Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5cxsWUhpvtfQXvJMfKnvEp4UfSbjqPkUoHhhpRXHDgJp/0/323830343a356631303a3a2f33322d3334203d3e20323639303734.roa
File:                     323830343a356631303a3a2f33322d3334203d3e20323639303734.roa (raw, json)
Hash identifier:          euloOdnFcLQcec4Q3DkhDDJJFKewhh6smzZT7/QeaIc=
Subject key identifier:   0F:8B:F5:D8:BC:34:98:53:81:34:01:97:58:A3:6A:CC:38:CB:D6:9B
Certificate issuer:       /CN=6DFBBB883729CEDE9404E1D96E38F41C751B4A7F
Certificate serial:       216A7F72C61EA781342F738F7FCA09CF3B7150AF
Authority key identifier: 6D:FB:BB:88:37:29:CE:DE:94:04:E1:D9:6E:38:F4:1C:75:1B:4A:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6DFBBB883729CEDE9404E1D96E38F41C751B4A7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5cxsWUhpvtfQXvJMfKnvEp4UfSbjqPkUoHhhpRXHDgJp/0/323830343a356631303a3a2f33322d3334203d3e20323639303734.roa
Signing time:             Thu 01 Jun 2023 20:00:00 +0000
ROA not before:           Thu 01 Jun 2023 19:55:00 +0000
ROA not after:            Sat 01 Jun 2024 20:00:00 +0000
asID:                     269074
IP address blocks:        2804:5f10::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:6a:7f:72:c6:1e:a7:81:34:2f:73:8f:7f:ca:09:cf:3b:71:50:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DFBBB883729CEDE9404E1D96E38F41C751B4A7F
        Validity
            Not Before: Jun  1 19:55:00 2023 GMT
            Not After : Jun  1 20:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6b:e9:bc:cc:04:3c:2a:d4:ed:c4:d5:bf:b2:
                    2d:3b:b9:da:24:99:c8:0a:40:4b:51:b2:69:9d:95:
                    04:24:e5:c6:19:a4:6f:31:81:c8:9e:a1:3d:7d:f4:
                    43:f7:67:95:8f:df:b4:88:6f:da:87:a4:66:59:6d:
                    7f:e3:dd:6d:6d:f2:a5:8f:80:9f:5d:a8:ed:08:7e:
                    16:96:39:94:78:46:f4:f9:fc:c0:60:fd:c3:f3:b8:
                    11:50:04:4e:9b:ed:84:0e:ed:2e:1e:4b:f7:f5:57:
                    2a:cd:13:5d:f2:01:82:84:41:50:42:c8:7a:6f:e9:
                    df:06:28:cc:85:b3:65:6d:94:f3:59:53:e6:5e:19:
                    e8:dd:f6:75:68:3f:ff:50:05:ea:16:54:43:ee:36:
                    c7:f0:82:bb:36:c6:08:91:1b:78:ed:43:de:a8:af:
                    d4:e7:fb:58:11:8d:62:16:b3:cd:fd:69:43:3e:14:
                    4a:7c:96:87:d1:b9:cf:23:3b:0d:d2:8c:26:23:4d:
                    54:8e:b6:fd:90:f3:1b:f6:ca:49:c0:8a:b6:dd:2f:
                    3c:b4:ba:1f:b4:d6:6a:2b:5f:ee:ca:ea:2e:3a:53:
                    78:14:ef:58:2b:e8:56:80:53:13:df:80:4e:75:64:
                    39:2b:8c:17:53:66:0e:a4:e1:18:ce:0f:78:06:37:
                    91:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:8B:F5:D8:BC:34:98:53:81:34:01:97:58:A3:6A:CC:38:CB:D6:9B
            X509v3 Authority Key Identifier:
                keyid:6D:FB:BB:88:37:29:CE:DE:94:04:E1:D9:6E:38:F4:1C:75:1B:4A:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5cxsWUhpvtfQXvJMfKnvEp4UfSbjqPkUoHhhpRXHDgJp/0/6DFBBB883729CEDE9404E1D96E38F41C751B4A7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6DFBBB883729CEDE9404E1D96E38F41C751B4A7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5cxsWUhpvtfQXvJMfKnvEp4UfSbjqPkUoHhhpRXHDgJp/0/323830343a356631303a3a2f33322d3334203d3e20323639303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f10::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:e0:ba:df:81:57:17:bc:2f:32:30:cc:5a:19:87:45:ff:69:
         1a:08:b7:f0:50:b7:02:4e:b5:73:78:de:11:25:c7:88:1f:bd:
         43:d3:a1:db:36:ce:6f:70:3d:da:28:e1:c3:a3:c0:14:5a:0f:
         61:fa:fb:56:10:4f:82:8d:2f:f3:94:f6:71:b2:6e:9b:4e:96:
         f1:19:c1:32:e3:60:9d:44:68:c3:d5:39:13:4f:b8:b0:fa:13:
         67:a3:ef:45:86:9a:e8:c9:39:2e:09:22:5c:aa:ab:67:5f:74:
         a8:6a:d2:53:ca:74:0e:df:88:e6:ec:16:81:11:ca:78:1e:e1:
         bf:48:3c:42:e5:37:ce:a0:68:bb:b8:14:c9:b8:6c:3f:c1:3d:
         92:a7:27:56:e5:60:fc:72:92:ba:2d:29:c6:c3:31:b0:db:3c:
         c8:fc:e4:29:21:43:89:29:d2:4f:f5:8a:bb:47:46:f7:7d:c7:
         98:56:66:df:43:96:f7:95:a3:97:4b:d6:c6:cd:92:53:a8:79:
         b6:75:22:7d:9e:91:cb:2d:97:04:7a:5e:bf:e0:72:63:ed:21:
         7e:a7:6c:04:3b:18:5b:c8:18:ca:e7:45:63:6d:64:16:31:22:
         25:95:47:b9:5d:e6:8e:24:98:6a:5a:42:99:8d:6c:a5:86:a4:
         c7:25:33:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----