Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/323830343a313466303a3a2f33332d3333203d3e20323633333630.roa
File:                     323830343a313466303a3a2f33332d3333203d3e20323633333630.roa (raw, json)
Hash identifier:          3+fCCQ0w/Z51UqO606IQzPl+/QE6dJCscll+7A+3xMs=
Subject key identifier:   D8:0A:14:7F:D5:23:2A:F8:AC:CE:D2:3A:9F:A7:26:25:D3:3F:27:47
Certificate issuer:       /CN=679534B939B34FA7D85CBB2A06E0610EC372ADC7
Certificate serial:       6D512A0003A634EBFAAFF22266A671D3FE0D2DA0
Authority key identifier: 67:95:34:B9:39:B3:4F:A7:D8:5C:BB:2A:06:E0:61:0E:C3:72:AD:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/679534B939B34FA7D85CBB2A06E0610EC372ADC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/323830343a313466303a3a2f33332d3333203d3e20323633333630.roa
Signing time:             Mon 18 Dec 2023 14:49:12 +0000
ROA not before:           Mon 18 Dec 2023 14:44:12 +0000
ROA not after:            Mon 16 Dec 2024 14:49:12 +0000
asID:                     263360
IP address blocks:        2804:14f0::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:51:2a:00:03:a6:34:eb:fa:af:f2:22:66:a6:71:d3:fe:0d:2d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=679534B939B34FA7D85CBB2A06E0610EC372ADC7
        Validity
            Not Before: Dec 18 14:44:12 2023 GMT
            Not After : Dec 16 14:49:12 2024 GMT
        Subject: CN=D80A147FD5232AF8ACCED23A9FA72625D33F2747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:93:89:66:ee:ca:ce:d6:07:88:ac:4d:0c:87:
                    2e:75:bc:b1:0b:cd:29:2a:ad:12:9d:cb:9b:0b:30:
                    8e:1c:9a:c1:82:dd:eb:55:c5:11:8b:b6:a1:8b:10:
                    39:21:9b:ae:01:87:ad:b7:fe:46:4e:4a:90:1d:dc:
                    83:93:7c:67:f0:d3:3d:47:66:31:13:28:cc:ea:f3:
                    1d:57:97:54:b1:24:9e:93:ee:b6:88:37:07:8f:59:
                    be:2e:bf:77:c7:48:37:66:98:f5:65:87:f3:9d:c3:
                    87:1b:d7:44:3d:83:30:b4:a5:a2:8a:8d:c6:8e:a7:
                    1d:be:d9:82:ea:fe:76:4f:95:d8:fe:bb:b8:06:3f:
                    da:56:48:0d:75:aa:05:fc:93:98:f7:e0:10:9a:3a:
                    1f:7b:cb:0d:42:39:1a:73:3a:e2:21:74:8d:2d:88:
                    9f:fd:89:e3:1d:1e:51:4a:08:82:89:c6:4d:1d:f5:
                    49:e5:09:8e:df:ed:58:5f:e1:d2:6a:e7:ec:d4:c9:
                    42:69:69:56:f4:09:8e:06:95:22:0a:56:29:35:2f:
                    ff:b3:4a:f5:33:90:56:0b:3f:6d:46:ac:5d:e8:8a:
                    99:ae:10:64:67:c8:ed:34:d7:3f:64:a1:16:69:53:
                    f1:34:48:3e:1a:2d:e6:18:e5:36:d5:e8:90:40:67:
                    01:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:0A:14:7F:D5:23:2A:F8:AC:CE:D2:3A:9F:A7:26:25:D3:3F:27:47
            X509v3 Authority Key Identifier:
                keyid:67:95:34:B9:39:B3:4F:A7:D8:5C:BB:2A:06:E0:61:0E:C3:72:AD:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/679534B939B34FA7D85CBB2A06E0610EC372ADC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/679534B939B34FA7D85CBB2A06E0610EC372ADC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/323830343a313466303a3a2f33332d3333203d3e20323633333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14f0::/33

    Signature Algorithm: sha256WithRSAEncryption
         41:8e:84:41:b9:22:0c:b2:a6:6b:0b:7b:3f:21:78:c1:3a:b6:
         9c:80:3a:da:41:eb:02:00:04:f6:8d:cb:a1:fb:a1:ff:8c:af:
         2d:a1:36:60:43:e9:b7:92:05:c9:50:02:4a:02:58:6e:97:3c:
         86:5e:e8:f8:35:d5:66:a0:db:22:60:79:2b:7d:97:5e:d1:73:
         1c:7e:84:01:80:c5:e4:2b:ed:df:ad:2b:2e:ab:c1:ce:07:62:
         a9:b3:d4:e5:ad:ab:29:63:ff:ad:65:42:52:74:20:ec:75:7b:
         c4:cc:f6:b5:55:2c:f1:35:82:55:09:10:8c:b1:35:24:11:5d:
         e7:1a:cd:d8:80:e4:99:35:3f:6f:51:a5:38:08:d8:e7:54:41:
         0e:bc:6f:53:c4:98:58:85:0b:e4:9e:6a:01:5a:56:10:5a:4e:
         92:b0:24:f6:d9:ef:50:8c:84:29:ee:02:34:ea:67:e1:a8:77:
         9f:93:19:56:01:40:3b:25:c1:43:ae:3d:11:3a:65:0d:e5:7a:
         e8:0d:d0:e0:72:20:e0:21:55:f8:f2:43:5e:08:95:16:8c:73:
         04:cf:45:24:44:44:d7:6d:8b:a7:3a:5d:16:7b:f6:f2:4b:09:
         12:6c:b3:f7:20:9a:80:3e:a2:22:f0:75:8d:37:46:46:77:3c:
         c7:d3:61:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----