Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/323830343a346166633a3a2f33342d3334203d3e203631363134.roa
File:                     323830343a346166633a3a2f33342d3334203d3e203631363134.roa (raw, json)
Hash identifier:          iii9QTwk32HOP50dDuLoPf5/ffefVU99LrLf5HsKTFA=
Subject key identifier:   DF:C4:4A:58:F6:DD:F6:5C:33:36:6D:2B:0B:D6:DC:B9:DB:D4:7C:DB
Certificate issuer:       /CN=BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637
Certificate serial:       2539AC76719AC4125ABBE19EFCD05580D7D6D4F2
Authority key identifier: BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/323830343a346166633a3a2f33342d3334203d3e203631363134.roa
Signing time:             Mon 11 Sep 2023 11:20:11 +0000
ROA not before:           Mon 11 Sep 2023 11:15:11 +0000
ROA not after:            Mon 09 Sep 2024 11:20:11 +0000
asID:                     61614
IP address blocks:        2804:4afc::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:39:ac:76:71:9a:c4:12:5a:bb:e1:9e:fc:d0:55:80:d7:d6:d4:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637
        Validity
            Not Before: Sep 11 11:15:11 2023 GMT
            Not After : Sep  9 11:20:11 2024 GMT
        Subject: CN=3082010A0282010100C652F73B843FF0789C45DE3312EE1FD346B13606A8AFA999DFAD348F92E5795FD02110F591011502C0688208C9FFA36A0D617C0FF537572CED8C1A39C8826DC91A8325FDEC858B5B76E370953341D6ADA5DA97D5DFF95C582764ABD5FAC80CFFF621A053188911E8F3D738BC3FBFAA760F1D9B29C5B09E4EF16BFCBCB2C022E9F740C58E7543D457550B4AC85FF9D7C73154A23E37933E238E3E0306EEC56CA7704FB41A5644DF2A5D025333CAC1BB3283D665625C072F407DB2BCF448DDCD4A9E16C2DD0DC0764F62F93C856571B262A6C495733626C4A7F80538DEA3D0D8252492CA619EFF3D99A80820483F47C2F1EE734555EF765F880E6C4DE5BA1CE6950203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:52:f7:3b:84:3f:f0:78:9c:45:de:33:12:ee:
                    1f:d3:46:b1:36:06:a8:af:a9:99:df:ad:34:8f:92:
                    e5:79:5f:d0:21:10:f5:91:01:15:02:c0:68:82:08:
                    c9:ff:a3:6a:0d:61:7c:0f:f5:37:57:2c:ed:8c:1a:
                    39:c8:82:6d:c9:1a:83:25:fd:ec:85:8b:5b:76:e3:
                    70:95:33:41:d6:ad:a5:da:97:d5:df:f9:5c:58:27:
                    64:ab:d5:fa:c8:0c:ff:f6:21:a0:53:18:89:11:e8:
                    f3:d7:38:bc:3f:bf:aa:76:0f:1d:9b:29:c5:b0:9e:
                    4e:f1:6b:fc:bc:b2:c0:22:e9:f7:40:c5:8e:75:43:
                    d4:57:55:0b:4a:c8:5f:f9:d7:c7:31:54:a2:3e:37:
                    93:3e:23:8e:3e:03:06:ee:c5:6c:a7:70:4f:b4:1a:
                    56:44:df:2a:5d:02:53:33:ca:c1:bb:32:83:d6:65:
                    62:5c:07:2f:40:7d:b2:bc:f4:48:dd:cd:4a:9e:16:
                    c2:dd:0d:c0:76:4f:62:f9:3c:85:65:71:b2:62:a6:
                    c4:95:73:36:26:c4:a7:f8:05:38:de:a3:d0:d8:25:
                    24:92:ca:61:9e:ff:3d:99:a8:08:20:48:3f:47:c2:
                    f1:ee:73:45:55:ef:76:5f:88:0e:6c:4d:e5:ba:1c:
                    e6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:C4:4A:58:F6:DD:F6:5C:33:36:6D:2B:0B:D6:DC:B9:DB:D4:7C:DB
            X509v3 Authority Key Identifier:
                keyid:BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/323830343a346166633a3a2f33342d3334203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4afc::/34

    Signature Algorithm: sha256WithRSAEncryption
         8a:57:6f:f9:cd:26:55:6d:75:b9:55:e7:e5:83:fd:77:1d:5e:
         fc:88:3d:5a:6c:5f:19:5d:30:64:97:b2:ca:6f:57:2b:4f:bd:
         b2:e4:1a:ae:c7:e9:bb:a9:d5:bd:7e:ee:40:d6:dc:bc:b7:5f:
         61:9c:24:43:f3:62:3f:50:60:f0:29:a2:2e:7e:ce:23:50:ac:
         00:bf:25:4e:25:9f:0f:6e:c5:b9:69:44:ca:fe:ed:e0:91:5b:
         1c:a5:d8:3f:81:c4:0f:6c:f3:95:75:91:a8:e2:cb:7b:40:68:
         55:8d:d4:0b:7b:b4:43:6f:69:8e:06:32:66:56:8f:9f:f8:33:
         c6:a5:45:ec:57:bb:db:7d:9d:9f:a1:a5:8c:84:d4:a5:ca:dc:
         ff:1e:34:2c:c5:67:cf:d9:4d:cc:a5:96:da:44:3f:40:75:ba:
         cc:7b:d2:9e:8d:fe:99:a6:a9:82:4f:e9:3c:0c:0d:e6:cb:03:
         ca:1d:f4:28:05:ea:c3:b4:a1:23:56:6c:3e:a0:c1:62:3d:57:
         09:be:98:33:ed:c0:27:9d:c2:5f:88:9b:c9:fe:8a:20:b4:d8:
         57:40:f4:26:5f:35:bd:fd:46:32:0d:8e:5d:7e:ff:75:3b:45:
         81:0a:9a:83:42:96:2a:ae:b5:79:0f:bc:0e:72:d2:17:2f:94:
         7a:15:0b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----