Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/323830343a363962633a383030303a3a2f33342d3334203d3e20323730323838.roa
File:                     323830343a363962633a383030303a3a2f33342d3334203d3e20323730323838.roa (raw, json)
Hash identifier:          m5RIGQdHrub52UWTbzX9pD9P+T11/3E3gDIvryj3F5Y=
Subject key identifier:   B5:C4:AC:EE:AF:54:81:F9:8A:B1:FB:98:03:11:90:C2:67:3B:5F:E7
Certificate issuer:       /CN=3A6A1DCBE326CBF42017E013F8135C8F6BE3BB72
Certificate serial:       1E1B65DF7889AF11B3837EBBA938115D756FFB0B
Authority key identifier: 3A:6A:1D:CB:E3:26:CB:F4:20:17:E0:13:F8:13:5C:8F:6B:E3:BB:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3A6A1DCBE326CBF42017E013F8135C8F6BE3BB72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/323830343a363962633a383030303a3a2f33342d3334203d3e20323730323838.roa
Signing time:             Thu 12 Oct 2023 19:36:00 +0000
ROA not before:           Thu 12 Oct 2023 19:31:00 +0000
ROA not after:            Thu 10 Oct 2024 19:36:00 +0000
asID:                     270288
IP address blocks:        2804:69bc:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:1b:65:df:78:89:af:11:b3:83:7e:bb:a9:38:11:5d:75:6f:fb:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A6A1DCBE326CBF42017E013F8135C8F6BE3BB72
        Validity
            Not Before: Oct 12 19:31:00 2023 GMT
            Not After : Oct 10 19:36:00 2024 GMT
        Subject: CN=3082010A0282010100DA0E4B1E7E49D4A00A5AA3517E9F6335A85F5A061F6BAB424E4CE08EC69B4686503D90AC3FA30AEB77B1028B64544AB65330C84A75E4AE1E5C155A7A4DED4595D012624EA4B87DF59CCD19B0D8820220337C19A385EDE78E33CC83E3CC0B6ACB01348C42A8833BD4BACE8A196DE0D648300EAC98098745E0311A2C772494494EE0EF3A7C12503F0A0A30BABE0BEFEE3DC707BBAAA0A5910906926B145377AE210E696B975BE184A15DC9D295633184C41B61CFD0EF30849F268A9AFB8F87961D301F5B803DB0DC4E5D82CA7D8095B92A9B0F1C78EEB9D60418099301239F3B26A4C003B290462488A3D1919FB9D92C7FEC129B14E1D7B2E6CCBEB51D75D31B3D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0e:4b:1e:7e:49:d4:a0:0a:5a:a3:51:7e:9f:
                    63:35:a8:5f:5a:06:1f:6b:ab:42:4e:4c:e0:8e:c6:
                    9b:46:86:50:3d:90:ac:3f:a3:0a:eb:77:b1:02:8b:
                    64:54:4a:b6:53:30:c8:4a:75:e4:ae:1e:5c:15:5a:
                    7a:4d:ed:45:95:d0:12:62:4e:a4:b8:7d:f5:9c:cd:
                    19:b0:d8:82:02:20:33:7c:19:a3:85:ed:e7:8e:33:
                    cc:83:e3:cc:0b:6a:cb:01:34:8c:42:a8:83:3b:d4:
                    ba:ce:8a:19:6d:e0:d6:48:30:0e:ac:98:09:87:45:
                    e0:31:1a:2c:77:24:94:49:4e:e0:ef:3a:7c:12:50:
                    3f:0a:0a:30:ba:be:0b:ef:ee:3d:c7:07:bb:aa:a0:
                    a5:91:09:06:92:6b:14:53:77:ae:21:0e:69:6b:97:
                    5b:e1:84:a1:5d:c9:d2:95:63:31:84:c4:1b:61:cf:
                    d0:ef:30:84:9f:26:8a:9a:fb:8f:87:96:1d:30:1f:
                    5b:80:3d:b0:dc:4e:5d:82:ca:7d:80:95:b9:2a:9b:
                    0f:1c:78:ee:b9:d6:04:18:09:93:01:23:9f:3b:26:
                    a4:c0:03:b2:90:46:24:88:a3:d1:91:9f:b9:d9:2c:
                    7f:ec:12:9b:14:e1:d7:b2:e6:cc:be:b5:1d:75:d3:
                    1b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C4:AC:EE:AF:54:81:F9:8A:B1:FB:98:03:11:90:C2:67:3B:5F:E7
            X509v3 Authority Key Identifier:
                keyid:3A:6A:1D:CB:E3:26:CB:F4:20:17:E0:13:F8:13:5C:8F:6B:E3:BB:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/3A6A1DCBE326CBF42017E013F8135C8F6BE3BB72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3A6A1DCBE326CBF42017E013F8135C8F6BE3BB72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/323830343a363962633a383030303a3a2f33342d3334203d3e20323730323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:69bc:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         01:6e:97:b2:40:61:52:b0:7c:bd:67:bf:5e:b7:8d:8f:26:07:
         61:1f:37:7e:9f:06:ae:65:c0:c9:6b:d9:51:85:6a:b1:23:79:
         c0:c6:0f:73:4b:96:9a:cd:04:44:da:09:5a:eb:8c:19:57:52:
         cd:46:df:0e:11:36:db:bb:de:95:de:a7:a9:c7:bc:d6:d5:b7:
         84:e2:53:cd:b5:6f:a6:43:e5:8c:4a:60:8e:45:17:5f:96:bd:
         ae:08:8b:6f:f1:77:f9:a8:ff:b9:2d:e5:8d:20:da:56:fc:54:
         99:fe:f3:8d:5c:d4:d8:fc:97:64:40:06:10:f5:b6:12:ba:fc:
         5c:ce:cf:7e:29:22:a0:45:d7:9d:31:48:0f:09:6c:5b:79:85:
         78:0b:eb:7b:2b:dc:3c:4e:6a:cf:ed:99:96:70:56:bc:e7:57:
         84:7f:18:81:93:05:85:e0:21:44:25:19:0b:3b:9d:38:1d:d6:
         84:e2:b1:96:05:ce:86:ca:71:ed:c6:2d:47:06:3b:b2:a5:89:
         43:fb:b8:f1:c1:0a:f6:a4:9b:5b:53:b5:c0:de:0c:04:02:a3:
         cb:76:af:2d:d5:27:3b:19:c0:98:08:ff:4d:9f:0b:1a:c7:2e:
         c7:30:3a:7b:75:0c:03:7b:8a:f3:e0:bc:54:e9:03:ff:1e:2e:
         fa:e0:d4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----