Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BxWYRR9yVuLhzPzeXEbJAUoU63c97fPF1HFAE4fNytWz/0/323830343a323336383a3a2f33322d3332203d3e20323634313630.roa
File:                     323830343a323336383a3a2f33322d3332203d3e20323634313630.roa (raw, json)
Hash identifier:          tb1DP7hiL28jrZk8/IqZfqK5K2LUvzhBNWMrKX40FLg=
Subject key identifier:   31:CC:D0:E7:C1:E1:49:B9:B8:47:8A:12:93:6C:6C:D3:DF:FA:90:B2
Certificate issuer:       /CN=432A09356CFC4BB8197E452038BB66C2873D93C6
Certificate serial:       223A7D8B91AD264AA1E1106EBB17EDE5043FE0D0
Authority key identifier: 43:2A:09:35:6C:FC:4B:B8:19:7E:45:20:38:BB:66:C2:87:3D:93:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/432A09356CFC4BB8197E452038BB66C2873D93C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BxWYRR9yVuLhzPzeXEbJAUoU63c97fPF1HFAE4fNytWz/0/323830343a323336383a3a2f33322d3332203d3e20323634313630.roa
Signing time:             Fri 27 Oct 2023 21:31:21 +0000
ROA not before:           Fri 27 Oct 2023 21:26:21 +0000
ROA not after:            Fri 25 Oct 2024 21:31:21 +0000
asID:                     264160
IP address blocks:        2804:2368::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:3a:7d:8b:91:ad:26:4a:a1:e1:10:6e:bb:17:ed:e5:04:3f:e0:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=432A09356CFC4BB8197E452038BB66C2873D93C6
        Validity
            Not Before: Oct 27 21:26:21 2023 GMT
            Not After : Oct 25 21:31:21 2024 GMT
        Subject: CN=31CCD0E7C1E149B9B8478A12936C6CD3DFFA90B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bf:3f:cd:ab:cb:5f:b0:9b:f2:a4:51:3d:30:
                    32:e7:59:57:53:2b:38:19:1b:4b:85:08:e5:d4:82:
                    e5:66:4c:ee:83:40:b3:e1:cd:ca:64:e1:36:ea:54:
                    a4:eb:b2:32:a1:2c:99:00:92:88:db:3d:7d:89:37:
                    4d:86:48:53:fa:2d:24:f5:21:b7:a4:40:e5:ba:8b:
                    29:1c:d4:1f:79:fe:86:b5:29:55:06:ab:2b:3d:a5:
                    5d:a6:eb:c9:e2:63:a4:d1:e4:d3:8b:54:54:b9:8a:
                    9c:c1:49:5f:6b:bc:f0:c0:75:8d:64:01:14:9a:14:
                    da:2a:69:85:1c:76:d3:7a:ee:69:d4:ad:68:28:3b:
                    0e:f3:de:17:dc:e6:d9:fa:f6:87:16:0a:10:21:6d:
                    cd:04:b5:fc:1c:79:b5:29:27:f4:7d:b2:a2:4e:dd:
                    43:d4:ef:53:f8:52:91:a7:44:09:0f:65:e9:fa:a0:
                    ff:b2:a8:6d:f0:4b:ed:27:d2:0c:ba:60:55:29:71:
                    13:dc:5e:42:38:f2:ee:bd:00:8a:1a:14:51:8a:af:
                    a0:43:12:f5:3c:72:6e:2a:42:b3:5b:a7:b3:06:c8:
                    e3:09:2a:fb:0b:fb:02:5a:40:08:9b:62:6a:bf:b8:
                    ee:37:2c:33:a0:57:93:78:bc:a5:5c:cc:1c:e8:f2:
                    66:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:CC:D0:E7:C1:E1:49:B9:B8:47:8A:12:93:6C:6C:D3:DF:FA:90:B2
            X509v3 Authority Key Identifier:
                keyid:43:2A:09:35:6C:FC:4B:B8:19:7E:45:20:38:BB:66:C2:87:3D:93:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BxWYRR9yVuLhzPzeXEbJAUoU63c97fPF1HFAE4fNytWz/0/432A09356CFC4BB8197E452038BB66C2873D93C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/432A09356CFC4BB8197E452038BB66C2873D93C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BxWYRR9yVuLhzPzeXEbJAUoU63c97fPF1HFAE4fNytWz/0/323830343a323336383a3a2f33322d3332203d3e20323634313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2368::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:1b:ae:57:4d:1a:46:c4:79:19:f5:90:a2:e9:30:fe:57:16:
         03:a6:00:25:f3:1b:e6:c3:65:62:d1:3b:ae:19:23:9e:27:dd:
         5b:9f:4e:8c:c8:8d:9a:bc:e0:64:e1:09:7b:77:e7:e3:10:45:
         d0:8d:4e:20:03:52:e0:5a:2d:49:86:7f:bb:59:17:30:c3:2f:
         28:1f:68:0d:87:65:e3:8e:3a:5b:c0:f0:ca:c3:cd:5c:6f:b0:
         64:84:ec:be:d4:49:67:e6:c8:8a:ba:02:89:55:0e:5d:cf:7c:
         ec:65:1a:90:8c:43:c3:8f:1c:8b:c1:9c:ad:9f:ae:3f:b2:aa:
         c1:e6:fc:17:08:86:e1:89:10:48:92:a7:1c:b1:2f:15:90:a7:
         88:9f:d5:89:79:7a:e2:c6:93:1b:13:e8:9a:4b:c6:9d:30:21:
         00:da:06:4c:f5:76:60:a4:02:fb:cd:95:be:d3:c5:1b:35:9c:
         b1:88:05:7f:3a:1d:37:a4:bd:3b:21:f1:26:e9:55:82:94:64:
         6a:39:1e:ca:9a:99:c0:da:b7:37:69:1e:cc:fc:b4:0e:ae:d6:
         a2:dd:db:cf:92:af:3e:46:bd:b3:06:46:36:a6:22:70:4f:c8:
         09:c9:eb:fd:54:2d:cd:ce:e3:c1:cf:fc:cc:d7:67:7c:64:c4:
         2c:17:f7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----