Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/323830343a323264343a3a2f33322d3438203d3e20323634313235.roa
File:                     323830343a323264343a3a2f33322d3438203d3e20323634313235.roa (raw, json)
Hash identifier:          nEqyU6Qvf5RhpUlGjlXRrjzzkPjkX+HzkZAEsrdpTp8=
Subject key identifier:   64:53:CF:F2:F2:65:BE:C0:72:5A:D8:32:2B:F7:B1:84:3E:32:4B:A5
Certificate issuer:       /CN=A8125301CCFFF14B6F273F5B4F08F9000BA221C3
Certificate serial:       25C636700641BF8E93F87001F97EDD3029FF1ECD
Authority key identifier: A8:12:53:01:CC:FF:F1:4B:6F:27:3F:5B:4F:08:F9:00:0B:A2:21:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8125301CCFFF14B6F273F5B4F08F9000BA221C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/323830343a323264343a3a2f33322d3438203d3e20323634313235.roa
Signing time:             Wed 09 Aug 2023 18:12:00 +0000
ROA not before:           Wed 09 Aug 2023 18:07:00 +0000
ROA not after:            Wed 07 Aug 2024 18:12:00 +0000
asID:                     264125
IP address blocks:        2804:22d4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:c6:36:70:06:41:bf:8e:93:f8:70:01:f9:7e:dd:30:29:ff:1e:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8125301CCFFF14B6F273F5B4F08F9000BA221C3
        Validity
            Not Before: Aug  9 18:07:00 2023 GMT
            Not After : Aug  7 18:12:00 2024 GMT
        Subject: CN=3082010A028201010093C0F5F4BE0F573019F344604B66E4E22D0B0D266B03D2AA6D12FBDA28A108D7BC5ECEDD2D42CEA38A6F5AC9B5D20B6BDC42CDD8FB73D238D65A46C351A7979DA5C63BC91EC90F9E0D78F1D7DED77E04BB53F8E980E9CE4BA22C177CFF9EBFD437595326CEC3D11439784C2E6EC2F4A65757C19BF417F1F97EEBDD349AB1A7A2EE815F2DE984AC23E24AD160CFBB84A9F6D4AFC422127CEA3637F9E4547597BBCD2584A23BD6EC6595DB4F8C67EA1D6C6D89AB28BAA015828ADE7B48C9F489AE249D5D15620EAAD70FA7BD17DC98C8AA2C141F5C531F3D0FBE644A503E1BA08DC02F6902EA59F8CDEAC56D5947DA572BD6798FE96427445BC5519E990AE4F8FF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c0:f5:f4:be:0f:57:30:19:f3:44:60:4b:66:
                    e4:e2:2d:0b:0d:26:6b:03:d2:aa:6d:12:fb:da:28:
                    a1:08:d7:bc:5e:ce:dd:2d:42:ce:a3:8a:6f:5a:c9:
                    b5:d2:0b:6b:dc:42:cd:d8:fb:73:d2:38:d6:5a:46:
                    c3:51:a7:97:9d:a5:c6:3b:c9:1e:c9:0f:9e:0d:78:
                    f1:d7:de:d7:7e:04:bb:53:f8:e9:80:e9:ce:4b:a2:
                    2c:17:7c:ff:9e:bf:d4:37:59:53:26:ce:c3:d1:14:
                    39:78:4c:2e:6e:c2:f4:a6:57:57:c1:9b:f4:17:f1:
                    f9:7e:eb:dd:34:9a:b1:a7:a2:ee:81:5f:2d:e9:84:
                    ac:23:e2:4a:d1:60:cf:bb:84:a9:f6:d4:af:c4:22:
                    12:7c:ea:36:37:f9:e4:54:75:97:bb:cd:25:84:a2:
                    3b:d6:ec:65:95:db:4f:8c:67:ea:1d:6c:6d:89:ab:
                    28:ba:a0:15:82:8a:de:7b:48:c9:f4:89:ae:24:9d:
                    5d:15:62:0e:aa:d7:0f:a7:bd:17:dc:98:c8:aa:2c:
                    14:1f:5c:53:1f:3d:0f:be:64:4a:50:3e:1b:a0:8d:
                    c0:2f:69:02:ea:59:f8:cd:ea:c5:6d:59:47:da:57:
                    2b:d6:79:8f:e9:64:27:44:5b:c5:51:9e:99:0a:e4:
                    f8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:53:CF:F2:F2:65:BE:C0:72:5A:D8:32:2B:F7:B1:84:3E:32:4B:A5
            X509v3 Authority Key Identifier:
                keyid:A8:12:53:01:CC:FF:F1:4B:6F:27:3F:5B:4F:08:F9:00:0B:A2:21:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/A8125301CCFFF14B6F273F5B4F08F9000BA221C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8125301CCFFF14B6F273F5B4F08F9000BA221C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/323830343a323264343a3a2f33322d3438203d3e20323634313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:22d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:db:75:6a:ae:ca:e6:20:0d:c2:c9:63:84:54:e5:4d:49:1f:
         31:07:cb:d9:1b:ad:c7:3a:5c:b3:ac:5f:02:de:e5:5c:5a:24:
         5d:4c:47:5e:31:20:a3:77:e5:a3:5e:4b:04:74:77:95:b9:96:
         28:ee:e9:05:5b:cb:61:c0:b6:c4:9b:01:c6:8f:6c:f8:60:7b:
         73:4c:8e:55:31:04:de:15:8e:21:e9:da:29:78:54:0f:28:0d:
         2e:74:1d:65:24:8a:2d:91:df:0c:21:c7:d2:19:20:44:b1:36:
         d0:87:d2:4f:c3:a8:16:4e:58:23:fb:4c:e5:f2:a4:53:3f:99:
         28:fd:dd:6c:79:41:72:f8:44:59:3b:0f:5f:6e:b5:ce:20:8b:
         94:61:7c:c7:eb:f6:46:df:b8:3d:04:e5:22:04:33:d0:44:6a:
         be:b8:a1:b7:19:71:27:53:01:8f:0b:e1:12:03:1c:76:86:cc:
         57:5b:9f:c7:11:6f:d3:2b:74:f2:92:30:b1:23:45:bd:87:47:
         ea:01:98:a3:d0:54:66:74:10:6a:af:89:07:f7:9c:df:72:cb:
         74:83:ce:ee:3b:77:7a:61:d5:76:7c:eb:f3:9f:a4:70:40:ff:
         99:56:36:de:03:b3:22:41:5c:a7:7d:4c:56:d9:7c:a2:00:08:
         ff:4f:92:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----