Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/0/323830343a333531633a336465623a3a2f34382d3438203d3e20323636323639.roa
File:                     323830343a333531633a336465623a3a2f34382d3438203d3e20323636323639.roa (raw, json)
Hash identifier:          5yDaCBbZWbt/kB65ADomp7NrC0yz8BCg0r8OfVczDwI=
Subject key identifier:   56:C3:F7:B1:F3:5D:23:FA:A3:24:09:E6:E8:11:20:07:B7:2F:CD:79
Certificate issuer:       /CN=46E3A44C62966D6B8651186BB0877B157D025A80
Certificate serial:       1D8B8BDC4AFF70701ABD8007442C1E1631EF9854
Authority key identifier: 46:E3:A4:4C:62:96:6D:6B:86:51:18:6B:B0:87:7B:15:7D:02:5A:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/46E3A44C62966D6B8651186BB0877B157D025A80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/0/323830343a333531633a336465623a3a2f34382d3438203d3e20323636323639.roa
Signing time:             Sat 14 Jan 2023 14:23:50 +0000
ROA not before:           Sat 14 Jan 2023 14:18:50 +0000
ROA not after:            Sat 13 Jan 2024 14:23:50 +0000
asID:                     266269
IP address blocks:        2804:351c:3deb::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:8b:8b:dc:4a:ff:70:70:1a:bd:80:07:44:2c:1e:16:31:ef:98:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46E3A44C62966D6B8651186BB0877B157D025A80
        Validity
            Not Before: Jan 14 14:18:50 2023 GMT
            Not After : Jan 13 14:23:50 2024 GMT
        Subject: CN=56C3F7B1F35D23FAA32409E6E8112007B72FCD79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:de:88:bc:25:76:3d:60:eb:80:1a:fc:22:04:
                    64:c3:dd:03:2f:f3:fe:b6:87:b8:d2:03:1f:fd:ad:
                    62:ea:63:5c:46:c6:a3:66:4c:3d:df:13:64:6c:80:
                    bf:dd:8f:d6:11:6a:66:59:89:f4:13:5d:3a:9b:03:
                    51:33:96:2c:e9:42:1f:80:c7:e6:25:56:d7:82:33:
                    43:6b:07:1b:93:dd:0c:d9:71:eb:02:b7:f8:a3:4f:
                    51:d4:07:42:1e:b3:64:22:f6:dd:8f:08:e8:cb:0f:
                    0b:a9:a3:8c:f8:d4:94:12:1d:60:bd:bd:2b:d2:15:
                    38:19:e4:3a:9c:89:1d:c2:b6:2c:e8:71:2c:67:26:
                    dd:ec:53:33:56:b8:40:3e:b2:7d:76:9e:c8:dd:90:
                    1d:8a:eb:b7:f7:df:8e:3c:cb:c9:a5:83:6f:68:13:
                    ae:ba:39:04:d7:ed:2e:e4:00:60:82:6c:e5:37:c6:
                    73:45:db:75:42:6d:88:42:ed:65:b7:e9:4b:0a:a1:
                    72:e2:8c:2a:e6:20:72:06:45:45:b6:ee:db:e4:89:
                    50:bd:f9:e5:ec:31:85:13:ab:7f:70:db:fa:62:a9:
                    c6:9a:eb:b4:f4:96:cd:06:cb:f6:37:1c:66:4a:47:
                    e8:44:d2:2d:f8:ec:97:63:c3:fc:12:0d:e8:a0:d6:
                    7e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C3:F7:B1:F3:5D:23:FA:A3:24:09:E6:E8:11:20:07:B7:2F:CD:79
            X509v3 Authority Key Identifier:
                keyid:46:E3:A4:4C:62:96:6D:6B:86:51:18:6B:B0:87:7B:15:7D:02:5A:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/0/46E3A44C62966D6B8651186BB0877B157D025A80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/46E3A44C62966D6B8651186BB0877B157D025A80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/0/323830343a333531633a336465623a3a2f34382d3438203d3e20323636323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:351c:3deb::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:ab:10:73:12:9c:cd:8c:21:a2:19:d5:1f:24:d3:cd:3e:dc:
         34:cb:23:aa:c8:fb:2e:52:77:d4:4e:10:b6:98:17:f3:10:fd:
         ab:bc:18:23:16:c7:a5:da:7c:e6:b8:da:2a:d0:75:b4:5d:34:
         b4:ff:86:3d:d7:d4:aa:77:57:70:fd:04:fc:b4:4a:f7:19:ae:
         31:f8:3b:05:37:8e:34:90:26:cc:a3:40:74:74:bb:aa:a6:07:
         a2:07:ce:a3:22:d3:8a:1a:36:7f:fd:fc:0b:0c:6f:de:b5:cc:
         56:bc:62:70:52:f3:51:fc:49:d8:5f:f3:99:15:99:5f:30:95:
         41:4e:42:47:08:7f:cc:9a:d1:9f:ad:d7:3c:54:22:ac:ed:cd:
         74:0e:ac:05:e4:80:6d:b4:fe:84:4a:5b:fd:65:35:46:d8:98:
         47:0f:9f:40:e5:c5:10:31:60:13:23:9c:b5:90:d9:2e:18:4d:
         82:03:2d:04:f8:54:e3:20:8a:70:56:eb:6d:ff:1c:c0:5e:23:
         8a:67:69:09:66:22:5b:48:3b:46:2d:34:82:53:14:80:c5:0a:
         12:64:94:d7:47:be:97:6f:6c:d3:ec:83:a7:4c:d6:49:67:ac:
         24:ec:15:b8:19:c0:1d:42:8a:a1:b7:45:7f:2c:04:5a:f4:67:
         53:8b:9a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----