Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/323830343a333132343a3a2f33322d3332203d3e20323634393936.roa
File:                     323830343a333132343a3a2f33322d3332203d3e20323634393936.roa (raw, json)
Hash identifier:          EtuLp9josL94FyARQJ7VsUdbGg932CiGJpC/JWQQXSc=
Subject key identifier:   78:61:D6:AF:02:36:40:87:A4:C9:70:3E:77:12:65:C2:32:67:31:73
Certificate issuer:       /CN=9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E
Certificate serial:       46CDCBBCA7BA2A03A59830E5AE47F0E079066F32
Authority key identifier: 9A:7D:F1:61:7E:6D:2E:A5:D5:01:7B:A0:00:CA:4D:1D:D6:D6:2F:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/323830343a333132343a3a2f33322d3332203d3e20323634393936.roa
Signing time:             Fri 23 Jun 2023 20:06:48 +0000
ROA not before:           Fri 23 Jun 2023 20:01:48 +0000
ROA not after:            Fri 21 Jun 2024 20:06:48 +0000
asID:                     264996
IP address blocks:        2804:3124::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:cd:cb:bc:a7:ba:2a:03:a5:98:30:e5:ae:47:f0:e0:79:06:6f:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E
        Validity
            Not Before: Jun 23 20:01:48 2023 GMT
            Not After : Jun 21 20:06:48 2024 GMT
        Subject: CN=7861D6AF02364087A4C9703E771265C232673173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9e:ff:6b:f8:57:54:96:b8:31:d7:6c:0f:2b:
                    23:4d:10:7d:40:5e:33:a7:01:2c:fb:61:7f:1e:d5:
                    42:ed:c9:37:a8:5d:53:8b:51:b7:c3:17:b7:6e:0b:
                    14:e4:a5:40:78:e1:f8:9d:44:27:0e:f3:9d:35:da:
                    66:14:1a:88:37:20:6b:70:1d:4c:14:35:b6:d2:a0:
                    fe:ae:f0:a6:8f:ca:06:31:91:e4:c2:89:a7:2c:57:
                    8b:1b:2d:2c:8b:49:de:57:0a:95:f3:2a:16:57:9a:
                    e8:e9:48:f9:38:26:52:47:c6:78:6f:c9:7a:c5:35:
                    a8:ef:5a:09:8e:2c:ca:f2:18:d0:f6:be:f4:5b:e3:
                    5a:3c:66:73:54:46:71:b1:dd:bf:36:46:7c:88:12:
                    d6:45:7d:75:ae:d9:f8:a7:bf:33:0c:7d:53:c1:ea:
                    bd:11:ec:89:ea:4d:a2:6c:c6:f1:24:e1:45:96:ea:
                    ab:8a:f0:c7:87:1e:4a:8f:93:38:ed:3a:0f:fa:01:
                    d4:93:0a:27:a8:70:73:66:c9:90:2b:b6:0c:83:51:
                    ed:16:6e:dd:96:b3:a7:aa:50:46:d6:07:26:c2:75:
                    4a:ee:a4:40:e7:c1:ee:81:54:e9:b1:63:ee:92:d5:
                    57:37:6e:05:f2:49:16:d2:79:dd:18:ff:d2:63:60:
                    7d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:61:D6:AF:02:36:40:87:A4:C9:70:3E:77:12:65:C2:32:67:31:73
            X509v3 Authority Key Identifier:
                keyid:9A:7D:F1:61:7E:6D:2E:A5:D5:01:7B:A0:00:CA:4D:1D:D6:D6:2F:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/323830343a333132343a3a2f33322d3332203d3e20323634393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3124::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:ff:cb:4f:e7:62:e8:8c:ea:45:35:89:db:4d:9e:e7:2e:38:
         4c:b4:4f:85:25:2d:04:c9:72:79:47:f8:a3:bf:af:48:39:4b:
         99:33:3d:e3:cf:63:e1:d0:97:75:d7:15:03:bf:3b:14:37:9b:
         67:40:79:06:a3:ce:4b:e9:06:4d:f8:48:3a:a5:75:e5:51:cd:
         5f:9a:93:f4:85:97:41:12:70:69:76:fa:a1:0b:ef:68:55:0b:
         6a:76:e4:a2:18:f2:71:e0:8a:3b:8e:0f:50:71:4c:b8:51:6d:
         51:0f:9d:b6:9f:9d:79:b5:6d:74:c4:9c:3f:f1:d4:1c:a6:a2:
         2e:02:23:70:b7:45:b1:10:ba:8d:9c:d6:0c:a6:a7:ae:bc:a0:
         d7:cc:2b:91:7f:6f:3b:e7:6c:38:24:5f:26:6b:5d:21:95:a3:
         b2:5d:58:60:c4:0f:cf:af:2f:fc:1c:9a:2e:33:17:2c:23:29:
         95:44:4d:97:f1:52:c6:82:7d:a0:35:a4:7f:38:48:56:00:85:
         b4:b1:e8:e9:62:25:26:1a:ca:ec:1f:bf:8a:83:28:52:41:9e:
         58:51:40:6c:ef:42:4d:3f:b6:23:3a:54:3b:28:e7:29:3e:7b:
         20:da:a4:47:57:da:2e:2a:31:e3:a5:85:61:b9:65:2c:06:8d:
         a7:c5:5a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----