Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HNV2JWsQ6Do1GtrxhcqpoUZvJsLyaCNTPiAfjDfV7w1Z/0/323830343a373563343a3a2f33322d3332203d3e20323731303638.roa
File:                     323830343a373563343a3a2f33322d3332203d3e20323731303638.roa (raw, json)
Hash identifier:          13TNIO+XWMMLV7JSfwPosp94GO32FmcxyQfHCcDKfMo=
Subject key identifier:   5A:FA:BA:E3:45:2C:6E:4F:C2:E0:8F:94:E2:7D:6F:6F:A5:4F:AA:F8
Certificate issuer:       /CN=6D6415DE588E3A2B572813616F55A1C1F2E9FF42
Certificate serial:       6C35121C40D6BBBAA1375F096E485A3483D9C54E
Authority key identifier: 6D:64:15:DE:58:8E:3A:2B:57:28:13:61:6F:55:A1:C1:F2:E9:FF:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D6415DE588E3A2B572813616F55A1C1F2E9FF42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HNV2JWsQ6Do1GtrxhcqpoUZvJsLyaCNTPiAfjDfV7w1Z/0/323830343a373563343a3a2f33322d3332203d3e20323731303638.roa
Signing time:             Wed 06 Mar 2024 18:48:03 +0000
ROA not before:           Wed 06 Mar 2024 18:43:03 +0000
ROA not after:            Wed 05 Mar 2025 18:48:03 +0000
asID:                     271068
IP address blocks:        2804:75c4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:35:12:1c:40:d6:bb:ba:a1:37:5f:09:6e:48:5a:34:83:d9:c5:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D6415DE588E3A2B572813616F55A1C1F2E9FF42
        Validity
            Not Before: Mar  6 18:43:03 2024 GMT
            Not After : Mar  5 18:48:03 2025 GMT
        Subject: CN=5AFABAE3452C6E4FC2E08F94E27D6F6FA54FAAF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:dd:12:a5:2e:f7:dd:ee:b1:17:85:d9:79:e0:
                    06:cf:a6:8c:dd:f2:3c:2f:8e:db:5a:93:0b:88:72:
                    13:74:d2:2d:c9:af:46:13:e4:52:47:a0:42:ae:ab:
                    c3:32:c9:bb:40:c8:69:6c:df:28:21:48:36:67:a3:
                    d1:c5:c7:c6:e5:b2:b6:cf:1c:df:96:1e:04:7c:36:
                    da:dc:5a:ab:55:b2:17:b6:47:02:d9:68:25:2b:3e:
                    c1:d5:6f:47:91:61:ca:3d:0c:47:4f:a4:8b:78:6c:
                    2a:18:70:f3:3b:91:69:9b:2c:46:18:7d:05:b6:cf:
                    4e:d2:13:a7:18:ab:3d:70:22:93:79:61:f5:d1:ec:
                    f8:36:d9:24:20:aa:10:0d:c6:ae:2f:64:9b:9e:3c:
                    1e:e9:e7:ca:c1:c8:6a:5c:a7:d1:d2:e2:50:fd:3e:
                    38:fa:26:3e:41:3d:92:4b:1d:21:ea:16:a4:4a:f1:
                    e7:5b:37:3c:db:79:42:08:db:49:86:a7:98:fa:9f:
                    75:c9:26:79:01:44:a6:93:2f:83:af:6c:90:28:57:
                    c1:f7:15:1c:12:5e:fb:05:7b:ce:c1:77:ec:95:a2:
                    15:19:8b:03:c3:7b:89:21:dd:23:89:68:3e:c1:f7:
                    f5:92:72:b2:52:52:5a:16:78:9f:87:00:14:f8:13:
                    24:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:FA:BA:E3:45:2C:6E:4F:C2:E0:8F:94:E2:7D:6F:6F:A5:4F:AA:F8
            X509v3 Authority Key Identifier:
                keyid:6D:64:15:DE:58:8E:3A:2B:57:28:13:61:6F:55:A1:C1:F2:E9:FF:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HNV2JWsQ6Do1GtrxhcqpoUZvJsLyaCNTPiAfjDfV7w1Z/0/6D6415DE588E3A2B572813616F55A1C1F2E9FF42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D6415DE588E3A2B572813616F55A1C1F2E9FF42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNV2JWsQ6Do1GtrxhcqpoUZvJsLyaCNTPiAfjDfV7w1Z/0/323830343a373563343a3a2f33322d3332203d3e20323731303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:75c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:ac:7c:a4:71:13:a8:8d:b9:8c:11:a1:60:52:02:86:11:5e:
         50:65:9e:a7:a5:b0:4c:8b:aa:fa:8f:39:8a:b7:cc:43:69:d0:
         e5:ff:b3:c2:b9:71:98:c5:0d:4c:bb:91:af:51:d0:e4:ab:3b:
         8f:79:ce:a0:ea:49:ba:be:7e:fb:33:cf:4f:84:b8:cb:cc:92:
         2c:83:a7:a8:59:4a:50:36:fd:15:9d:a9:3d:12:28:25:1b:8c:
         95:3b:09:7c:3c:23:61:87:2c:69:4b:4e:39:8d:e4:5d:79:b3:
         8a:99:f7:fb:93:3e:05:0a:ed:7a:84:28:28:8b:32:6e:04:b8:
         90:a0:57:c6:97:ce:08:87:04:3c:e3:b8:0d:db:8c:14:96:50:
         79:1d:e3:e2:53:62:7e:c0:9c:11:2f:a7:a3:9c:06:52:ea:51:
         8c:3b:6e:df:12:21:9c:48:9b:24:28:e1:ef:fb:24:5f:ce:30:
         bf:6b:4a:8e:eb:3a:b5:34:2e:1a:ac:28:0d:3c:0a:7a:06:00:
         42:b0:a0:a2:1a:3a:2b:9e:23:50:88:a4:1f:8a:7a:a2:c2:1f:
         09:1a:fd:15:16:ba:d1:ed:24:3e:d5:c5:42:57:f6:f8:fb:5c:
         0d:4e:30:35:1d:0e:d1:09:ca:61:1e:fe:18:14:69:62:c8:de:
         30:40:2c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----