Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2rRoWJwNQ526ciBqTAhCpgznHWwxFRixx1BJ5pn45kRb/0/323830343a333737633a3a2f33322d3438203d3e20323636343138.roa
File:                     323830343a333737633a3a2f33322d3438203d3e20323636343138.roa (raw, json)
Hash identifier:          6/CrmkQtff1g3nDPEo/3X9xmfUKgIft++LwEM1XQIhE=
Subject key identifier:   39:17:23:0D:EC:C0:5E:D8:22:2D:24:F3:14:56:38:34:BB:BA:72:5D
Certificate issuer:       /CN=6C09F94E9C74C1F19763139DE321D52AD02F1DB8
Certificate serial:       2C3C8DBF55048CBD89230CF4D2D3550DB5B97776
Authority key identifier: 6C:09:F9:4E:9C:74:C1:F1:97:63:13:9D:E3:21:D5:2A:D0:2F:1D:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6C09F94E9C74C1F19763139DE321D52AD02F1DB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2rRoWJwNQ526ciBqTAhCpgznHWwxFRixx1BJ5pn45kRb/0/323830343a333737633a3a2f33322d3438203d3e20323636343138.roa
Signing time:             Thu 14 Sep 2023 20:45:27 +0000
ROA not before:           Thu 14 Sep 2023 20:40:27 +0000
ROA not after:            Thu 12 Sep 2024 20:45:27 +0000
asID:                     266418
IP address blocks:        2804:377c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:3c:8d:bf:55:04:8c:bd:89:23:0c:f4:d2:d3:55:0d:b5:b9:77:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C09F94E9C74C1F19763139DE321D52AD02F1DB8
        Validity
            Not Before: Sep 14 20:40:27 2023 GMT
            Not After : Sep 12 20:45:27 2024 GMT
        Subject: CN=3917230DECC05ED8222D24F314563834BBBA725D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ab:1b:44:7a:a8:a9:c3:07:8c:db:77:aa:36:
                    d0:42:c3:d0:1a:58:c9:4b:60:22:fb:31:b3:1a:f2:
                    78:f1:f3:43:9e:29:e1:c4:37:3d:a1:c1:0d:3e:bc:
                    ef:70:e8:6c:42:8d:37:8c:17:98:1c:b7:4d:d0:dc:
                    df:04:f4:d1:ce:a0:8d:5e:b9:21:9e:ca:1f:6d:7a:
                    b3:d8:35:89:23:17:38:06:61:1f:60:47:70:b4:f3:
                    26:30:c3:3f:e2:36:c0:10:36:bf:35:62:8d:0f:7f:
                    c2:a9:f2:c8:85:41:13:bc:4d:79:5f:c9:29:63:96:
                    26:66:40:e7:af:23:c1:4b:a3:ce:12:e1:00:9e:d4:
                    5a:a8:b5:4f:af:e1:51:b9:0d:1d:74:aa:01:05:c0:
                    87:ab:e4:7e:44:8e:e4:20:12:14:8e:a9:69:e2:f2:
                    29:6b:ed:15:88:d4:bc:b0:21:53:22:f7:5e:c5:d6:
                    3b:11:2b:43:fe:73:a6:1e:34:b6:d5:f6:13:1a:62:
                    86:82:ec:4f:20:e8:ba:98:a0:e5:46:44:eb:a4:28:
                    d5:fe:4e:11:04:65:1f:da:88:b0:96:cf:72:c6:f9:
                    d4:b5:89:2c:00:14:21:bb:5f:e2:8a:29:0a:e1:88:
                    7f:bb:40:ce:02:57:c8:80:1e:3b:4c:bb:f0:ad:e1:
                    8c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:17:23:0D:EC:C0:5E:D8:22:2D:24:F3:14:56:38:34:BB:BA:72:5D
            X509v3 Authority Key Identifier:
                keyid:6C:09:F9:4E:9C:74:C1:F1:97:63:13:9D:E3:21:D5:2A:D0:2F:1D:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2rRoWJwNQ526ciBqTAhCpgznHWwxFRixx1BJ5pn45kRb/0/6C09F94E9C74C1F19763139DE321D52AD02F1DB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6C09F94E9C74C1F19763139DE321D52AD02F1DB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2rRoWJwNQ526ciBqTAhCpgznHWwxFRixx1BJ5pn45kRb/0/323830343a333737633a3a2f33322d3438203d3e20323636343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:377c::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:9c:67:39:64:cc:9c:4e:b9:03:a1:77:0d:a1:ab:db:05:ac:
         1f:0b:38:2d:04:16:72:60:ac:05:1f:c3:e9:f5:ad:66:d3:ec:
         96:cf:fc:2f:5e:e3:4e:56:22:f7:c3:2b:8f:b2:a2:81:dd:f9:
         ac:5d:71:c7:73:ba:b3:53:c1:ee:8b:c0:3e:28:fd:9f:f4:64:
         7f:9d:2c:5f:da:a1:5d:61:da:ff:63:4f:de:8b:aa:67:33:92:
         7f:e0:c2:05:9c:c2:5b:93:f4:be:8c:fc:42:ba:62:66:74:df:
         86:32:03:a0:d4:fc:40:7c:8f:e4:66:c6:6f:db:e3:69:13:3c:
         7e:fe:1a:eb:d5:fb:2f:33:8f:35:7a:d5:d1:91:00:69:de:3d:
         44:61:34:2f:10:ec:88:81:c0:ad:c6:27:7f:20:d5:a9:bc:81:
         fb:78:e8:38:c0:00:3d:95:bf:7a:4e:ff:6e:fa:32:4e:aa:68:
         b4:87:3a:d4:20:ac:e0:81:bc:eb:af:10:d8:4f:3e:cb:d7:f9:
         98:07:2a:2d:b4:bc:19:74:1a:be:dd:e7:7f:d1:58:f8:39:de:
         2e:ef:0d:4d:3b:cc:28:92:d6:3a:80:34:18:71:83:38:50:89:
         fa:19:ed:d8:0f:0b:3e:98:77:21:ee:f5:01:8f:c6:5f:b3:2e:
         74:1a:fe:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----