Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/323830343a6438343a3a2f33322d3438203d3e203238313731.roa
File:                     323830343a6438343a3a2f33322d3438203d3e203238313731.roa (raw, json)
Hash identifier:          Ql8qVL7Uul/LD8aqgWse0v5uGwBN9KnsiwzN+Tg5tvQ=
Subject key identifier:   9B:DD:DA:5C:3E:4C:DB:7C:1E:39:70:3E:B9:2C:88:E0:B2:F8:AE:F2
Certificate issuer:       /CN=685127D62A24E86E271BBBBFE4E01D67A0F2C1DD
Certificate serial:       367DCD36B6CA0F9E1975F9FA6A86605D90210E9D
Authority key identifier: 68:51:27:D6:2A:24:E8:6E:27:1B:BB:BF:E4:E0:1D:67:A0:F2:C1:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/685127D62A24E86E271BBBBFE4E01D67A0F2C1DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/323830343a6438343a3a2f33322d3438203d3e203238313731.roa
Signing time:             Tue 02 Apr 2024 21:00:01 +0000
ROA not before:           Tue 02 Apr 2024 20:55:01 +0000
ROA not after:            Wed 02 Apr 2025 21:00:01 +0000
asID:                     28171
IP address blocks:        2804:d84::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:7d:cd:36:b6:ca:0f:9e:19:75:f9:fa:6a:86:60:5d:90:21:0e:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=685127D62A24E86E271BBBBFE4E01D67A0F2C1DD
        Validity
            Not Before: Apr  2 20:55:01 2024 GMT
            Not After : Apr  2 21:00:01 2025 GMT
        Subject: CN=3082010A0282010100EB26EDED035B1BE21D22301F30AF38C931DC1A37EB1EB024BBABA8E2CE34A2453BB8F6E71D06B2C8783F9D82382B87D66DD23BBAC5851B702B88319A36544D444350102AA92981A3994FB044296E383B87983BB6E9598035E02C2BF1CC75B1AFC1BD0EA3BBA877AB1E691E26389379A444E3060C3FB134B944E6144AE5743A58926D3F25A556BB2C0212C4EE2B9A0B2C45BE3626F4C563ED775C73232478E4AE953DD3D142410D109D41C6D78200A19F98D7403C059B2D924B5F542294F933FD440478EC11F42D7872BB74476F8678300E97065E1F14BCCFFC0BF309ABD25C61116DE42A830F80A446CA3FD9C08DBFA0BE07A7DD5910EF68D0142580FC5F84BF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:26:ed:ed:03:5b:1b:e2:1d:22:30:1f:30:af:
                    38:c9:31:dc:1a:37:eb:1e:b0:24:bb:ab:a8:e2:ce:
                    34:a2:45:3b:b8:f6:e7:1d:06:b2:c8:78:3f:9d:82:
                    38:2b:87:d6:6d:d2:3b:ba:c5:85:1b:70:2b:88:31:
                    9a:36:54:4d:44:43:50:10:2a:a9:29:81:a3:99:4f:
                    b0:44:29:6e:38:3b:87:98:3b:b6:e9:59:80:35:e0:
                    2c:2b:f1:cc:75:b1:af:c1:bd:0e:a3:bb:a8:77:ab:
                    1e:69:1e:26:38:93:79:a4:44:e3:06:0c:3f:b1:34:
                    b9:44:e6:14:4a:e5:74:3a:58:92:6d:3f:25:a5:56:
                    bb:2c:02:12:c4:ee:2b:9a:0b:2c:45:be:36:26:f4:
                    c5:63:ed:77:5c:73:23:24:78:e4:ae:95:3d:d3:d1:
                    42:41:0d:10:9d:41:c6:d7:82:00:a1:9f:98:d7:40:
                    3c:05:9b:2d:92:4b:5f:54:22:94:f9:33:fd:44:04:
                    78:ec:11:f4:2d:78:72:bb:74:47:6f:86:78:30:0e:
                    97:06:5e:1f:14:bc:cf:fc:0b:f3:09:ab:d2:5c:61:
                    11:6d:e4:2a:83:0f:80:a4:46:ca:3f:d9:c0:8d:bf:
                    a0:be:07:a7:dd:59:10:ef:68:d0:14:25:80:fc:5f:
                    84:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:DD:DA:5C:3E:4C:DB:7C:1E:39:70:3E:B9:2C:88:E0:B2:F8:AE:F2
            X509v3 Authority Key Identifier:
                keyid:68:51:27:D6:2A:24:E8:6E:27:1B:BB:BF:E4:E0:1D:67:A0:F2:C1:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/685127D62A24E86E271BBBBFE4E01D67A0F2C1DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/685127D62A24E86E271BBBBFE4E01D67A0F2C1DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/323830343a6438343a3a2f33322d3438203d3e203238313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d84::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:e9:64:76:f5:30:15:76:07:1a:83:e7:e3:c0:1c:8f:87:1b:
         bd:3c:0a:86:d2:1c:e7:c1:b8:64:b4:77:2b:b7:76:ba:90:a8:
         1b:42:85:28:23:82:ef:de:ed:c9:6b:3d:96:9f:84:ec:b4:a2:
         e7:69:2a:87:c2:2d:cd:3f:d1:26:dc:a4:41:59:0f:10:30:0d:
         47:a2:b7:b6:96:09:f6:fa:63:17:e5:9e:c1:93:e6:3f:9f:ce:
         a7:ed:16:0e:92:22:b7:7f:51:2e:38:e5:83:52:c0:83:75:34:
         cc:52:a6:cd:7b:51:80:a4:df:d5:d3:22:8d:5e:7f:8e:2c:c0:
         d1:09:50:e0:8f:43:6b:9d:0e:c8:97:91:28:d2:59:e3:a3:1b:
         b3:73:48:5f:da:59:2e:3b:5c:c2:ab:40:2a:f6:1a:13:ee:f8:
         b1:a0:f4:76:b0:43:c8:79:21:70:88:7b:63:f8:12:3f:d7:0b:
         84:3a:89:eb:07:ab:bc:af:c2:58:d7:84:53:74:e2:c5:26:44:
         1f:60:b6:f0:95:18:98:70:86:6b:d1:87:8f:e3:fa:17:fd:6d:
         72:e6:86:d7:98:2a:9e:58:83:4e:f6:69:a6:3f:b3:f9:49:71:
         8a:ee:55:ff:82:2d:37:89:e0:85:22:7d:57:11:d8:43:9e:91:
         cd:42:f8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----