Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/0/323830343a343234343a3a2f33322d3335203d3e20323637343839.roa
File:                     323830343a343234343a3a2f33322d3335203d3e20323637343839.roa (raw, json)
Hash identifier:          HfepP5pYjh5+TLUbMiF4O+PwGf8jZ/Ab05Zgc2ERuMg=
Subject key identifier:   E7:BB:BA:69:2C:5D:23:19:AC:53:DB:E3:C1:F8:77:1F:E3:20:3B:7D
Certificate issuer:       /CN=5D77E76260CCABED0891B4ABD8776DDDFCA1C24A
Certificate serial:       1CD10B995F5C176B48083B419156FCE55594E788
Authority key identifier: 5D:77:E7:62:60:CC:AB:ED:08:91:B4:AB:D8:77:6D:DD:FC:A1:C2:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D77E76260CCABED0891B4ABD8776DDDFCA1C24A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/0/323830343a343234343a3a2f33322d3335203d3e20323637343839.roa
Signing time:             Mon 16 Oct 2023 17:00:01 +0000
ROA not before:           Mon 16 Oct 2023 16:55:01 +0000
ROA not after:            Mon 14 Oct 2024 17:00:01 +0000
asID:                     267489
IP address blocks:        2804:4244::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:d1:0b:99:5f:5c:17:6b:48:08:3b:41:91:56:fc:e5:55:94:e7:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D77E76260CCABED0891B4ABD8776DDDFCA1C24A
        Validity
            Not Before: Oct 16 16:55:01 2023 GMT
            Not After : Oct 14 17:00:01 2024 GMT
        Subject: CN=3082010A0282010100BF438563E671B7CF57EDF394CA3AD5A84AB1E06FC0B25C79B8B2BD3AE46EF9A8B612B7C8CBC8121CB4231FB7602F6C53D39E430397E53FB62EFDC523C6BE4B30CD039914C82D6A601A4B55AAF6D71CDC0AFDA88AFA713EEB62A958FC38C5B650E00AFA7AF2ABAF33381822E9B6E80F8E2E974919EF8C3E25CB18399EA5429C3F0ABF98A911E099AFEC25386DD091308E279944D252B7303B40DE977C8A475405408B86881F4F44EB7B32E985CD97FE29B4520AD97FB3C7F524C75942323B192E737C341A67804F82D0DF2240AD40A09E6AABB7CAB87005C9497C72191F5765AA328356DD5C6CDB933FCA70EAF7D86908511A45753E5F2CE64366564DD48D33110203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:43:85:63:e6:71:b7:cf:57:ed:f3:94:ca:3a:
                    d5:a8:4a:b1:e0:6f:c0:b2:5c:79:b8:b2:bd:3a:e4:
                    6e:f9:a8:b6:12:b7:c8:cb:c8:12:1c:b4:23:1f:b7:
                    60:2f:6c:53:d3:9e:43:03:97:e5:3f:b6:2e:fd:c5:
                    23:c6:be:4b:30:cd:03:99:14:c8:2d:6a:60:1a:4b:
                    55:aa:f6:d7:1c:dc:0a:fd:a8:8a:fa:71:3e:eb:62:
                    a9:58:fc:38:c5:b6:50:e0:0a:fa:7a:f2:ab:af:33:
                    38:18:22:e9:b6:e8:0f:8e:2e:97:49:19:ef:8c:3e:
                    25:cb:18:39:9e:a5:42:9c:3f:0a:bf:98:a9:11:e0:
                    99:af:ec:25:38:6d:d0:91:30:8e:27:99:44:d2:52:
                    b7:30:3b:40:de:97:7c:8a:47:54:05:40:8b:86:88:
                    1f:4f:44:eb:7b:32:e9:85:cd:97:fe:29:b4:52:0a:
                    d9:7f:b3:c7:f5:24:c7:59:42:32:3b:19:2e:73:7c:
                    34:1a:67:80:4f:82:d0:df:22:40:ad:40:a0:9e:6a:
                    ab:b7:ca:b8:70:05:c9:49:7c:72:19:1f:57:65:aa:
                    32:83:56:dd:5c:6c:db:93:3f:ca:70:ea:f7:d8:69:
                    08:51:1a:45:75:3e:5f:2c:e6:43:66:56:4d:d4:8d:
                    33:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:BB:BA:69:2C:5D:23:19:AC:53:DB:E3:C1:F8:77:1F:E3:20:3B:7D
            X509v3 Authority Key Identifier:
                keyid:5D:77:E7:62:60:CC:AB:ED:08:91:B4:AB:D8:77:6D:DD:FC:A1:C2:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/0/5D77E76260CCABED0891B4ABD8776DDDFCA1C24A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D77E76260CCABED0891B4ABD8776DDDFCA1C24A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/0/323830343a343234343a3a2f33322d3335203d3e20323637343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4244::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:e6:15:7f:b4:0b:bd:b9:1b:7d:44:10:dd:16:ad:fe:25:17:
         98:5e:74:d4:33:f0:c2:16:f5:34:9e:53:ee:45:e3:5f:cd:19:
         f0:fe:d8:b6:59:f9:0a:2e:cc:16:cb:24:7b:50:87:5a:01:81:
         ae:36:8f:db:c1:25:e1:f3:94:78:0c:c5:94:a9:1b:66:0a:86:
         d8:ef:94:6a:10:fb:2e:24:ba:9b:eb:43:db:ba:03:48:44:47:
         58:26:c0:02:eb:ae:3e:b9:bd:f0:c3:77:94:87:54:e7:fe:29:
         f8:11:5a:e8:ac:4c:a1:89:d4:54:f1:e0:3c:8b:c6:ca:df:28:
         a3:b4:e2:6a:73:5c:e9:cf:fe:ed:a1:b8:9c:fe:cc:c5:6e:2e:
         1c:7c:32:e9:82:17:2a:e3:e8:82:71:d4:6f:0c:d2:a7:61:ac:
         d0:f8:d2:48:3f:d5:17:ba:66:67:c3:f2:9f:d5:8f:da:b3:bf:
         e7:b5:2f:4c:a2:fb:70:bf:af:79:94:3d:15:ba:0f:34:97:7a:
         94:e7:37:d5:71:69:14:1e:f6:f2:a5:77:81:f3:8e:72:8b:80:
         a5:a7:f1:af:a4:54:47:88:bd:69:16:8b:22:20:ed:27:58:ef:
         1e:48:5d:9e:02:65:dc:f2:42:38:a8:2e:cc:5d:a3:00:b1:e3:
         2a:01:b1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----