Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/0/323830343a336432343a3a2f33322d3332203d3e20323636323536.roa
File:                     323830343a336432343a3a2f33322d3332203d3e20323636323536.roa (raw, json)
Hash identifier:          MeErHi5q+2C+zVhOmzNhmgBQix4SptCjne2l3ZrclFU=
Subject key identifier:   96:EC:89:59:12:87:65:FB:95:BC:3C:67:F5:A4:88:47:E5:CE:4C:9C
Certificate issuer:       /CN=6A954DCA8F132488386154F00954CB12AE07DEF6
Certificate serial:       2B84A77CCCCCBA0690BCD945D53139AABFC9058B
Authority key identifier: 6A:95:4D:CA:8F:13:24:88:38:61:54:F0:09:54:CB:12:AE:07:DE:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A954DCA8F132488386154F00954CB12AE07DEF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/0/323830343a336432343a3a2f33322d3332203d3e20323636323536.roa
Signing time:             Tue 22 Aug 2023 15:25:36 +0000
ROA not before:           Tue 22 Aug 2023 15:20:36 +0000
ROA not after:            Tue 20 Aug 2024 15:25:36 +0000
asID:                     266256
IP address blocks:        2804:3d24::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:84:a7:7c:cc:cc:ba:06:90:bc:d9:45:d5:31:39:aa:bf:c9:05:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A954DCA8F132488386154F00954CB12AE07DEF6
        Validity
            Not Before: Aug 22 15:20:36 2023 GMT
            Not After : Aug 20 15:25:36 2024 GMT
        Subject: CN=96EC8959128765FB95BC3C67F5A48847E5CE4C9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:53:4a:96:2f:fa:c9:1a:ae:d4:b0:81:5b:bb:
                    47:c1:3c:2c:97:eb:ec:5e:1b:da:d4:e0:5c:c8:85:
                    61:af:b1:88:f6:2b:b3:5c:5e:c8:25:62:a4:c6:46:
                    41:94:24:f3:1f:fd:5c:fc:f9:b5:56:95:f6:3a:d2:
                    84:73:9c:73:bd:0c:8f:78:17:13:24:98:2d:83:f0:
                    d6:8c:78:f8:35:d6:2b:f0:60:99:af:db:05:2d:8f:
                    09:8b:08:3e:cb:53:70:16:c6:b7:e6:f4:04:4a:37:
                    01:b6:05:9e:67:87:1a:ba:07:3c:64:8a:e5:d8:1e:
                    24:42:d7:72:39:39:bf:7b:e3:3c:9a:b8:27:1f:fe:
                    01:69:01:b8:cc:b5:27:a4:d7:17:c2:38:b8:81:da:
                    1f:fa:5b:57:c5:25:d1:13:f2:ee:49:38:fc:85:46:
                    4d:6f:21:1a:56:af:8e:ea:34:fe:3e:b5:36:66:cb:
                    ae:1e:77:b2:6e:e3:da:09:cb:f3:7a:e8:e6:59:71:
                    3a:50:c0:5a:a3:88:96:b7:b6:31:ed:5c:16:f7:df:
                    64:57:e8:8f:68:e6:26:0b:f0:5b:d4:65:3c:5c:47:
                    c5:58:46:13:1b:f4:e7:9b:b8:df:8e:eb:a9:aa:86:
                    46:c7:5e:ec:68:02:13:e1:d7:5d:67:f9:3a:ed:cc:
                    b0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:EC:89:59:12:87:65:FB:95:BC:3C:67:F5:A4:88:47:E5:CE:4C:9C
            X509v3 Authority Key Identifier:
                keyid:6A:95:4D:CA:8F:13:24:88:38:61:54:F0:09:54:CB:12:AE:07:DE:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/0/6A954DCA8F132488386154F00954CB12AE07DEF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A954DCA8F132488386154F00954CB12AE07DEF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/0/323830343a336432343a3a2f33322d3332203d3e20323636323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d24::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:de:1b:5d:8d:2e:41:c8:5c:45:24:bc:db:89:30:0b:0f:89:
         bf:c6:4c:82:55:cf:1d:5d:1a:87:dc:c2:c6:f5:58:6c:6e:af:
         20:07:6c:5e:99:20:0b:81:cd:a4:2b:3c:e9:a7:53:1a:ab:54:
         97:73:d0:30:9b:d0:0b:65:fd:6e:7c:3f:9a:ef:43:20:c0:e6:
         3d:4e:47:80:fa:f3:ef:12:a4:c9:3e:a7:8e:3d:64:47:fe:85:
         82:e0:0c:db:13:e8:89:ad:5a:0b:d6:be:39:f9:12:5a:19:d4:
         31:37:c8:42:8f:e4:6e:1a:c5:8f:04:f6:4d:1d:1b:b1:3b:2b:
         f5:8b:40:c1:78:df:3d:f8:f5:cb:c9:4a:12:20:c0:10:89:e8:
         8d:e5:4d:e2:31:0e:e7:b4:1f:5e:9d:89:92:24:ab:e4:d3:4d:
         23:65:c0:1c:02:88:b5:32:cd:b8:68:bc:6c:0d:37:ed:05:dc:
         f9:c7:97:46:c5:e1:a4:d5:48:a0:a5:b4:4f:5f:b2:0b:90:87:
         83:e9:dd:2a:20:52:97:b0:dd:b3:0c:d4:b4:db:d0:41:24:fc:
         61:bc:7f:0d:ca:3d:7f:02:56:71:82:ad:55:7c:be:cc:ab:02:
         f6:a8:ba:0b:c2:ae:c0:37:e2:53:e5:3f:f0:fb:1f:de:07:8f:
         ce:3c:d7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----