Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/323830343a6665633a31373a3a2f34382d3438203d3e20323632343933.roa
File:                     323830343a6665633a31373a3a2f34382d3438203d3e20323632343933.roa (raw, json)
Hash identifier:          HVVUftnc5zybf1juCr17bS9vMnxJkaZW3fGeFivs7Cg=
Subject key identifier:   0A:05:A5:82:0A:FC:3B:F5:F4:5E:45:65:AC:5B:D6:8B:EE:59:49:56
Certificate issuer:       /CN=6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE
Certificate serial:       5BAAF18C17279CCCFE47C0648C3034E7EAAD6472
Authority key identifier: 6A:63:DC:AA:5A:F1:11:9C:C8:B4:CD:AE:6A:72:2E:0A:28:DD:C1:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/323830343a6665633a31373a3a2f34382d3438203d3e20323632343933.roa
Signing time:             Sun 14 Apr 2024 02:05:37 +0000
ROA not before:           Sun 14 Apr 2024 02:00:37 +0000
ROA not after:            Sun 13 Apr 2025 02:05:37 +0000
asID:                     262493
IP address blocks:        2804:fec:17::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:aa:f1:8c:17:27:9c:cc:fe:47:c0:64:8c:30:34:e7:ea:ad:64:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE
        Validity
            Not Before: Apr 14 02:00:37 2024 GMT
            Not After : Apr 13 02:05:37 2025 GMT
        Subject: CN=0A05A5820AFC3BF5F45E4565AC5BD68BEE594956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ea:4c:df:cc:d2:aa:5a:d7:29:0e:ce:ea:0e:
                    a9:c0:91:30:1e:ad:94:d7:c7:86:38:b9:9e:aa:79:
                    c8:b4:78:25:5c:f9:a9:6c:55:b8:19:3d:87:e4:aa:
                    71:d8:9b:b6:8f:7e:30:e4:32:91:72:61:ec:ed:81:
                    f2:9b:4b:44:08:ce:e8:5e:2b:60:42:c4:ed:ba:2b:
                    95:01:36:ab:bb:3b:6e:97:10:5b:b2:30:bb:6c:c4:
                    7f:2b:ba:cd:b1:05:88:b5:f2:3d:ae:14:db:53:c2:
                    a9:17:eb:00:54:8c:52:c4:ab:2e:12:6f:2b:0e:b6:
                    26:ed:62:5a:10:f1:3c:c3:11:75:87:ea:07:49:21:
                    50:81:da:0d:f1:4b:0f:d2:bf:b4:30:e3:99:d4:63:
                    fa:53:ad:3f:ff:e4:7a:c4:42:a4:e2:50:96:64:60:
                    de:1f:c3:da:3a:7f:c4:9a:00:c7:a2:89:f2:4a:7b:
                    82:53:b7:6f:57:51:af:66:ac:5f:65:73:d2:30:98:
                    3e:4e:c8:6a:bf:c2:fc:41:d7:2f:c3:2e:cf:9b:6d:
                    b0:a8:e1:2c:3d:93:03:08:a2:67:92:ae:4c:f5:fc:
                    5c:23:d9:21:9f:f3:41:40:11:60:71:6d:3c:3d:58:
                    f5:43:bc:f1:8e:56:a8:6e:6c:e3:44:58:4c:60:ab:
                    71:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:05:A5:82:0A:FC:3B:F5:F4:5E:45:65:AC:5B:D6:8B:EE:59:49:56
            X509v3 Authority Key Identifier:
                keyid:6A:63:DC:AA:5A:F1:11:9C:C8:B4:CD:AE:6A:72:2E:0A:28:DD:C1:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/323830343a6665633a31373a3a2f34382d3438203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fec:17::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:d3:2b:4b:7c:d2:10:46:8a:50:a5:fb:3d:ec:61:8f:44:4d:
         71:c9:26:1b:34:04:5f:62:ec:33:56:78:9c:2f:18:38:5b:e7:
         9a:69:a2:1b:f7:84:ea:72:7c:c9:1e:7f:37:46:9a:b6:0b:cc:
         f6:9e:21:01:05:17:78:57:0d:ca:88:83:5c:54:fc:b4:d6:55:
         e1:a4:cb:45:d3:e1:9e:d4:43:91:f1:99:8c:7d:1c:f1:30:d6:
         06:d8:3f:3f:60:02:fa:cf:3c:85:12:4e:33:a8:cd:50:85:33:
         22:70:8a:13:24:9d:26:92:3a:a3:32:6b:e8:75:0a:f4:77:d3:
         dc:c5:fe:af:6c:57:c1:73:aa:8f:65:5f:0d:db:29:46:f1:b8:
         ab:08:b3:a2:77:a2:0e:8e:06:4e:99:a8:c7:2b:5b:a2:61:54:
         57:16:0b:f9:d2:29:51:a4:e8:08:55:04:00:15:39:79:e6:49:
         2d:52:2e:1b:42:65:e4:78:b6:b4:03:37:24:f9:5c:8d:34:63:
         03:f5:a3:d6:46:ad:65:54:71:d6:ff:ca:8e:ca:50:19:64:17:
         c0:a1:ab:90:6f:d2:bc:33:5b:84:19:7a:5d:66:b6:64:4b:5b:
         63:bf:31:95:3f:aa:8b:d6:97:32:11:f8:34:9a:df:79:6e:4a:
         eb:4d:fa:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----