Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6AfQ9wrUnNxmTaqFnPFgrXNGy4dFUoDsCF1B8aGQkUrK/0/323830343a373562303a3a2f33342d3334203d3e20323731303633.roa
File:                     323830343a373562303a3a2f33342d3334203d3e20323731303633.roa (raw, json)
Hash identifier:          pbIsCIK/9SN3VLRJ6Sb6No3a9yw2ydbGI7bksqqgXC0=
Subject key identifier:   A6:50:FD:75:D6:7E:F3:A3:69:B9:C8:6C:31:9D:F3:81:8A:3C:ED:51
Certificate issuer:       /CN=B7308D854D4BE5121F93D850679F0E7402EB7388
Certificate serial:       4CAF6943222E9C3F7F932743EEDBC8B1DFA54781
Authority key identifier: B7:30:8D:85:4D:4B:E5:12:1F:93:D8:50:67:9F:0E:74:02:EB:73:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7308D854D4BE5121F93D850679F0E7402EB7388.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6AfQ9wrUnNxmTaqFnPFgrXNGy4dFUoDsCF1B8aGQkUrK/0/323830343a373562303a3a2f33342d3334203d3e20323731303633.roa
Signing time:             Mon 31 Jul 2023 18:31:09 +0000
ROA not before:           Mon 31 Jul 2023 18:26:09 +0000
ROA not after:            Mon 29 Jul 2024 18:31:09 +0000
asID:                     271063
IP address blocks:        2804:75b0::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:af:69:43:22:2e:9c:3f:7f:93:27:43:ee:db:c8:b1:df:a5:47:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7308D854D4BE5121F93D850679F0E7402EB7388
        Validity
            Not Before: Jul 31 18:26:09 2023 GMT
            Not After : Jul 29 18:31:09 2024 GMT
        Subject: CN=A650FD75D67EF3A369B9C86C319DF3818A3CED51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:79:05:f3:f9:40:7a:cf:fa:f1:91:93:d8:75:
                    97:ca:a9:a7:77:4f:d4:a0:cf:24:2c:96:c6:f7:f7:
                    8d:0f:0c:c3:85:85:c4:0f:c1:c8:54:7b:88:51:46:
                    9a:4f:35:a0:3e:a0:d9:4e:22:97:9c:4f:0c:e3:a7:
                    d9:af:6f:ef:b3:5b:ae:48:0c:cc:e6:95:39:c0:b0:
                    98:da:7d:d5:df:7f:c8:e3:ef:87:e9:91:ac:17:73:
                    06:43:83:47:24:fb:21:c5:5f:7f:e2:39:1b:b1:6d:
                    12:9d:b7:5f:52:2f:2d:e9:e6:9a:2f:8a:4c:bf:6d:
                    9c:d7:c9:9e:8a:2a:a7:c3:b7:e3:65:18:70:bb:f0:
                    b4:28:0e:1b:f4:ec:eb:49:37:f4:56:95:ef:51:41:
                    ba:df:38:17:0c:b8:3e:0a:2f:bb:e7:a2:dd:17:17:
                    ac:90:16:c3:62:38:bc:d0:6f:c7:4a:e6:2c:b3:0e:
                    4d:d9:e0:08:63:42:b8:9c:d7:a7:75:57:04:77:12:
                    44:f2:96:08:5c:65:55:34:d5:10:aa:7e:b8:d6:d0:
                    47:d9:b1:79:04:f5:b5:ff:01:72:5b:af:0a:ec:91:
                    1d:dd:f5:ae:a9:27:3e:ba:0b:d4:a6:6d:58:64:1b:
                    5a:cc:63:76:d0:87:59:e6:2e:c9:a4:33:b1:b4:e7:
                    47:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:50:FD:75:D6:7E:F3:A3:69:B9:C8:6C:31:9D:F3:81:8A:3C:ED:51
            X509v3 Authority Key Identifier:
                keyid:B7:30:8D:85:4D:4B:E5:12:1F:93:D8:50:67:9F:0E:74:02:EB:73:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6AfQ9wrUnNxmTaqFnPFgrXNGy4dFUoDsCF1B8aGQkUrK/0/B7308D854D4BE5121F93D850679F0E7402EB7388.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7308D854D4BE5121F93D850679F0E7402EB7388.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6AfQ9wrUnNxmTaqFnPFgrXNGy4dFUoDsCF1B8aGQkUrK/0/323830343a373562303a3a2f33342d3334203d3e20323731303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:75b0::/34

    Signature Algorithm: sha256WithRSAEncryption
         42:b1:a0:2f:54:85:fa:60:e0:8c:cd:cc:7f:98:8f:a6:36:10:
         16:7c:cd:48:24:28:7a:69:3d:41:0e:2b:5f:1e:2b:dc:71:13:
         70:b1:d2:37:01:79:e6:81:b9:eb:10:59:81:6b:dc:4a:ef:17:
         43:06:5e:ea:c5:9a:8c:08:0a:4f:2b:13:29:a7:54:29:80:a0:
         42:5b:cf:92:fb:3d:0b:46:71:77:e6:1d:c5:f3:e9:d5:3a:21:
         0a:69:c9:36:e0:21:68:c9:b5:e4:be:28:53:0f:f9:af:90:68:
         d8:17:d3:f8:6f:81:33:d0:f3:98:66:44:ed:de:22:8f:14:a0:
         71:be:3e:47:7a:d3:c7:21:ea:d4:4f:eb:fa:dd:5f:29:80:fb:
         08:0c:5b:3e:0b:68:25:f1:41:f0:60:09:03:74:dd:9d:04:47:
         c9:8c:41:92:08:e8:85:4e:2e:6e:9f:e3:2c:e1:39:17:81:a3:
         89:62:1b:e1:94:1a:d8:96:54:20:e0:90:82:d4:bf:72:7a:57:
         e2:c0:4e:26:17:2f:91:4d:ce:56:27:e3:9c:79:fe:85:49:61:
         79:49:0d:aa:45:ad:df:23:3a:13:a4:6a:9e:54:3b:cb:a8:e7:
         d6:67:6b:c7:ba:06:48:e4:ae:d4:d0:85:71:fb:fc:17:f8:93:
         11:0f:c7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----