Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/0/323830343a313634633a616263623a3a2f34382d3438203d3e20323633323830.roa
File:                     323830343a313634633a616263623a3a2f34382d3438203d3e20323633323830.roa (raw, json)
Hash identifier:          Rp0O1LoM3zSal2riJUFyt+YcSxtG1AMQoA4tMcczjlQ=
Subject key identifier:   50:37:BA:82:26:D5:0C:90:C2:34:77:D5:B8:25:6E:6F:45:2C:AC:3D
Certificate issuer:       /CN=BDF79EFB23D70999B2F88388D7AC7018CCF52374
Certificate serial:       377E5DA18853FCDEBE7CC4013ECB073FA3C4C051
Authority key identifier: BD:F7:9E:FB:23:D7:09:99:B2:F8:83:88:D7:AC:70:18:CC:F5:23:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDF79EFB23D70999B2F88388D7AC7018CCF52374.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/0/323830343a313634633a616263623a3a2f34382d3438203d3e20323633323830.roa
Signing time:             Thu 19 Oct 2023 13:28:48 +0000
ROA not before:           Thu 19 Oct 2023 13:23:48 +0000
ROA not after:            Thu 17 Oct 2024 13:28:48 +0000
asID:                     263280
IP address blocks:        2804:164c:abcb::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:7e:5d:a1:88:53:fc:de:be:7c:c4:01:3e:cb:07:3f:a3:c4:c0:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDF79EFB23D70999B2F88388D7AC7018CCF52374
        Validity
            Not Before: Oct 19 13:23:48 2023 GMT
            Not After : Oct 17 13:28:48 2024 GMT
        Subject: CN=5037BA8226D50C90C23477D5B8256E6F452CAC3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:57:69:86:cf:79:4a:1d:af:51:9f:26:26:0c:
                    89:c1:03:2a:cf:55:0b:a3:eb:1c:2a:23:80:dc:5a:
                    e7:85:b5:8a:2b:b9:d9:1f:50:7d:74:3b:6d:fe:88:
                    c7:93:4b:fc:dd:ce:d7:86:f5:c3:59:69:45:f2:c4:
                    1e:50:dd:8b:cb:60:ca:1d:2c:a3:34:d3:b7:07:6d:
                    90:b1:66:74:44:2b:94:e8:8f:c6:e4:91:c9:94:6f:
                    fc:78:9f:d6:38:08:b7:e4:52:52:67:c2:bc:92:ea:
                    20:e3:93:52:84:bc:63:6c:32:c0:0f:44:cc:bf:6a:
                    bd:50:6b:44:eb:18:df:f8:20:27:88:a7:2e:03:73:
                    d8:52:d9:41:5f:19:7c:2a:f4:30:1d:65:17:9b:8a:
                    9c:18:ae:6a:cf:c9:c2:59:54:50:94:b3:1f:b2:e8:
                    20:48:4a:67:23:33:5a:d8:12:00:fe:ed:0f:a1:41:
                    ba:b9:4f:54:73:47:24:98:99:ea:14:7e:ad:f9:60:
                    70:1a:1f:77:cd:8b:56:5a:13:2e:a9:aa:46:0f:5c:
                    41:87:05:82:bc:a5:93:ff:55:ec:9e:31:89:14:37:
                    67:52:af:f7:10:fa:0e:9e:20:46:5b:e7:eb:20:0d:
                    c8:47:79:a3:ee:38:21:34:56:4b:c8:ed:a9:a0:f1:
                    1d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:37:BA:82:26:D5:0C:90:C2:34:77:D5:B8:25:6E:6F:45:2C:AC:3D
            X509v3 Authority Key Identifier:
                keyid:BD:F7:9E:FB:23:D7:09:99:B2:F8:83:88:D7:AC:70:18:CC:F5:23:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/0/BDF79EFB23D70999B2F88388D7AC7018CCF52374.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDF79EFB23D70999B2F88388D7AC7018CCF52374.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/0/323830343a313634633a616263623a3a2f34382d3438203d3e20323633323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:164c:abcb::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:bd:ea:65:e4:62:2d:03:6e:3c:c7:c3:29:3c:dc:2c:4b:69:
         bb:ee:12:d7:9c:0f:33:95:ff:f7:5d:c9:8f:ca:6f:d9:13:5c:
         c2:b9:7f:e1:a5:e1:2a:6b:64:0d:07:a9:84:bc:03:51:ca:42:
         26:6a:44:72:a6:8b:86:a1:6e:8b:a2:f4:0b:db:17:01:bd:1b:
         c6:c4:7a:8c:82:73:05:b0:2b:9f:10:55:b6:5f:22:1e:e8:f3:
         11:39:3a:28:13:27:80:5b:e3:a9:1f:12:66:f6:05:a0:50:34:
         22:5f:cb:f8:36:b4:b8:3f:ed:78:0f:64:cd:2e:bd:85:f0:f6:
         d9:cf:cc:99:5a:f1:31:21:86:06:3f:53:7f:73:bd:f7:32:40:
         ca:05:78:f4:7c:e4:06:22:28:0a:5f:92:41:56:4f:a3:2b:5a:
         0c:fb:8a:80:07:2c:85:5a:3c:6e:81:08:7b:a0:7b:c6:1c:6c:
         22:1c:73:3d:ec:71:92:7b:a7:6b:7e:7b:39:7f:2f:ea:ce:9b:
         2d:3f:41:87:86:51:af:09:92:cc:02:32:2a:62:cd:f2:93:8e:
         5f:6d:c4:6f:59:0e:79:1e:b0:24:f3:8a:df:85:d1:93:33:e7:
         bd:59:7f:3f:60:b5:59:59:42:a5:13:3f:1b:19:a6:dc:12:7f:
         db:92:76:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----