Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FXPtME3GjotYGyjw5edf9YP272vBgfdDGodoU2erwcqq/0/323830343a366530303a3a2f33322d3438203d3e20323730353639.roa
File:                     323830343a366530303a3a2f33322d3438203d3e20323730353639.roa (raw, json)
Hash identifier:          YjLwo3H9bHeUbbazHbGpeIB1f7GMipL2Aslea8Drs1s=
Subject key identifier:   D5:F6:18:AE:DB:A4:BD:51:58:FE:13:FA:79:AD:63:EC:34:90:A9:23
Certificate issuer:       /CN=6D953757C3802AF950C8835FFAF09F57F8632103
Certificate serial:       77EE9E86DA80331A4A9B0C9BE9AEB06B5A07E33F
Authority key identifier: 6D:95:37:57:C3:80:2A:F9:50:C8:83:5F:FA:F0:9F:57:F8:63:21:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D953757C3802AF950C8835FFAF09F57F8632103.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FXPtME3GjotYGyjw5edf9YP272vBgfdDGodoU2erwcqq/0/323830343a366530303a3a2f33322d3438203d3e20323730353639.roa
Signing time:             Tue 26 Sep 2023 01:54:22 +0000
ROA not before:           Tue 26 Sep 2023 01:49:22 +0000
ROA not after:            Tue 24 Sep 2024 01:54:22 +0000
asID:                     270569
IP address blocks:        2804:6e00::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ee:9e:86:da:80:33:1a:4a:9b:0c:9b:e9:ae:b0:6b:5a:07:e3:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D953757C3802AF950C8835FFAF09F57F8632103
        Validity
            Not Before: Sep 26 01:49:22 2023 GMT
            Not After : Sep 24 01:54:22 2024 GMT
        Subject: CN=D5F618AEDBA4BD5158FE13FA79AD63EC3490A923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f6:65:30:e5:80:87:dd:f9:0f:dc:c4:8f:3b:
                    1c:9c:4c:98:ca:64:e1:1b:00:ed:02:ed:ac:b4:d8:
                    ab:d6:ac:9e:c6:84:9e:f1:c5:78:27:9c:95:cb:36:
                    1e:6e:3b:d4:18:64:c7:4c:b1:71:d3:f8:d5:02:c5:
                    1a:29:1f:65:76:b0:03:e3:5b:dc:52:6b:ae:68:dd:
                    54:f8:65:86:5b:15:7c:4f:f8:63:46:4d:54:ec:32:
                    87:2c:cf:e1:df:7f:96:fa:f1:ef:59:39:7e:5a:87:
                    19:6d:ee:35:8d:20:f6:e4:6b:67:3a:53:48:1c:68:
                    b2:c1:a7:83:3d:46:4d:c7:fe:71:c6:d4:a7:d0:2c:
                    c1:aa:be:d9:1c:29:9d:3d:65:b3:6d:cf:0e:45:95:
                    65:0f:6f:41:96:b3:68:56:f3:e2:59:a3:54:d7:58:
                    f4:2a:27:50:ff:d7:99:78:9e:cf:34:9d:ba:5c:62:
                    f7:a6:77:89:0a:8f:72:4e:e4:56:90:2f:40:e6:b9:
                    09:c5:34:45:4f:f5:98:91:65:cd:5c:df:ad:d1:a4:
                    5e:34:29:84:91:04:21:5c:12:7f:68:67:63:94:45:
                    07:92:eb:31:18:da:cf:95:c3:91:f0:23:3b:52:09:
                    ca:54:7a:14:64:60:d0:7b:07:e7:c9:55:d7:6f:d0:
                    b0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F6:18:AE:DB:A4:BD:51:58:FE:13:FA:79:AD:63:EC:34:90:A9:23
            X509v3 Authority Key Identifier:
                keyid:6D:95:37:57:C3:80:2A:F9:50:C8:83:5F:FA:F0:9F:57:F8:63:21:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FXPtME3GjotYGyjw5edf9YP272vBgfdDGodoU2erwcqq/0/6D953757C3802AF950C8835FFAF09F57F8632103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D953757C3802AF950C8835FFAF09F57F8632103.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FXPtME3GjotYGyjw5edf9YP272vBgfdDGodoU2erwcqq/0/323830343a366530303a3a2f33322d3438203d3e20323730353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e00::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:5f:0b:b6:47:fc:6a:3e:a6:0f:e1:d5:18:d9:1a:a4:23:1b:
         97:80:23:32:a9:57:74:b3:d9:e8:a4:fc:7b:e7:d7:3c:b8:39:
         e6:1a:27:89:49:8c:49:c3:98:be:b0:80:4d:ab:0b:f1:08:3b:
         b6:4b:a7:a8:95:7e:d3:80:77:3b:16:3c:10:78:05:87:94:4f:
         9b:03:a6:38:bc:dd:5e:a0:47:72:84:18:db:2c:c3:a3:fe:ed:
         63:86:44:cb:23:21:8d:1f:92:d1:34:8d:33:ea:81:6c:8a:8e:
         67:eb:94:c5:3c:38:3e:6d:c3:cf:ab:f1:9d:fa:fa:6c:12:b5:
         61:93:7e:05:54:9c:f2:63:0d:05:71:45:85:0a:9d:23:ff:ae:
         78:40:8b:31:26:52:c8:61:27:92:d5:22:f9:27:93:01:fb:43:
         f6:e3:80:22:2a:b6:19:54:9e:6e:cd:d2:bb:6b:a2:d4:23:b1:
         6e:7d:c3:07:d3:3d:d0:7a:66:78:b4:bf:b1:d1:07:e2:94:a3:
         60:3d:4a:a1:e2:00:e3:0e:08:e6:f8:6d:e3:bf:58:e5:e9:32:
         8e:64:cf:39:f0:4b:37:26:79:c6:e8:70:fd:f2:9a:02:6d:24:
         6b:14:77:09:b5:26:1f:9f:59:11:f9:01:9e:c5:53:da:07:0d:
         82:4d:6d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----