Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5SAkHxAhQGmQmaW4jG2YmUxqRHaXvdbMB2gGPZjvKZes/0/323830343a363262633a633063613a3a2f34382d3438203d3e20323639333135.roa
File:                     323830343a363262633a633063613a3a2f34382d3438203d3e20323639333135.roa (raw, json)
Hash identifier:          EaOr2W9WSixhfFN8CckF+Op28Up4qTczPtq/irWTxNc=
Subject key identifier:   7C:C1:B9:D7:97:E8:7E:67:54:F3:E4:0D:FE:97:64:9A:5D:F6:A3:FA
Certificate issuer:       /CN=B7A998992696FF1723DF042964560BDF4E6F9722
Certificate serial:       4EDB823A60D7680F6A36EFD2F1A7EACE10CB0653
Authority key identifier: B7:A9:98:99:26:96:FF:17:23:DF:04:29:64:56:0B:DF:4E:6F:97:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7A998992696FF1723DF042964560BDF4E6F9722.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5SAkHxAhQGmQmaW4jG2YmUxqRHaXvdbMB2gGPZjvKZes/0/323830343a363262633a633063613a3a2f34382d3438203d3e20323639333135.roa
Signing time:             Mon 23 Oct 2023 21:00:00 +0000
ROA not before:           Mon 23 Oct 2023 20:55:00 +0000
ROA not after:            Mon 21 Oct 2024 21:00:00 +0000
asID:                     269315
IP address blocks:        2804:62bc:c0ca::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:db:82:3a:60:d7:68:0f:6a:36:ef:d2:f1:a7:ea:ce:10:cb:06:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7A998992696FF1723DF042964560BDF4E6F9722
        Validity
            Not Before: Oct 23 20:55:00 2023 GMT
            Not After : Oct 21 21:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:cc:62:0e:ce:2a:73:43:93:17:c2:36:e7:a4:
                    21:c0:3a:a0:5b:58:ad:c6:a2:b3:93:e2:29:fd:6f:
                    03:80:19:a2:19:70:ac:56:c1:a5:41:23:e4:42:45:
                    8f:f2:00:49:39:26:14:f9:0c:a7:0a:e0:b7:70:d2:
                    a3:cb:f1:8e:7a:dc:8e:32:a2:90:b5:6f:80:85:68:
                    09:a2:70:49:0a:76:82:f8:df:17:dc:3c:4b:c9:0a:
                    95:6f:eb:fe:43:85:8f:d7:eb:7c:03:15:4d:43:e9:
                    84:9b:e4:6a:3a:f8:d5:c4:df:ae:e0:38:2b:4e:98:
                    91:ff:71:26:e5:62:c5:48:da:e8:4e:23:c5:40:2d:
                    8c:46:b5:e7:73:7c:0c:96:35:ef:26:e3:f2:db:dd:
                    0d:77:a4:1a:68:37:7d:32:16:f0:5e:35:5f:27:e3:
                    eb:41:98:04:48:0c:38:c7:e0:58:36:96:c9:1f:1b:
                    6b:d2:38:6e:ac:d0:85:34:1a:12:a0:64:97:58:7a:
                    e5:68:c9:dd:16:8f:26:ce:05:dd:44:b8:33:61:aa:
                    5c:f0:df:04:25:5b:3c:f5:30:7c:d8:d7:32:12:d0:
                    f6:e5:1a:f5:5a:5c:3c:88:97:ea:6a:56:e7:de:d3:
                    a0:3e:5e:97:c4:67:cd:42:a7:31:74:1e:9f:3e:81:
                    de:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C1:B9:D7:97:E8:7E:67:54:F3:E4:0D:FE:97:64:9A:5D:F6:A3:FA
            X509v3 Authority Key Identifier:
                keyid:B7:A9:98:99:26:96:FF:17:23:DF:04:29:64:56:0B:DF:4E:6F:97:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5SAkHxAhQGmQmaW4jG2YmUxqRHaXvdbMB2gGPZjvKZes/0/B7A998992696FF1723DF042964560BDF4E6F9722.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7A998992696FF1723DF042964560BDF4E6F9722.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5SAkHxAhQGmQmaW4jG2YmUxqRHaXvdbMB2gGPZjvKZes/0/323830343a363262633a633063613a3a2f34382d3438203d3e20323639333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:62bc:c0ca::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:9a:d7:e8:06:b4:c3:d3:da:f9:a9:71:fc:db:f8:f2:1b:43:
         01:1f:79:63:9c:a8:46:d2:71:45:97:32:7b:5b:1e:c3:4f:ff:
         0e:79:fe:4e:16:54:fd:21:2a:9d:d9:3d:55:a3:9e:e0:b9:c1:
         4e:78:31:7a:06:96:93:9a:56:14:ba:53:97:4f:94:64:bc:e6:
         eb:e5:81:0a:a4:49:80:90:d5:46:e6:f7:58:2a:e1:64:a8:1d:
         fd:3e:c5:35:c5:96:38:d1:fc:c9:cd:96:33:92:16:f9:1d:70:
         1a:f0:44:0a:f2:b3:00:aa:b9:7c:e2:5b:8e:7d:50:24:b0:a4:
         ff:b6:7d:76:a0:53:25:54:c1:59:8b:d7:80:d5:43:39:db:f1:
         fd:c1:b5:ec:1b:aa:be:30:c6:2a:28:f3:d7:ee:f8:6a:7d:3c:
         a0:34:c9:b5:58:6f:77:80:e7:35:c9:bc:44:ca:8c:f9:6c:4f:
         e1:28:bd:2e:2d:35:69:40:59:fc:eb:0a:f5:68:ff:c7:38:29:
         03:f3:8a:0f:f0:00:7a:d6:40:fa:f5:17:00:ae:64:3c:bc:bf:
         cb:62:75:67:a0:60:a5:f0:de:d3:f0:c5:5a:64:de:a2:1d:e9:
         b9:11:01:50:3e:9f:6c:38:4f:e6:ba:ff:52:fa:41:ab:7e:1a:
         1c:f9:b2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----