ef:ec:45:3c:d8:68:71:ab:a9:3f:b6:
         83:5a:2f:fe:99:58:c8:05:52:b0:82:87:01:06:a7:de:a1:f8:
         47:a7:b9:fa:28:37:3b:0d:11:49:1d:ad:f1:33:27:19:a3:48:
         d1:51:2d:23:77:a0:0b:9e:5c:76:ab:62:39:7f:c5:57:d2:45:
         02:e3:0f:28:3d:f9:2d:eb:eb:52:d3:b6:4e:3c:30:9e:f2:2e:
         b7:da:df:f7:78:9b:27:ff:fe:15:db:81:b3:47:65:9f:63:fe:
         58:20:88:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----