Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a3230323a3a2f34382d3438203d3e20323632363137.roa
File:                     323830343a3930633a3230323a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier:          AmHZN0aI6a1+h2XLaVgPYX4+Uq1nTTyenAXfDsd6qIg=
Subject key identifier:   63:59:AE:10:DE:2F:E3:5E:9D:CF:E0:89:57:9B:F2:DE:BB:2A:86:3F
Certificate issuer:       /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial:       5ED4D683EB4E64472AC0AA87788D49357AECF143
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a3230323a3a2f34382d3438203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:09:10 +0000
ROA not before:           Thu 03 Aug 2023 13:04:10 +0000
ROA not after:            Thu 01 Aug 2024 13:09:10 +0000
asID:                     262617
IP address blocks:        2804:90c:202::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:d4:d6:83:eb:4e:64:47:2a:c0:aa:87:78:8d:49:35:7a:ec:f1:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
        Validity
            Not Before: Aug  3 13:04:10 2023 GMT
            Not After : Aug  1 13:09:10 2024 GMT
        Subject: CN=6359AE10DE2FE35E9DCFE089579BF2DEBB2A863F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b5:30:10:b0:30:a3:f1:e9:d6:df:e4:31:53:
                    fe:a3:af:53:a2:e8:60:5b:28:c5:cc:9a:9c:cd:d7:
                    2f:a1:e7:db:b9:f5:f2:93:34:50:30:49:7b:9f:31:
                    37:97:c5:e5:81:3a:20:44:a2:ce:45:ff:03:17:ea:
                    c2:d5:f6:d5:56:b6:32:80:26:f4:be:41:26:64:73:
                    c6:3f:8c:3c:62:75:7d:32:fc:4a:91:e8:e9:66:da:
                    5c:72:fb:11:05:9b:46:7b:db:28:b5:2a:36:04:b9:
                    be:6b:6e:9a:00:a6:da:66:85:45:22:90:ab:5e:e1:
                    06:1a:f9:de:a0:98:10:64:f0:e0:ca:05:1f:e0:e7:
                    ff:6a:af:5d:89:fe:20:c0:f7:f9:97:fa:e2:ca:bb:
                    44:c6:5f:29:2e:d5:11:2e:49:e8:a9:fc:ad:27:9a:
                    8b:e7:de:dc:f9:83:f4:e8:32:6f:8e:13:0e:67:8b:
                    7f:56:70:47:4b:f0:ec:e1:09:2b:29:89:ef:72:88:
                    30:db:ac:74:92:16:92:52:77:f5:ab:8b:03:d9:52:
                    35:23:6f:6d:4c:07:39:7c:e1:31:fa:35:85:8c:65:
                    65:05:37:3b:95:3f:0f:c6:95:27:75:ea:ad:ed:c0:
                    0f:7a:d8:c1:a9:8c:a2:7f:d6:cb:cd:bc:12:60:4e:
                    00:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:59:AE:10:DE:2F:E3:5E:9D:CF:E0:89:57:9B:F2:DE:BB:2A:86:3F
            X509v3 Authority Key Identifier:
                keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a3230323a3a2f34382d3438203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90c:202::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:4a:5c:70:b0:45:7d:e5:67:fb:a9:94:62:b0:52:df:4c:72:
         6f:2e:35:fa:18:e2:05:53:9e:55:73:c6:f7:6b:d3:fc:f8:49:
         e9:4f:9d:db:e4:b3:43:ae:65:f4:8b:73:07:48:f8:56:fc:61:
         ed:cc:91:c5:f5:a6:fa:df:49:23:84:6c:a3:cc:71:8d:67:16:
         e8:32:eb:34:3a:81:dc:64:66:e4:f0:d3:cc:f1:d7:26:00:e7:
         7c:c3:c2:93:0c:75:f1:b7:7d:77:cb:ef:c9:b3:bb:86:9b:63:
         a2:54:2b:78:7e:54:5c:4d:e2:30:d5:c6:d7:68:7b:65:39:42:
         f4:89:fa:93:df:4c:a2:d2:7c:e4:85:0f:f7:50:30:46:7a:6b:
         1f:1f:b0:23:eb:ea:f9:97:08:21:50:50:5c:98:ab:5f:e4:50:
         46:cb:43:e9:51:48:ee:4a:59:9d:49:21:bf:82:a8:65:a6:f8:
         1a:d2:e4:e2:fa:f5:95:c5:06:23:fe:09:ad:0b:35:a7:1f:0c:
         a0:5c:98:53:c3:94:ee:04:a3:d0:de:ec:39:49:1e:d6:a0:66:
         0d:3e:9a:11:17:e0:15:2b:c9:24:26:73:bf:77:e5:7b:c4:5f:
         36:5b:13:0e:93:cc:c5:2d:5c:cd:b4:58:8e:03:68:4d:3f:84:
         17:ce:b3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----