Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9KsvbamK9EfnhV8AXwo5nm44syvbUq5EvemzcnACa8mk/0/323830343a376233633a3a2f33322d3332203d3e20323731343139.roa
File:                     323830343a376233633a3a2f33322d3332203d3e20323731343139.roa (raw, json)
Hash identifier:          yVsvAJTetAbQFckb/cVtvz1iatW4m/tkBoT4D3rvkds=
Subject key identifier:   3F:4E:E1:FF:FF:66:7F:ED:F3:74:7D:BB:AB:FB:6F:77:2C:CB:B7:39
Certificate issuer:       /CN=913F9BB5F19C9AB91D95AFC628E9A7290E143695
Certificate serial:       771A59293465B2084C1229C9F6DC13AA6AF8F919
Authority key identifier: 91:3F:9B:B5:F1:9C:9A:B9:1D:95:AF:C6:28:E9:A7:29:0E:14:36:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/913F9BB5F19C9AB91D95AFC628E9A7290E143695.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9KsvbamK9EfnhV8AXwo5nm44syvbUq5EvemzcnACa8mk/0/323830343a376233633a3a2f33322d3332203d3e20323731343139.roa
Signing time:             Wed 12 Jul 2023 21:00:00 +0000
ROA not before:           Wed 12 Jul 2023 20:55:00 +0000
ROA not after:            Wed 10 Jul 2024 21:00:00 +0000
asID:                     271419
IP address blocks:        2804:7b3c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:1a:59:29:34:65:b2:08:4c:12:29:c9:f6:dc:13:aa:6a:f8:f9:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913F9BB5F19C9AB91D95AFC628E9A7290E143695
        Validity
            Not Before: Jul 12 20:55:00 2023 GMT
            Not After : Jul 10 21:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:ec:8c:8c:1e:7f:2b:d9:7b:94:39:07:a7:e1:
                    ba:8a:67:90:9f:96:a9:2b:1c:96:a3:2f:b8:d7:f2:
                    cc:af:57:21:c9:01:be:c3:74:90:5b:e0:d0:71:1e:
                    be:1b:90:8a:a9:0f:7b:c9:35:49:58:01:0a:89:f2:
                    c0:59:c0:ea:13:21:77:90:7c:71:46:ba:1d:cb:5c:
                    42:de:ef:2e:dd:e5:e5:18:d0:bd:64:6d:2f:b3:7e:
                    74:92:7d:03:21:89:e0:1b:8f:f0:f8:61:32:b0:91:
                    61:fe:ea:46:e3:4b:c2:b0:9c:59:b2:e1:b4:b3:8a:
                    c6:45:15:6a:aa:b1:f5:20:6a:06:5c:80:7a:24:d5:
                    13:e8:06:d9:1f:98:c0:76:dd:de:5d:e2:6a:ad:6f:
                    de:2c:0a:0c:7a:70:4a:f4:62:c8:9c:c8:80:07:87:
                    fd:41:aa:b4:41:2a:d2:97:76:bc:c9:c2:83:bb:26:
                    82:0d:c3:56:4d:46:7a:76:6e:30:47:ff:ed:96:00:
                    67:48:dc:aa:90:6a:dc:ad:f1:aa:8b:a5:4a:ba:1f:
                    b8:be:8a:e8:74:92:22:9e:1c:23:3a:59:e5:61:06:
                    72:be:27:7b:66:c8:f5:fd:ab:69:99:6b:39:d7:21:
                    63:72:4c:7b:d5:d1:59:b5:8f:1c:4d:ac:1f:5f:68:
                    9b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:4E:E1:FF:FF:66:7F:ED:F3:74:7D:BB:AB:FB:6F:77:2C:CB:B7:39
            X509v3 Authority Key Identifier:
                keyid:91:3F:9B:B5:F1:9C:9A:B9:1D:95:AF:C6:28:E9:A7:29:0E:14:36:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9KsvbamK9EfnhV8AXwo5nm44syvbUq5EvemzcnACa8mk/0/913F9BB5F19C9AB91D95AFC628E9A7290E143695.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/913F9BB5F19C9AB91D95AFC628E9A7290E143695.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9KsvbamK9EfnhV8AXwo5nm44syvbUq5EvemzcnACa8mk/0/323830343a376233633a3a2f33322d3332203d3e20323731343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b3c::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:ad:91:59:44:68:3e:5e:0f:8e:2b:d2:71:a1:79:c6:eb:db:
         c7:48:9a:f2:39:8d:59:47:44:48:11:65:2f:a0:9e:14:7a:68:
         94:d4:9d:58:77:04:c5:2e:8d:75:37:6e:9a:6f:d0:77:ec:a6:
         7e:23:8d:1e:99:33:21:b1:e7:7c:d3:3c:d9:b5:ae:9f:cc:fd:
         8e:29:11:ae:27:ab:3f:7f:c5:69:be:f4:e6:24:88:06:39:a8:
         f1:30:3e:29:f6:d6:70:fe:4b:45:31:d3:40:2f:77:82:4f:4a:
         63:e6:cb:b4:ba:ac:98:d0:93:d0:ba:54:e5:62:24:b5:65:e4:
         93:39:4c:6b:13:fe:d5:f5:38:2c:cf:c0:eb:e7:56:4f:05:f6:
         fd:a0:e0:1e:c4:c6:46:d2:f0:57:e9:e1:97:e3:d0:cb:15:92:
         d2:98:5e:87:18:b0:66:aa:ff:e9:c4:e0:b3:42:b8:33:40:de:
         c6:8f:31:59:1e:52:df:74:df:dd:99:32:fd:6f:a2:da:16:67:
         fb:24:3a:8a:99:7d:54:58:f4:3a:e8:ca:44:4d:e6:d4:0b:c0:
         65:eb:e1:bb:95:ae:bb:66:9a:f2:80:e8:ae:7f:34:b4:b4:3f:
         3c:f9:f0:a3:52:17:c2:9c:73:d0:68:5d:24:14:82:af:6a:5b:
         f9:d2:01:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----