Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a633030303a3a2f33352d3335203d3e20323637303237.roa
File:                     323830343a343730383a633030303a3a2f33352d3335203d3e20323637303237.roa (raw, json)
Hash identifier:          1Pd8inW1bm8HTW6oP/Pa4MXi/AmcS1wSmYEbst6JPko=
Subject key identifier:   DA:CB:76:78:E0:1F:FD:CF:F4:AE:A3:27:3E:BD:7A:5E:35:45:53:BD
Certificate issuer:       /CN=B776754A2C8B100218B061AA79BE9186F191500D
Certificate serial:       610C2F4B8E4C00BFDAFD3977C39B848CDC8A3D5A
Authority key identifier: B7:76:75:4A:2C:8B:10:02:18:B0:61:AA:79:BE:91:86:F1:91:50:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B776754A2C8B100218B061AA79BE9186F191500D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a633030303a3a2f33352d3335203d3e20323637303237.roa
Signing time:             Sat 11 Nov 2023 20:59:32 +0000
ROA not before:           Sat 11 Nov 2023 20:54:32 +0000
ROA not after:            Sat 09 Nov 2024 20:59:32 +0000
asID:                     267027
IP address blocks:        2804:4708:c000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:0c:2f:4b:8e:4c:00:bf:da:fd:39:77:c3:9b:84:8c:dc:8a:3d:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B776754A2C8B100218B061AA79BE9186F191500D
        Validity
            Not Before: Nov 11 20:54:32 2023 GMT
            Not After : Nov  9 20:59:32 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:62:4e:40:15:81:43:08:7d:49:ac:d4:e0:33:
                    51:4f:74:48:c5:bd:25:3e:21:3a:12:12:78:d8:1a:
                    bb:df:86:40:8b:19:a2:a6:39:f1:9e:9c:45:ff:0b:
                    cb:f4:ce:07:e9:b1:88:dd:8d:64:dd:18:f8:10:f2:
                    56:5b:de:08:90:4e:e2:4c:55:8d:9c:8b:09:f4:cc:
                    ff:fe:37:f6:aa:4a:c7:86:90:c8:82:4b:2e:37:5d:
                    3e:0b:bf:c1:2d:7b:5e:83:a5:ca:9c:88:cc:50:4f:
                    98:0b:47:b1:76:ad:7a:41:ff:f5:c2:fd:87:ec:0c:
                    60:d6:78:b1:cb:70:8a:3f:ed:ed:a7:95:ec:32:aa:
                    0d:cd:b3:0c:9f:7b:d9:96:d4:c1:1e:62:ca:e3:63:
                    09:d3:c9:a1:ef:4a:ae:3f:55:f4:0f:96:f9:27:8f:
                    51:43:67:da:87:3c:da:22:ab:05:39:24:3f:72:be:
                    80:a7:1d:bb:b8:61:f8:12:62:6f:7a:7a:29:c8:04:
                    35:7c:81:88:a7:7f:e6:da:b8:8e:3f:34:b5:08:7b:
                    8d:7a:c3:43:30:60:31:4a:ce:51:33:87:84:7d:01:
                    b3:19:38:ed:ab:f8:a7:c2:6c:07:a9:5d:0f:e5:8f:
                    ad:24:c2:07:54:05:3d:c0:68:d4:10:24:0f:d9:97:
                    ed:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:CB:76:78:E0:1F:FD:CF:F4:AE:A3:27:3E:BD:7A:5E:35:45:53:BD
            X509v3 Authority Key Identifier:
                keyid:B7:76:75:4A:2C:8B:10:02:18:B0:61:AA:79:BE:91:86:F1:91:50:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/B776754A2C8B100218B061AA79BE9186F191500D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B776754A2C8B100218B061AA79BE9186F191500D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a633030303a3a2f33352d3335203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4708:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         5e:56:0e:47:7a:84:7a:a5:9f:75:ea:69:fb:84:6d:fd:44:1f:
         c3:f9:90:95:3a:3f:01:1a:ab:47:eb:08:fe:99:0b:e5:2b:b3:
         a5:49:58:87:59:b4:7e:3c:1e:49:6c:56:7c:8d:95:5b:cc:a9:
         ce:35:4b:f3:c9:11:fb:e2:f8:ef:2b:24:9e:8e:3e:9e:b0:e0:
         d3:00:15:8b:1b:d3:11:ef:14:3c:6f:3f:73:76:7e:c8:b5:01:
         04:24:64:a1:5f:97:c9:03:51:03:b6:cf:19:14:a4:40:c9:b3:
         9f:f4:cd:39:30:36:7f:24:2a:10:cc:88:93:ab:57:d1:6e:d9:
         38:ea:7c:e7:b9:23:20:06:93:f9:b5:de:93:bb:99:aa:5c:97:
         3d:22:79:11:e4:f8:22:da:a4:46:b9:eb:21:f8:47:06:37:eb:
         83:0c:b7:3f:70:0b:1a:9b:31:37:f8:1e:80:b3:49:02:c8:b0:
         21:ae:f4:1e:24:bf:0c:c3:a2:12:95:9f:29:00:e5:b3:f7:1e:
         9b:90:5e:9d:94:4f:1d:aa:67:c2:c1:d8:ac:b5:4b:e4:80:23:
         05:ba:60:76:0f:e6:11:bf:63:dc:a6:12:e0:f7:29:ec:43:5d:
         5f:bc:c7:de:3c:49:59:5d:eb:38:5d:75:e6:15:bb:43:88:ae:
         6d:73:27:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----