Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/23XmFxKGVUuf16x1KV1kaNPcxFSP8CKfJwbakmk1szjj/0/323830343a6465383a3a2f33322d3332203d3e203532353235.roa
File:                     323830343a6465383a3a2f33322d3332203d3e203532353235.roa (raw, json)
Hash identifier:          H1OLoJtJ2gY5JuPvEvrqjepR8K9s4Xkl6v2fsFmhO3s=
Subject key identifier:   D0:1F:02:69:92:01:48:D7:6B:23:35:AF:75:96:20:AD:E9:FF:C0:B9
Certificate issuer:       /CN=1C6016755CC52A3177ED1F706975750B6CD6C7A9
Certificate serial:       32B545D4F34775BEB4337F3135D67C7DABE1099F
Authority key identifier: 1C:60:16:75:5C:C5:2A:31:77:ED:1F:70:69:75:75:0B:6C:D6:C7:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C6016755CC52A3177ED1F706975750B6CD6C7A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/23XmFxKGVUuf16x1KV1kaNPcxFSP8CKfJwbakmk1szjj/0/323830343a6465383a3a2f33322d3332203d3e203532353235.roa
Signing time:             Mon 18 Dec 2023 18:07:24 +0000
ROA not before:           Mon 18 Dec 2023 18:02:24 +0000
ROA not after:            Mon 16 Dec 2024 18:07:24 +0000
asID:                     52525
IP address blocks:        2804:de8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:b5:45:d4:f3:47:75:be:b4:33:7f:31:35:d6:7c:7d:ab:e1:09:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C6016755CC52A3177ED1F706975750B6CD6C7A9
        Validity
            Not Before: Dec 18 18:02:24 2023 GMT
            Not After : Dec 16 18:07:24 2024 GMT
        Subject: CN=D01F0269920148D76B2335AF759620ADE9FFC0B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f4:3c:7d:f4:b1:4a:64:8b:e0:b7:9c:db:ef:
                    d4:3b:0c:5a:b4:36:a0:74:fa:f4:1b:0e:20:34:6a:
                    5a:c8:a2:f6:fe:34:0f:ed:ea:ee:cb:e7:01:2c:23:
                    5e:4b:a5:ee:49:ba:15:7d:b0:f1:ff:16:c0:72:75:
                    a6:f2:91:75:2a:8f:21:97:25:4b:64:9b:2f:47:0d:
                    40:6c:76:69:4f:c7:b9:33:2e:78:5a:f1:2c:d8:d3:
                    8b:34:8b:94:24:81:8d:b0:58:2e:ed:99:3a:14:2e:
                    07:9e:ae:0b:2f:27:83:9e:45:6c:26:0f:97:78:9a:
                    68:f7:69:63:91:17:70:af:3f:1b:05:08:05:25:37:
                    80:bd:b5:ae:9d:38:84:20:24:45:87:c9:9b:aa:9e:
                    72:ab:77:01:a1:f4:60:a1:55:f5:4b:99:8b:ce:57:
                    fa:da:d2:ff:71:ce:da:f0:ee:88:7d:04:07:19:83:
                    3b:8c:99:02:2a:14:d0:67:3b:c2:8d:9b:0b:7e:42:
                    c3:23:81:83:11:4f:36:94:45:ba:22:b3:a2:36:1f:
                    b1:38:d7:18:38:66:a1:53:33:df:2a:26:7d:ee:c9:
                    31:cc:5d:e7:62:0a:a3:ff:22:c6:96:9a:2d:e2:ad:
                    45:cb:f7:43:6f:2d:03:6b:9f:8b:ae:3b:12:f9:29:
                    1e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:1F:02:69:92:01:48:D7:6B:23:35:AF:75:96:20:AD:E9:FF:C0:B9
            X509v3 Authority Key Identifier:
                keyid:1C:60:16:75:5C:C5:2A:31:77:ED:1F:70:69:75:75:0B:6C:D6:C7:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/23XmFxKGVUuf16x1KV1kaNPcxFSP8CKfJwbakmk1szjj/0/1C6016755CC52A3177ED1F706975750B6CD6C7A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C6016755CC52A3177ED1F706975750B6CD6C7A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/23XmFxKGVUuf16x1KV1kaNPcxFSP8CKfJwbakmk1szjj/0/323830343a6465383a3a2f33322d3332203d3e203532353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:de8::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:44:cf:19:6f:05:bc:2e:f1:a3:b0:51:f6:24:4f:bb:ab:42:
         b7:9f:27:2b:f0:07:10:30:06:ed:9a:23:7e:a4:c3:30:ce:6d:
         e0:b0:ce:0d:6b:9c:eb:e2:70:44:c1:ae:2b:01:50:3d:be:84:
         c1:e4:e2:41:67:e9:02:be:53:cc:1b:ab:48:10:33:c3:ba:2d:
         b8:fd:8c:f3:e2:c9:8d:e0:0f:6d:a3:de:62:e2:7b:a9:90:01:
         9e:da:1f:9f:e0:0f:f3:80:76:eb:28:75:fb:6a:d1:e6:ea:4f:
         b6:d1:5c:a2:43:f9:fc:aa:35:1d:84:83:e9:83:01:4e:74:36:
         1a:49:4a:b5:4d:bd:91:77:83:7c:53:f2:a8:33:b1:7b:90:63:
         48:c4:49:42:6e:40:88:2a:c6:bc:4e:07:d9:74:40:01:90:11:
         f7:5f:da:1f:e0:61:f7:fb:7a:4e:e1:7e:ff:dd:a4:14:cf:26:
         3d:68:da:67:11:7e:a8:72:57:39:95:19:e0:b4:93:a8:60:99:
         98:ec:1d:99:f4:58:b7:b0:8b:f4:ac:2a:9c:8a:64:49:93:8e:
         c4:72:60:9e:09:9b:20:9e:65:5f:a7:27:c2:24:98:d9:b6:f5:
         51:ad:08:3b:ba:21:99:22:23:93:c8:aa:8e:1a:e5:8e:28:ee:
         70:2b:70:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----