Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/0/323830343a346665343a633030303a3a2f33342d3334203d3e203533303836.roa
File:                     323830343a346665343a633030303a3a2f33342d3334203d3e203533303836.roa (raw, json)
Hash identifier:          U10TKaV5dIAPdAAkFn/73WcvnsJMhdtsZexcmk2jNps=
Subject key identifier:   97:E5:F7:04:C1:D2:77:14:2A:B6:1C:BE:92:35:BA:3D:00:00:1E:CD
Certificate issuer:       /CN=6E6671CD0BBD67CC600D3A3DFD97D129A050CA08
Certificate serial:       6782DD53AC32D9862B3B563714B654A31E4DEDD6
Authority key identifier: 6E:66:71:CD:0B:BD:67:CC:60:0D:3A:3D:FD:97:D1:29:A0:50:CA:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6E6671CD0BBD67CC600D3A3DFD97D129A050CA08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/0/323830343a346665343a633030303a3a2f33342d3334203d3e203533303836.roa
Signing time:             Thu 29 Jun 2023 14:13:32 +0000
ROA not before:           Thu 29 Jun 2023 14:08:32 +0000
ROA not after:            Thu 27 Jun 2024 14:13:32 +0000
asID:                     53086
IP address blocks:        2804:4fe4:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:82:dd:53:ac:32:d9:86:2b:3b:56:37:14:b6:54:a3:1e:4d:ed:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E6671CD0BBD67CC600D3A3DFD97D129A050CA08
        Validity
            Not Before: Jun 29 14:08:32 2023 GMT
            Not After : Jun 27 14:13:32 2024 GMT
        Subject: CN=97E5F704C1D277142AB61CBE9235BA3D00001ECD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f8:f8:a0:61:db:1e:42:af:84:c7:7d:3f:0b:
                    bb:c2:b2:8b:81:91:f5:3c:89:8b:22:4c:f1:d1:b0:
                    a6:ce:5b:39:5a:76:e7:b3:3d:63:f2:d5:ef:1f:52:
                    a7:90:1a:41:d5:80:b3:27:07:bf:50:a0:84:9c:61:
                    08:95:0c:35:79:c5:82:76:da:3c:0b:e7:03:73:ab:
                    3b:02:0e:e6:b0:2b:80:ed:46:e4:36:39:18:09:25:
                    8c:6f:a5:03:44:55:ac:f1:4e:9c:9f:42:b7:5f:86:
                    f5:39:7a:74:a8:d0:92:31:40:18:67:0a:43:3d:df:
                    c4:8c:ef:e0:9c:77:b8:6e:01:0c:45:f4:eb:a8:b5:
                    fa:74:5a:33:dc:4a:44:b9:0a:08:1c:df:7c:73:00:
                    01:80:1b:87:95:b2:65:08:a5:0a:1a:12:d7:0f:7f:
                    3a:54:52:18:9b:a6:6a:73:6c:dc:ce:69:1e:65:bf:
                    38:3d:95:0c:40:1c:4b:e5:9f:a2:b9:63:b3:ae:02:
                    25:cd:15:0d:04:e6:7b:b4:da:d1:55:3a:f6:ee:6a:
                    e1:52:e7:d0:40:56:7e:d3:6f:d0:0d:a1:8e:c1:52:
                    fa:b0:50:da:e9:85:d3:92:15:16:f0:50:4b:34:50:
                    eb:ed:7b:70:fb:4c:7d:dd:3a:cc:f1:fd:d9:61:fb:
                    8d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E5:F7:04:C1:D2:77:14:2A:B6:1C:BE:92:35:BA:3D:00:00:1E:CD
            X509v3 Authority Key Identifier:
                keyid:6E:66:71:CD:0B:BD:67:CC:60:0D:3A:3D:FD:97:D1:29:A0:50:CA:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/0/6E6671CD0BBD67CC600D3A3DFD97D129A050CA08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6E6671CD0BBD67CC600D3A3DFD97D129A050CA08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/0/323830343a346665343a633030303a3a2f33342d3334203d3e203533303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4fe4:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         1f:60:23:fd:9b:00:f1:e0:ec:da:fe:49:99:ca:12:ae:78:ad:
         53:14:c3:52:77:a2:3b:db:dd:36:2d:7d:10:dc:bf:d5:cd:06:
         c7:e0:cc:9a:41:b8:80:8e:37:86:ee:d1:c9:c9:f9:55:51:35:
         45:53:7f:dd:86:55:7d:c7:e8:28:30:1e:c1:9c:fa:46:8b:33:
         ac:dc:9d:d6:bc:0f:40:b5:34:4c:2d:21:1d:8b:db:f1:52:84:
         4c:20:ef:be:e7:18:33:52:90:d5:e5:ca:d9:29:75:52:bc:1f:
         82:1d:36:0d:03:35:41:1b:eb:af:0d:c0:96:90:14:29:7d:50:
         9a:7f:4f:50:5c:b1:b2:8a:55:cd:14:ce:53:46:88:6e:8b:2b:
         ee:7f:5a:99:40:81:2b:4b:81:5b:79:15:d3:7d:78:20:c0:fa:
         6c:33:c6:dc:21:56:fc:fe:4a:88:74:6a:3a:ef:87:3a:67:8c:
         ce:27:60:ee:19:06:c8:dd:07:92:da:b5:6b:a0:a5:6e:24:c6:
         80:69:0b:17:f3:f9:a2:82:f1:35:e1:52:d2:5d:dd:b1:97:85:
         09:eb:8d:a8:d5:bf:a9:28:69:f5:ba:4c:8f:22:0a:87:9d:6e:
         8f:8b:90:41:34:8c:2d:62:9a:ec:a8:78:0c:f7:9e:20:75:10:
         9f:8c:67:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----