Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/0/323830343a346265303a633030303a3a2f33342d3334203d3e20323637333334.roa
File:                     323830343a346265303a633030303a3a2f33342d3334203d3e20323637333334.roa (raw, json)
Hash identifier:          fJMk/Ist4STPYCb4G/4DpTGILMNPXuM5gG1Voz5l8DA=
Subject key identifier:   EE:21:BA:16:EF:2A:9F:F2:1C:3B:B2:D8:17:7C:8A:FC:32:F2:F0:69
Certificate issuer:       /CN=9532089B7106FDCEA0A2DC411DBD7F3CA9368C89
Certificate serial:       095F47B786FE066B593F42B365A1F6D66F8F9A4D
Authority key identifier: 95:32:08:9B:71:06:FD:CE:A0:A2:DC:41:1D:BD:7F:3C:A9:36:8C:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9532089B7106FDCEA0A2DC411DBD7F3CA9368C89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/0/323830343a346265303a633030303a3a2f33342d3334203d3e20323637333334.roa
Signing time:             Sun 26 Nov 2023 21:00:00 +0000
ROA not before:           Sun 26 Nov 2023 20:55:00 +0000
ROA not after:            Sun 24 Nov 2024 21:00:00 +0000
asID:                     267334
IP address blocks:        2804:4be0:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:5f:47:b7:86:fe:06:6b:59:3f:42:b3:65:a1:f6:d6:6f:8f:9a:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9532089B7106FDCEA0A2DC411DBD7F3CA9368C89
        Validity
            Not Before: Nov 26 20:55:00 2023 GMT
            Not After : Nov 24 21:00:00 2024 GMT
        Subject: CN=EE21BA16EF2A9FF21C3BB2D8177C8AFC32F2F069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bb:fa:40:2b:48:85:68:ee:7a:ee:8b:e1:c2:
                    be:c4:4d:51:bf:c2:ae:9d:b8:db:29:1e:1f:0c:21:
                    01:74:60:db:c5:63:5a:41:6c:b6:3a:d5:4f:da:a9:
                    a4:82:9e:8c:b2:e0:82:aa:4a:2f:42:d1:3e:d6:b5:
                    3b:e8:5c:43:05:98:c4:f9:67:e9:27:74:67:66:16:
                    4d:c3:86:58:2a:4e:dc:7d:ac:0e:75:08:4e:ab:84:
                    b0:af:ce:81:07:14:b9:6a:66:1d:40:b2:c3:2a:6d:
                    7d:d1:38:18:a1:31:09:e1:de:5d:50:6e:87:9b:58:
                    2d:9f:ec:5e:1d:0f:94:7d:b1:96:3b:35:8c:ce:13:
                    41:db:a4:97:f6:72:8c:0b:4a:36:ae:04:7b:53:9e:
                    42:16:a6:99:45:44:25:35:95:45:fd:a8:bf:ef:0a:
                    d2:92:1d:73:cb:28:9c:e2:b7:87:00:fb:d5:4d:5c:
                    a0:7f:80:61:2d:52:68:b5:46:f5:66:5c:57:10:d7:
                    7b:58:0d:e5:48:89:ae:81:06:d9:ee:a4:72:c4:1e:
                    c0:0b:a3:87:f2:c1:6e:eb:10:27:a3:c3:f3:72:82:
                    35:a9:96:91:5e:40:a5:2e:28:09:6e:25:dd:76:52:
                    b8:a2:57:15:b0:8a:18:06:6f:db:68:1f:c8:e9:33:
                    e0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:21:BA:16:EF:2A:9F:F2:1C:3B:B2:D8:17:7C:8A:FC:32:F2:F0:69
            X509v3 Authority Key Identifier:
                keyid:95:32:08:9B:71:06:FD:CE:A0:A2:DC:41:1D:BD:7F:3C:A9:36:8C:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/0/9532089B7106FDCEA0A2DC411DBD7F3CA9368C89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9532089B7106FDCEA0A2DC411DBD7F3CA9368C89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/0/323830343a346265303a633030303a3a2f33342d3334203d3e20323637333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4be0:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         98:c2:39:f2:bc:a4:9c:05:53:5e:37:80:9a:a7:6a:fc:6a:e0:
         16:84:c7:9c:8a:62:dd:f9:f4:b6:9c:65:fd:c6:85:54:21:5c:
         75:68:60:74:05:e0:1a:ad:d0:1c:fd:39:25:31:32:70:65:68:
         10:df:6b:e0:d0:89:ab:55:30:b1:15:12:75:3e:27:82:92:31:
         a3:d8:2a:5c:6e:a0:d9:f6:13:ba:5c:fc:d4:db:99:eb:ca:32:
         a4:83:9c:77:0b:60:44:07:52:f1:5c:6f:3f:7a:3e:e3:89:b6:
         a9:02:36:11:3f:01:d3:79:eb:02:47:af:ef:34:ff:1a:b8:0a:
         ef:ab:c5:d6:e4:38:95:e1:28:9d:b3:30:89:3b:24:09:ef:f1:
         ab:7f:3a:7d:68:24:f4:76:88:79:fc:b6:0c:56:ad:20:91:d5:
         98:5c:60:03:cb:1b:f8:96:99:8b:69:11:63:e2:fd:29:da:4a:
         6f:d3:e6:35:6a:2f:c6:f9:97:a7:ca:d3:7c:a0:f5:04:a3:60:
         97:b6:da:ff:df:e8:4e:f2:66:df:14:40:dc:d0:6b:65:1f:a1:
         5d:54:36:4b:ac:b6:fc:ca:20:6b:d2:a0:49:1f:b0:57:3f:3b:
         fb:08:0f:11:35:83:fa:1b:df:e4:f5:c6:d7:18:fd:f4:ac:b1:
         80:1b:25:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----