Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8nMGo88R8ePaAjUH5mDFtd5P8HUBmnwt7WS1NKBwiwKL/0/323830343a386164633a3a2f33322d3332203d3e20323733363937.roa
File:                     323830343a386164633a3a2f33322d3332203d3e20323733363937.roa (raw, json)
Hash identifier:          5VU0mwbYZnuyqWJ8XZo6Lbv5FB6E3x8qXzFkJUTmWoU=
Subject key identifier:   9B:A0:52:20:AE:66:92:FA:08:9C:46:FE:EB:F2:BF:E8:7C:DC:CC:3A
Certificate issuer:       /CN=7A56466AB6A5504593E67287726B2A1806BA643F
Certificate serial:       06391FD189840BF70031E0EAA39B3C4360B5B2EB
Authority key identifier: 7A:56:46:6A:B6:A5:50:45:93:E6:72:87:72:6B:2A:18:06:BA:64:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A56466AB6A5504593E67287726B2A1806BA643F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nMGo88R8ePaAjUH5mDFtd5P8HUBmnwt7WS1NKBwiwKL/0/323830343a386164633a3a2f33322d3332203d3e20323733363937.roa
Signing time:             Thu 11 Apr 2024 15:16:09 +0000
ROA not before:           Thu 11 Apr 2024 15:11:09 +0000
ROA not after:            Thu 10 Apr 2025 15:16:09 +0000
asID:                     273697
IP address blocks:        2804:8adc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:39:1f:d1:89:84:0b:f7:00:31:e0:ea:a3:9b:3c:43:60:b5:b2:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A56466AB6A5504593E67287726B2A1806BA643F
        Validity
            Not Before: Apr 11 15:11:09 2024 GMT
            Not After : Apr 10 15:16:09 2025 GMT
        Subject: CN=9BA05220AE6692FA089C46FEEBF2BFE87CDCCC3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:57:c7:1e:7f:fb:a2:ad:c6:e3:8c:99:4d:ea:
                    2b:90:dc:7d:ca:71:37:b0:08:33:63:dc:a8:07:11:
                    83:f0:3d:a9:f6:1e:88:de:04:89:b5:9e:ff:3e:64:
                    3e:24:fb:6b:a1:17:ae:08:00:1d:7a:3d:d7:7e:e5:
                    c1:93:16:25:66:09:77:ce:9e:c6:f9:ab:a8:de:7f:
                    67:fc:73:9f:06:52:9e:dd:72:43:96:db:c4:22:4d:
                    d7:26:b5:df:12:5a:cd:52:60:08:c5:39:09:94:a4:
                    c1:c3:6d:d0:5a:43:c6:81:e2:02:6e:cc:76:c8:7a:
                    0e:78:f0:db:95:28:35:80:f4:74:e7:11:1d:ab:ad:
                    a9:5d:7a:1a:42:ed:fd:0e:4d:25:a4:45:4a:91:fe:
                    e8:2a:f1:cd:f5:f6:d1:3f:1d:ea:99:c4:2f:10:c6:
                    17:a8:4a:da:3f:bd:46:f6:77:69:7d:8a:db:ef:d8:
                    0e:41:c5:80:04:ec:c3:71:26:68:46:2d:7a:c8:d6:
                    bc:64:42:12:99:12:ab:cc:03:73:eb:31:bd:5a:00:
                    4d:dc:14:ed:fd:ed:39:96:76:72:26:e2:84:37:57:
                    e6:74:f8:dc:78:bb:87:31:fe:38:e1:7c:8d:8c:50:
                    c7:78:84:df:b7:75:a0:dd:06:1c:a9:21:cb:33:bd:
                    b4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A0:52:20:AE:66:92:FA:08:9C:46:FE:EB:F2:BF:E8:7C:DC:CC:3A
            X509v3 Authority Key Identifier:
                keyid:7A:56:46:6A:B6:A5:50:45:93:E6:72:87:72:6B:2A:18:06:BA:64:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nMGo88R8ePaAjUH5mDFtd5P8HUBmnwt7WS1NKBwiwKL/0/7A56466AB6A5504593E67287726B2A1806BA643F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A56466AB6A5504593E67287726B2A1806BA643F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nMGo88R8ePaAjUH5mDFtd5P8HUBmnwt7WS1NKBwiwKL/0/323830343a386164633a3a2f33322d3332203d3e20323733363937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8adc::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:19:33:cf:de:e1:c7:20:01:64:18:45:26:23:59:a3:24:99:
         a7:c1:0b:65:ff:4b:1d:4d:84:5a:34:48:9b:3e:3b:b8:8a:3b:
         6a:f2:d8:ed:8a:1b:17:64:94:e7:27:5e:74:bb:2f:c6:df:ee:
         d0:39:b2:35:a2:9c:31:80:5d:ff:b9:0b:98:45:85:0e:57:23:
         5c:83:b7:33:36:9c:2e:1a:e6:ea:cc:e7:ac:2b:93:ea:05:b3:
         f8:b3:aa:74:c9:03:6b:2d:a8:40:43:df:81:6d:8c:c8:84:f3:
         ca:3b:ae:d2:82:0d:06:74:24:51:de:d5:66:a0:f5:44:c1:88:
         1c:46:97:75:a7:5d:ca:e8:2c:d0:bc:fb:87:49:6c:18:f8:e8:
         18:5d:4e:16:47:11:05:ed:47:53:d3:ec:37:bc:76:5d:ff:09:
         72:11:9f:9a:ed:96:3b:04:13:5d:77:f1:fa:36:97:3c:02:be:
         fc:42:cb:4e:d2:d0:0f:bf:8e:de:0b:ec:8c:d7:e7:be:74:5c:
         9d:e8:26:e9:0e:c6:66:a7:4d:0e:b1:73:84:da:0a:39:90:02:
         88:96:2b:5e:ee:1c:10:d5:75:e5:a2:df:0a:0a:39:6f:87:20:
         df:4d:b8:5a:d9:52:2a:4a:3e:43:a9:eb:d4:d6:0e:1e:1e:ee:
         c5:2a:f0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----