Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/0/323830343a3964343a3a2f33322d3438203d3e20323632393936.roa
File:                     323830343a3964343a3a2f33322d3438203d3e20323632393936.roa (raw, json)
Hash identifier:          mC/XyrVaVQo5vF4ce2TctIEQPgmLOeqW9UHexUbycOw=
Subject key identifier:   DF:48:A7:78:C0:C9:5A:68:4F:41:56:25:A5:FB:35:CF:DF:68:C7:F1
Certificate issuer:       /CN=0A0E1035A424A928603BB73BF73FD98C8EAAE900
Certificate serial:       5039FFE0E886D8C911338119058FC402CD25FC74
Authority key identifier: 0A:0E:10:35:A4:24:A9:28:60:3B:B7:3B:F7:3F:D9:8C:8E:AA:E9:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0A0E1035A424A928603BB73BF73FD98C8EAAE900.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/0/323830343a3964343a3a2f33322d3438203d3e20323632393936.roa
Signing time:             Wed 28 Jun 2023 14:00:00 +0000
ROA not before:           Wed 28 Jun 2023 13:55:00 +0000
ROA not after:            Fri 28 Jun 2024 14:00:00 +0000
asID:                     262996
IP address blocks:        2804:9d4::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:39:ff:e0:e8:86:d8:c9:11:33:81:19:05:8f:c4:02:cd:25:fc:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A0E1035A424A928603BB73BF73FD98C8EAAE900
        Validity
            Not Before: Jun 28 13:55:00 2023 GMT
            Not After : Jun 28 14:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d3:a3:38:3e:4f:95:fd:cc:24:46:3a:6b:8b:
                    5a:ed:b1:61:ef:4b:68:32:97:07:43:8b:00:82:94:
                    99:47:f5:c1:06:22:12:d6:0a:7f:de:b3:a4:7a:a6:
                    25:d3:a9:07:99:b9:8c:e3:39:e6:65:25:66:04:25:
                    0c:59:97:d6:9b:e4:f7:7f:78:1c:8d:3a:07:db:28:
                    d0:08:89:c2:c3:1b:27:e2:b7:b3:83:62:86:93:78:
                    90:cb:fc:87:dd:fe:77:68:bb:1c:76:b7:83:6e:c4:
                    ac:47:a1:4f:a8:50:23:b9:93:f2:25:2e:37:ed:64:
                    fa:99:f8:08:57:f5:e5:70:35:a5:5e:54:f0:2d:3f:
                    15:8a:78:b6:24:cc:61:7a:e3:8e:21:c9:40:0d:f7:
                    3c:16:49:65:1c:99:10:14:33:71:d8:d7:2c:39:c3:
                    f8:b9:75:64:2e:78:e4:33:f0:c7:62:88:c9:9b:b6:
                    cc:44:7d:ab:d4:65:9f:ad:59:46:35:49:a2:50:9c:
                    5d:88:af:2a:05:c6:5b:cb:02:f3:db:a9:b0:83:26:
                    f1:05:f6:5b:47:05:21:cd:e5:bb:5a:eb:2a:2c:e7:
                    86:63:53:b6:07:cc:70:22:8e:6d:48:9f:a5:f5:59:
                    51:a1:26:70:83:91:93:4f:ab:1c:05:b5:70:0c:74:
                    1d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:48:A7:78:C0:C9:5A:68:4F:41:56:25:A5:FB:35:CF:DF:68:C7:F1
            X509v3 Authority Key Identifier:
                keyid:0A:0E:10:35:A4:24:A9:28:60:3B:B7:3B:F7:3F:D9:8C:8E:AA:E9:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/0/0A0E1035A424A928603BB73BF73FD98C8EAAE900.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0A0E1035A424A928603BB73BF73FD98C8EAAE900.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/0/323830343a3964343a3a2f33322d3438203d3e20323632393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:a8:de:01:c4:e6:1c:63:1e:7f:79:a0:4e:ee:c9:99:f5:a3:
         8c:ae:0d:cb:ac:fa:df:2b:d2:07:97:aa:77:74:26:bf:73:a2:
         bb:83:3b:a8:88:5d:af:5d:f9:03:03:8e:6f:01:2b:08:02:a7:
         2d:e5:46:66:64:87:f7:4c:3d:35:c0:4a:a1:30:6e:4a:f5:ba:
         65:0e:c2:89:d2:7f:0e:1c:74:bd:6a:f5:60:eb:7f:6e:ed:6b:
         81:36:ef:99:ba:b2:7b:e7:41:a0:fe:02:bc:4f:60:46:d5:b2:
         a4:b9:52:b2:a0:70:77:58:76:b3:28:35:99:3a:39:e5:13:8f:
         51:f5:7f:2c:20:bd:5e:01:a6:1d:af:a6:8b:ea:ac:df:7c:92:
         f8:9e:60:eb:37:d0:51:30:70:1c:a9:57:cf:25:94:cc:29:6d:
         25:7e:7d:d2:7b:c4:75:89:67:88:12:89:dc:71:2e:d9:db:82:
         35:6e:0d:de:fa:f7:f8:e8:1e:31:28:08:4c:d3:b0:9b:9a:64:
         15:bf:e1:30:f6:a2:e7:66:df:88:ec:da:f8:7f:2b:68:86:f2:
         6b:62:ad:5c:da:c0:93:61:54:25:60:e9:42:fc:27:a6:eb:7b:
         38:2c:71:b1:3e:d2:59:3e:30:1d:94:5b:8d:ed:51:84:fc:f2:
         96:bc:8f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----