Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6BoNsV1PbeVFA2Z685XmHu2dJECNBDZeAzw7GqpkHN8j/1/323830343a313537303a383030303a3a2f33332d3333203d3e20323633333838.roa
File:                     323830343a313537303a383030303a3a2f33332d3333203d3e20323633333838.roa (raw, json)
Hash identifier:          Jdgx0Yevv6yMx2d2YO0vUgSCkk5hgjUhxzHPTKY8q3U=
Subject key identifier:   CF:D5:F1:BF:6E:1A:26:3F:17:84:07:B4:39:D4:AA:88:E6:12:6E:97
Certificate issuer:       /CN=F50ED26E841BEB4852CE6D2BE1F4380385810C46
Certificate serial:       5B925B7641F8B451266E742526796B7097FFDC1E
Authority key identifier: F5:0E:D2:6E:84:1B:EB:48:52:CE:6D:2B:E1:F4:38:03:85:81:0C:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F50ED26E841BEB4852CE6D2BE1F4380385810C46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6BoNsV1PbeVFA2Z685XmHu2dJECNBDZeAzw7GqpkHN8j/1/323830343a313537303a383030303a3a2f33332d3333203d3e20323633333838.roa
Signing time:             Tue 09 Apr 2024 13:48:43 +0000
ROA not before:           Tue 09 Apr 2024 13:43:43 +0000
ROA not after:            Tue 08 Apr 2025 13:48:43 +0000
asID:                     263388
IP address blocks:        2804:1570:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:92:5b:76:41:f8:b4:51:26:6e:74:25:26:79:6b:70:97:ff:dc:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F50ED26E841BEB4852CE6D2BE1F4380385810C46
        Validity
            Not Before: Apr  9 13:43:43 2024 GMT
            Not After : Apr  8 13:48:43 2025 GMT
        Subject: CN=CFD5F1BF6E1A263F178407B439D4AA88E6126E97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1b:74:aa:9f:16:9f:ba:19:e6:76:e5:c5:19:
                    d5:e0:a1:c0:c6:1b:f3:a9:59:98:48:c5:09:0f:a5:
                    83:a8:d0:b1:1f:73:0b:21:c4:04:62:31:87:9d:ac:
                    ad:46:84:16:c1:69:9a:e4:08:b1:a2:cc:57:61:e8:
                    f2:8c:ba:cd:b2:73:7a:f8:d3:06:b9:5b:e7:77:ed:
                    be:1f:7d:ce:5b:6d:b3:db:ec:a8:f6:7e:78:75:f1:
                    f9:7a:f8:05:fb:71:61:1a:a1:4b:28:04:36:b3:fd:
                    42:bd:fc:e7:89:92:6b:24:cf:74:c8:41:56:74:22:
                    05:ae:5c:fa:04:27:4b:38:2e:e7:e0:10:09:1b:f3:
                    89:39:e7:a4:f3:e3:bc:65:6a:04:fc:a8:e9:91:8e:
                    84:46:9c:23:c2:c7:3c:f8:5b:c0:2c:77:7a:45:f2:
                    0d:ee:61:9b:ce:62:cc:97:af:2c:61:d4:ef:28:fd:
                    4b:af:8f:dc:73:28:ab:52:c3:95:58:ad:64:ce:09:
                    70:91:06:3b:2c:1b:7c:69:77:4a:9a:3b:c5:d9:b7:
                    c7:7f:5b:63:dd:43:d3:6e:8b:6a:ff:e7:4d:29:fb:
                    45:53:3a:e7:ff:d6:9e:ee:fc:dd:86:38:b0:af:1c:
                    b6:58:df:80:d3:5d:f4:0f:cc:96:d2:bf:72:18:92:
                    6d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D5:F1:BF:6E:1A:26:3F:17:84:07:B4:39:D4:AA:88:E6:12:6E:97
            X509v3 Authority Key Identifier:
                keyid:F5:0E:D2:6E:84:1B:EB:48:52:CE:6D:2B:E1:F4:38:03:85:81:0C:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6BoNsV1PbeVFA2Z685XmHu2dJECNBDZeAzw7GqpkHN8j/1/F50ED26E841BEB4852CE6D2BE1F4380385810C46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F50ED26E841BEB4852CE6D2BE1F4380385810C46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BoNsV1PbeVFA2Z685XmHu2dJECNBDZeAzw7GqpkHN8j/1/323830343a313537303a383030303a3a2f33332d3333203d3e20323633333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1570:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         2f:4c:28:5c:45:e7:30:b9:22:c2:50:e6:12:dd:d6:66:28:77:
         19:0f:e3:54:2e:f0:0e:0b:97:00:e7:14:1b:ac:1b:8b:a8:fd:
         93:68:25:04:2f:03:6f:e4:a5:7d:d2:62:31:19:df:c2:ed:ec:
         77:b3:29:9d:58:a1:2f:b3:a4:a0:f2:3a:1f:b1:d2:f8:80:d0:
         73:17:1c:eb:06:78:dd:97:d0:54:df:6f:7b:37:1d:2d:62:f2:
         a4:04:b6:55:ff:9e:08:07:07:77:1f:2d:fd:35:e9:e0:28:77:
         36:f6:63:51:86:8f:39:a1:da:5e:64:7a:fc:93:98:bc:7c:f0:
         d9:eb:49:43:e2:d4:e7:4d:d3:5b:e6:a6:54:cf:d1:d2:2a:4b:
         3f:34:ea:13:dd:85:67:f9:24:2e:a8:55:11:06:6a:50:ba:52:
         90:3d:2b:55:28:9b:df:aa:e6:20:8a:4c:06:15:fc:ac:33:57:
         44:5d:71:f3:5a:7e:ce:08:ea:8a:75:ca:06:97:59:78:b0:4e:
         b4:74:2b:16:23:3a:ba:1a:49:66:de:11:ab:c5:5a:ae:f9:8e:
         b6:69:7f:75:a3:2f:0c:5c:8e:87:89:a9:8f:02:56:7d:6b:98:
         5a:d4:46:53:e2:d9:30:1f:ca:b9:60:78:17:33:43:3e:6b:aa:
         a5:19:ed:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----