Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6BoNsV1PbeVFA2Z685XmHu2dJECNBDZeAzw7GqpkHN8j/1/323830343a313537303a3a2f33322d3332203d3e20323633333838.roa
File:                     323830343a313537303a3a2f33322d3332203d3e20323633333838.roa (raw, json)
Hash identifier:          V9gMo/1Tv05EaEykigz+1fwVSbkl17OtLNXaKZfSq1M=
Subject key identifier:   8B:BF:FF:83:D6:ED:82:79:98:0F:74:72:6E:5E:D3:71:14:1A:D5:8F
Certificate issuer:       /CN=F50ED26E841BEB4852CE6D2BE1F4380385810C46
Certificate serial:       4A4D0DB615A0F6CD27756C4C691F40575D9818F5
Authority key identifier: F5:0E:D2:6E:84:1B:EB:48:52:CE:6D:2B:E1:F4:38:03:85:81:0C:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F50ED26E841BEB4852CE6D2BE1F4380385810C46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6BoNsV1PbeVFA2Z685XmHu2dJECNBDZeAzw7GqpkHN8j/1/323830343a313537303a3a2f33322d3332203d3e20323633333838.roa
Signing time:             Tue 09 Apr 2024 13:48:33 +0000
ROA not before:           Tue 09 Apr 2024 13:43:33 +0000
ROA not after:            Tue 08 Apr 2025 13:48:33 +0000
asID:                     263388
IP address blocks:        2804:1570::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:4d:0d:b6:15:a0:f6:cd:27:75:6c:4c:69:1f:40:57:5d:98:18:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F50ED26E841BEB4852CE6D2BE1F4380385810C46
        Validity
            Not Before: Apr  9 13:43:33 2024 GMT
            Not After : Apr  8 13:48:33 2025 GMT
        Subject: CN=8BBFFF83D6ED8279980F74726E5ED371141AD58F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:85:04:c3:55:3e:4c:c6:c7:34:af:2f:b1:66:
                    10:e4:4b:ab:3a:9a:b1:2b:be:de:ab:10:70:a1:f1:
                    66:b9:87:54:57:40:08:b7:cb:72:35:c1:27:f7:9e:
                    84:02:82:7d:07:fe:05:50:42:03:d7:23:8d:da:62:
                    d3:7e:79:7f:b0:df:c9:48:d2:39:62:a7:24:84:d8:
                    52:cd:e9:05:bd:c3:57:16:68:45:23:ba:b8:ff:c5:
                    b0:76:88:54:61:d4:7e:b7:ca:8e:ed:4a:58:ad:5f:
                    2f:e5:3e:b6:cf:69:bc:88:44:9b:68:15:26:27:4e:
                    4e:e2:45:16:96:ad:a6:02:06:d2:8d:55:eb:25:ad:
                    e4:a4:88:30:36:08:80:6c:11:c1:e3:f4:af:08:c5:
                    37:e8:42:de:8f:fa:65:e3:89:27:4a:d1:d8:75:0e:
                    be:5e:a2:4c:2b:32:35:8e:c8:69:0e:f3:b7:69:ea:
                    64:56:ea:26:31:54:0c:e6:9f:3b:ba:85:a9:1c:3f:
                    92:2e:05:38:cf:9d:cf:7f:26:95:3f:2c:ef:13:6f:
                    da:43:98:79:a3:22:59:9d:48:55:90:61:c6:f9:9c:
                    2d:c1:70:a6:c3:23:df:0d:55:6a:41:e7:c8:ac:0e:
                    e7:af:ae:cb:1b:41:6c:23:81:58:9c:be:64:f5:dc:
                    f7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:BF:FF:83:D6:ED:82:79:98:0F:74:72:6E:5E:D3:71:14:1A:D5:8F
            X509v3 Authority Key Identifier:
                keyid:F5:0E:D2:6E:84:1B:EB:48:52:CE:6D:2B:E1:F4:38:03:85:81:0C:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6BoNsV1PbeVFA2Z685XmHu2dJECNBDZeAzw7GqpkHN8j/1/F50ED26E841BEB4852CE6D2BE1F4380385810C46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F50ED26E841BEB4852CE6D2BE1F4380385810C46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BoNsV1PbeVFA2Z685XmHu2dJECNBDZeAzw7GqpkHN8j/1/323830343a313537303a3a2f33322d3332203d3e20323633333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1570::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:3e:49:c1:4d:6a:7a:47:10:3c:90:1a:ae:f1:a0:5b:db:2b:
         cd:f6:91:c0:40:fc:c9:80:83:56:77:62:9a:6f:9b:e4:e8:3c:
         df:71:d6:4f:c4:28:d9:71:1b:4c:6d:f7:08:e9:d1:34:03:69:
         d4:af:fb:c2:81:c4:9a:0f:17:83:f9:c6:79:59:88:30:05:5f:
         b9:c3:ce:2f:9d:d4:d5:95:de:51:78:27:f5:60:5b:11:c5:1f:
         65:be:48:70:61:12:f3:e2:1b:21:ed:d6:f2:66:68:e5:f7:7f:
         f7:58:bf:75:07:54:20:5e:d4:e9:7a:9d:5c:9b:3c:71:5e:91:
         5c:5d:df:a7:46:8b:85:7e:22:38:ae:89:0f:3c:0c:4b:cb:82:
         fa:eb:87:41:4b:7a:10:29:21:57:0a:0a:79:d1:ea:9a:1a:f6:
         8c:d0:cc:60:82:48:7a:95:20:a2:bf:9a:58:2d:2f:9c:52:23:
         3c:a2:46:c3:67:8e:aa:31:85:04:cc:5e:94:1a:cb:77:42:19:
         68:a5:73:69:6a:9c:30:67:a1:b8:07:37:14:6b:00:d9:c4:95:
         cc:28:06:02:de:23:7c:e5:10:62:cf:0e:b4:6a:a7:81:7a:20:
         ca:30:a2:44:69:4c:bf:1e:53:8e:3e:3b:fa:12:92:e8:af:29:
         7f:e8:f9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----