Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/323830343a333866343a3a2f33322d3332203d3e20323636353134.roa
File:                     323830343a333866343a3a2f33322d3332203d3e20323636353134.roa (raw, json)
Hash identifier:          tqNr3IfB57mgGPiS2DUkAd+GSn2QFAQAR7OLfnR9kQk=
Subject key identifier:   99:07:2E:0C:E1:24:7A:5C:CA:97:A1:2E:72:B3:CF:5A:E8:9D:3A:EE
Certificate issuer:       /CN=00163538EC66E277F93E54FBE592E30664E16F63
Certificate serial:       72F685FF0D392189F3DB4C93F3D61E5C5AA3B347
Authority key identifier: 00:16:35:38:EC:66:E2:77:F9:3E:54:FB:E5:92:E3:06:64:E1:6F:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00163538EC66E277F93E54FBE592E30664E16F63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/323830343a333866343a3a2f33322d3332203d3e20323636353134.roa
Signing time:             Fri 23 Jun 2023 20:06:45 +0000
ROA not before:           Fri 23 Jun 2023 20:01:45 +0000
ROA not after:            Fri 21 Jun 2024 20:06:45 +0000
asID:                     266514
IP address blocks:        2804:38f4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:f6:85:ff:0d:39:21:89:f3:db:4c:93:f3:d6:1e:5c:5a:a3:b3:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00163538EC66E277F93E54FBE592E30664E16F63
        Validity
            Not Before: Jun 23 20:01:45 2023 GMT
            Not After : Jun 21 20:06:45 2024 GMT
        Subject: CN=99072E0CE1247A5CCA97A12E72B3CF5AE89D3AEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:16:e9:fd:6b:e8:64:7e:5a:6e:a9:2b:f3:e6:
                    17:f3:d9:81:74:64:a9:2f:47:e8:03:02:6f:2d:c0:
                    22:fe:6c:48:43:b6:f0:86:31:44:f5:f0:09:3e:75:
                    f3:64:78:4b:72:dc:f0:28:ac:c4:fa:d0:a3:61:86:
                    71:fb:67:59:8f:51:cb:c6:8f:44:90:a4:a6:f1:b9:
                    bf:3c:ac:17:a3:76:70:ae:df:10:68:c4:c4:ea:93:
                    65:b7:94:3a:62:3a:58:d3:b6:4c:b5:c7:22:2e:f7:
                    fc:3c:76:c8:e8:95:94:f4:24:ff:f9:c7:3b:80:7d:
                    dc:8c:39:f5:57:a0:c2:0a:1e:87:26:e4:a7:6d:5d:
                    5b:50:84:d3:ab:37:32:5d:5a:cd:4e:1c:54:c6:0f:
                    61:62:83:34:fc:21:5d:2f:cf:61:cf:99:14:cc:56:
                    cd:50:ad:b6:b7:c0:f0:77:cf:ca:18:60:0f:4b:7a:
                    15:dd:5a:e5:cf:7f:69:c5:55:f8:c1:04:ff:b4:89:
                    be:87:2b:db:92:bf:8e:59:cb:0a:0f:0d:e6:8a:e9:
                    2b:32:3f:b0:c5:df:22:69:45:b6:10:84:38:cd:51:
                    2f:e6:ce:e7:55:c8:82:a0:c4:7c:31:de:6d:e6:62:
                    d7:7d:45:3c:27:0d:02:cd:bc:ee:8b:cb:7d:86:50:
                    a2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:07:2E:0C:E1:24:7A:5C:CA:97:A1:2E:72:B3:CF:5A:E8:9D:3A:EE
            X509v3 Authority Key Identifier:
                keyid:00:16:35:38:EC:66:E2:77:F9:3E:54:FB:E5:92:E3:06:64:E1:6F:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/00163538EC66E277F93E54FBE592E30664E16F63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00163538EC66E277F93E54FBE592E30664E16F63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/323830343a333866343a3a2f33322d3332203d3e20323636353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:38f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:8e:36:b5:f1:5a:83:fc:f1:a6:32:31:e0:fd:bb:52:01:5e:
         e8:15:27:6e:ac:26:89:75:fe:26:5e:96:2d:5b:d4:0f:7e:23:
         ae:9c:49:d0:2a:ca:28:02:7e:de:ce:c7:6e:08:5c:c4:e3:42:
         26:5c:c6:3a:ec:37:9a:6d:05:cb:3c:c9:4e:da:65:80:df:a7:
         96:b3:a6:be:1c:5c:62:9e:56:cf:b5:2a:3c:71:3f:90:ad:bd:
         c9:29:42:85:2e:98:ab:9d:63:01:87:08:ba:05:60:a9:dd:1b:
         a0:a2:af:e5:c7:5d:a5:0d:30:38:0d:47:7b:8b:89:75:38:d2:
         76:a4:c3:8b:ea:c2:1b:5f:5e:c8:a6:9c:8f:2c:77:f8:95:01:
         72:f0:3c:19:85:94:c5:2c:d3:2d:2f:b7:65:8e:e9:5f:bd:af:
         a7:bd:e6:6b:50:48:84:45:39:05:7c:a9:f3:ff:b1:ba:e0:cd:
         ac:30:18:0f:76:08:22:75:37:0d:6a:bc:5e:18:1e:27:39:bc:
         f6:8e:a7:9b:68:40:a6:26:e8:19:08:15:e2:0f:5c:77:cf:d6:
         d2:98:2d:12:fa:92:0a:6f:74:50:f0:d2:f0:c5:54:84:24:57:
         2a:c6:32:d9:b6:60:9c:48:4e:a2:6b:b3:4b:77:34:ce:71:cb:
         89:20:7e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----