Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/0/323830343a323431383a3a2f33322d313238203d3e20323634323031.roa
File:                     323830343a323431383a3a2f33322d313238203d3e20323634323031.roa (raw, json)
Hash identifier:          YueV4fJaS9RmM0nX3jQcUChvlMiGhxgvDhbWC+bsKQ8=
Subject key identifier:   EF:53:40:00:7B:34:FA:CA:73:05:C6:D8:8D:95:7D:40:84:71:1E:B5
Certificate issuer:       /CN=6A23AA2AFCE2E327B2EDF3EF40EBD122CCBA8862
Certificate serial:       3264B735005A157A61AC4CB4D978C7678826D913
Authority key identifier: 6A:23:AA:2A:FC:E2:E3:27:B2:ED:F3:EF:40:EB:D1:22:CC:BA:88:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A23AA2AFCE2E327B2EDF3EF40EBD122CCBA8862.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/0/323830343a323431383a3a2f33322d313238203d3e20323634323031.roa
Signing time:             Wed 25 Oct 2023 12:20:13 +0000
ROA not before:           Wed 25 Oct 2023 12:15:13 +0000
ROA not after:            Fri 25 Oct 2024 12:20:13 +0000
asID:                     264201
IP address blocks:        2804:2418::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:64:b7:35:00:5a:15:7a:61:ac:4c:b4:d9:78:c7:67:88:26:d9:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A23AA2AFCE2E327B2EDF3EF40EBD122CCBA8862
        Validity
            Not Before: Oct 25 12:15:13 2023 GMT
            Not After : Oct 25 12:20:13 2024 GMT
        Subject: CN=3082010A0282010100DA19C3FC0BC18AFC6D6BE9A6DFE89D48B0E75044F30423699354EA7DC4A500C7CA046C8B40B4771B7E420DFAB0CAED938C2B5D4F57BDE03040BAC8E862EC93476855A5A6E44F8164754C47938EEA416D7DD9595A9DE73818A10E4846D080C1E1F479799F47D9F156BFCDBE5DB0BC8B94ED309D350091753B42EAAE7C8BC4DA9F7218981FB186025FFB9DACDC4719361D89ABAEBB5661CAB476DD40573C5CBC26B8D41756B1843422FBFB628688EDC2FF573B67E0ABD646D6A76F863F43A56F4402D4A7BB0B8BC3556C1BC594700B4337196ED22F46E2FA5C94DD985B33F31ED8924F9D9EA575E2263B9C38FCD5E403F816661130259B6132F55BAAEBC34FC1210203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:19:c3:fc:0b:c1:8a:fc:6d:6b:e9:a6:df:e8:
                    9d:48:b0:e7:50:44:f3:04:23:69:93:54:ea:7d:c4:
                    a5:00:c7:ca:04:6c:8b:40:b4:77:1b:7e:42:0d:fa:
                    b0:ca:ed:93:8c:2b:5d:4f:57:bd:e0:30:40:ba:c8:
                    e8:62:ec:93:47:68:55:a5:a6:e4:4f:81:64:75:4c:
                    47:93:8e:ea:41:6d:7d:d9:59:5a:9d:e7:38:18:a1:
                    0e:48:46:d0:80:c1:e1:f4:79:79:9f:47:d9:f1:56:
                    bf:cd:be:5d:b0:bc:8b:94:ed:30:9d:35:00:91:75:
                    3b:42:ea:ae:7c:8b:c4:da:9f:72:18:98:1f:b1:86:
                    02:5f:fb:9d:ac:dc:47:19:36:1d:89:ab:ae:bb:56:
                    61:ca:b4:76:dd:40:57:3c:5c:bc:26:b8:d4:17:56:
                    b1:84:34:22:fb:fb:62:86:88:ed:c2:ff:57:3b:67:
                    e0:ab:d6:46:d6:a7:6f:86:3f:43:a5:6f:44:02:d4:
                    a7:bb:0b:8b:c3:55:6c:1b:c5:94:70:0b:43:37:19:
                    6e:d2:2f:46:e2:fa:5c:94:dd:98:5b:33:f3:1e:d8:
                    92:4f:9d:9e:a5:75:e2:26:3b:9c:38:fc:d5:e4:03:
                    f8:16:66:11:30:25:9b:61:32:f5:5b:aa:eb:c3:4f:
                    c1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:53:40:00:7B:34:FA:CA:73:05:C6:D8:8D:95:7D:40:84:71:1E:B5
            X509v3 Authority Key Identifier:
                keyid:6A:23:AA:2A:FC:E2:E3:27:B2:ED:F3:EF:40:EB:D1:22:CC:BA:88:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/0/6A23AA2AFCE2E327B2EDF3EF40EBD122CCBA8862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A23AA2AFCE2E327B2EDF3EF40EBD122CCBA8862.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/0/323830343a323431383a3a2f33322d313238203d3e20323634323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2418::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:e4:94:96:3a:2a:0f:7c:46:39:7d:49:c5:ad:eb:a8:a0:ea:
         76:a4:02:2d:37:0e:ac:f0:b5:2d:a2:69:69:a7:8d:2c:d7:21:
         45:b1:2c:df:87:57:8d:2f:f1:2b:12:85:30:62:71:49:9e:cb:
         d5:50:13:8b:44:89:66:c7:90:2b:a7:34:f4:e8:26:1a:91:9f:
         a3:6f:90:c2:9e:0e:89:63:93:f4:dd:7c:54:e9:c2:d5:91:5e:
         9c:4a:3f:af:b4:1e:b5:b3:9d:a9:56:46:85:0b:c9:28:4f:00:
         18:bf:eb:47:48:2f:7a:97:c8:ff:db:b8:b2:ba:c3:06:1e:af:
         ec:2c:37:d1:0f:9a:47:01:b6:b9:1c:8b:b7:5d:8a:ee:4a:43:
         59:5d:5b:2a:f3:e2:34:c8:0a:08:51:7b:2b:d5:a3:1b:35:7c:
         e2:37:e6:06:99:6c:f7:24:ea:9c:76:f5:e1:59:39:4e:fe:5f:
         51:76:00:a8:0f:77:34:b0:42:2e:1f:cd:c8:ab:18:fe:1d:e9:
         31:db:60:e6:29:d4:d5:b7:a5:65:3a:2a:92:fd:18:ca:d0:63:
         7d:d4:6d:6c:ac:0b:7c:0b:9c:a9:72:ef:f9:5a:37:91:3f:31:
         00:e1:9d:73:ff:94:ca:3b:41:46:41:15:42:ca:36:55:67:8e:
         bd:f3:fa:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----