Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AjWXMwtiZXknuYxz4zyKrPiZJPeczVVMwDTsN1rspFoY/0/323830343a376164383a31303a3a2f34382d3438203d3e20323731333935.roa
File:                     323830343a376164383a31303a3a2f34382d3438203d3e20323731333935.roa (raw, json)
Hash identifier:          7KXJbrxEzpuFEOtOFXeWBoLAXhVxes0RgqzEjx6JU+A=
Subject key identifier:   57:BD:00:9F:3B:B9:07:9F:65:99:EE:0F:7D:15:F5:2F:4B:71:3E:2B
Certificate issuer:       /CN=F86C970181A2EA77E7BA82EC8C2F9D699CB790BA
Certificate serial:       5ADB35EE715966A83D352A567462FA4D5B0EA02C
Authority key identifier: F8:6C:97:01:81:A2:EA:77:E7:BA:82:EC:8C:2F:9D:69:9C:B7:90:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F86C970181A2EA77E7BA82EC8C2F9D699CB790BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AjWXMwtiZXknuYxz4zyKrPiZJPeczVVMwDTsN1rspFoY/0/323830343a376164383a31303a3a2f34382d3438203d3e20323731333935.roa
Signing time:             Fri 28 Jul 2023 17:40:48 +0000
ROA not before:           Fri 28 Jul 2023 17:35:48 +0000
ROA not after:            Fri 26 Jul 2024 17:40:48 +0000
asID:                     271395
IP address blocks:        2804:7ad8:10::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:db:35:ee:71:59:66:a8:3d:35:2a:56:74:62:fa:4d:5b:0e:a0:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F86C970181A2EA77E7BA82EC8C2F9D699CB790BA
        Validity
            Not Before: Jul 28 17:35:48 2023 GMT
            Not After : Jul 26 17:40:48 2024 GMT
        Subject: CN=57BD009F3BB9079F6599EE0F7D15F52F4B713E2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:95:f4:bd:6c:99:dd:4a:28:a0:8e:1a:83:e8:
                    b2:8b:1f:a7:05:78:99:06:98:3d:e5:d0:9c:57:94:
                    87:48:08:7f:af:09:42:09:f9:05:45:0b:97:14:34:
                    ea:d7:d8:48:c8:f8:47:b3:23:2f:57:21:e8:57:78:
                    01:6e:0e:34:6e:f1:62:32:b7:d8:05:ac:bd:4b:2d:
                    93:ba:b2:3c:08:fe:7a:9a:50:b4:62:b1:f4:67:97:
                    ab:a3:a4:43:18:54:30:50:14:b5:c6:1c:90:5d:bd:
                    53:9b:b1:e7:21:2e:cb:ac:4e:1b:be:50:03:2b:7a:
                    e0:58:bc:ee:23:2c:b9:52:bb:ed:88:9b:ab:35:43:
                    e3:1e:c8:d5:03:26:e0:21:4a:20:b5:84:ec:03:67:
                    36:dd:4c:83:ac:08:d4:da:8d:c6:6e:2c:f4:01:a5:
                    45:d3:d7:a3:0f:d0:91:2b:9b:fb:56:29:4b:f8:52:
                    98:36:c1:b4:b3:04:5a:61:3b:47:42:1d:fe:85:66:
                    aa:c2:0b:b4:d0:a8:4c:62:84:0b:2c:d1:15:c7:23:
                    c3:92:78:17:13:1c:8e:be:6a:23:1b:c7:93:cf:73:
                    b3:c8:98:75:da:db:c1:d4:f7:96:f0:28:0c:a6:84:
                    26:dd:2b:43:02:93:ce:45:50:02:46:1f:3f:84:92:
                    eb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:BD:00:9F:3B:B9:07:9F:65:99:EE:0F:7D:15:F5:2F:4B:71:3E:2B
            X509v3 Authority Key Identifier:
                keyid:F8:6C:97:01:81:A2:EA:77:E7:BA:82:EC:8C:2F:9D:69:9C:B7:90:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AjWXMwtiZXknuYxz4zyKrPiZJPeczVVMwDTsN1rspFoY/0/F86C970181A2EA77E7BA82EC8C2F9D699CB790BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F86C970181A2EA77E7BA82EC8C2F9D699CB790BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AjWXMwtiZXknuYxz4zyKrPiZJPeczVVMwDTsN1rspFoY/0/323830343a376164383a31303a3a2f34382d3438203d3e20323731333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ad8:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:20:96:82:79:f1:d4:cd:1e:68:6d:3b:f3:78:72:40:a7:14:
         d3:1f:b7:76:7a:1c:27:3e:20:5c:52:40:0f:f6:93:28:fa:21:
         85:f0:3d:e0:12:f6:f1:ed:6c:bf:91:24:db:86:04:c5:4f:7d:
         64:11:8b:87:75:f7:40:57:6a:13:49:72:68:4d:d6:5e:36:63:
         12:3b:67:be:89:4b:72:1d:52:04:07:0a:08:2a:a1:7e:b2:2f:
         d5:05:44:6a:7c:ac:19:d2:2c:57:94:12:5c:b9:c9:74:87:34:
         82:ce:54:e2:7a:d5:fa:0a:04:be:8f:f4:6c:16:4f:de:d8:1e:
         0f:a9:01:31:c5:82:72:92:da:78:fe:c5:60:cc:ff:82:2d:99:
         84:29:a6:a4:cf:0b:e2:aa:13:a6:52:59:93:38:21:25:c7:64:
         db:be:b9:9f:f7:91:f4:b2:53:e1:da:2b:34:ef:b2:e1:4c:48:
         d7:75:d3:4d:b3:60:e4:cf:a6:2a:3e:2f:68:6d:57:26:73:03:
         f1:61:06:41:cf:a2:f6:64:ef:35:6b:2b:23:c0:31:02:72:71:
         3b:a6:8f:48:8b:05:db:30:e6:44:d8:e9:62:7f:7f:a2:0f:18:
         60:15:ab:b0:0b:36:dc:52:1e:9d:6e:90:46:02:4a:33:86:be:
         8a:fb:51:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----