Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6JhJ2U85E22AtMVdSxLETathULV1zgTkLBKcSqPTeTTu/0/323830343a333964383a3a2f33322d3332203d3e20323636303534.roa
File:                     323830343a333964383a3a2f33322d3332203d3e20323636303534.roa (raw, json)
Hash identifier:          kgiBNvUv99JsSfHxBG2o29+WYzNywAjRDMTlyoHTNk4=
Subject key identifier:   27:98:39:CF:29:27:47:BB:B8:17:F4:77:A3:D0:F3:68:91:AD:D7:5C
Certificate issuer:       /CN=DBF158771926EFB8CA7EEE542CF98F947B92A763
Certificate serial:       0B61C88D3C8728D245E8C9952FA2C9360D15C5E6
Authority key identifier: DB:F1:58:77:19:26:EF:B8:CA:7E:EE:54:2C:F9:8F:94:7B:92:A7:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBF158771926EFB8CA7EEE542CF98F947B92A763.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6JhJ2U85E22AtMVdSxLETathULV1zgTkLBKcSqPTeTTu/0/323830343a333964383a3a2f33322d3332203d3e20323636303534.roa
Signing time:             Fri 23 Aug 2024 20:04:35 +0000
ROA not before:           Fri 23 Aug 2024 19:59:35 +0000
ROA not after:            Fri 22 Aug 2025 20:04:35 +0000
asID:                     266054
IP address blocks:        2804:39d8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:61:c8:8d:3c:87:28:d2:45:e8:c9:95:2f:a2:c9:36:0d:15:c5:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBF158771926EFB8CA7EEE542CF98F947B92A763
        Validity
            Not Before: Aug 23 19:59:35 2024 GMT
            Not After : Aug 22 20:04:35 2025 GMT
        Subject: CN=279839CF292747BBB817F477A3D0F36891ADD75C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1a:5b:b9:23:51:58:86:9f:58:2e:dd:22:bf:
                    41:f3:da:e4:9e:4e:f1:89:95:10:7d:9c:29:83:54:
                    09:4d:9c:20:68:d7:69:ad:3d:f7:01:b9:59:5a:78:
                    e9:8f:59:35:32:4d:d1:2f:12:49:e9:dd:45:c3:13:
                    7b:c4:1e:d7:06:57:7f:d1:91:84:1b:e3:47:23:02:
                    f3:57:10:e9:27:63:18:c4:33:a8:09:ce:0f:cc:68:
                    2a:52:d4:27:bc:c6:0c:e4:2b:c7:5e:c3:3c:8e:d5:
                    95:60:09:24:1f:c3:9e:d8:8b:1d:0f:b1:64:44:c5:
                    29:96:43:da:78:e3:58:7b:5a:bd:82:1f:3f:32:0a:
                    ed:a4:96:9f:ff:aa:d1:84:63:f4:5e:ce:1e:d3:c6:
                    40:f8:fb:74:85:d9:63:95:5b:4c:89:ec:2a:31:13:
                    a6:d8:be:70:05:52:8e:e3:c5:d6:d2:1c:f8:b1:dd:
                    74:91:3f:a5:98:99:9b:bf:8d:f0:2b:2b:3f:ba:0f:
                    40:58:7b:b2:7f:e4:7c:0d:75:d7:8d:e9:aa:96:09:
                    2e:1c:8e:0c:4a:f0:3b:6c:4f:3f:d5:ba:06:57:bc:
                    c1:fa:cd:54:e2:f8:9d:ba:72:a7:a0:92:c5:61:18:
                    7d:8d:ab:ee:23:b3:fb:b7:8c:54:81:11:30:a0:df:
                    f4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:98:39:CF:29:27:47:BB:B8:17:F4:77:A3:D0:F3:68:91:AD:D7:5C
            X509v3 Authority Key Identifier:
                keyid:DB:F1:58:77:19:26:EF:B8:CA:7E:EE:54:2C:F9:8F:94:7B:92:A7:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6JhJ2U85E22AtMVdSxLETathULV1zgTkLBKcSqPTeTTu/0/DBF158771926EFB8CA7EEE542CF98F947B92A763.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBF158771926EFB8CA7EEE542CF98F947B92A763.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6JhJ2U85E22AtMVdSxLETathULV1zgTkLBKcSqPTeTTu/0/323830343a333964383a3a2f33322d3332203d3e20323636303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:39d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:08:1a:60:ee:02:27:7a:cf:dc:e6:c8:ba:95:33:09:14:a4:
         0c:c4:c9:4c:b1:d7:8c:d7:f0:d7:be:a7:da:83:3c:4b:ad:32:
         41:1f:16:11:8e:20:ac:cf:0a:e3:12:58:aa:8d:91:89:a2:70:
         0a:4e:d2:12:a8:65:a1:e2:4b:d5:00:95:ba:8a:d9:dd:8f:73:
         9e:ba:42:62:3d:fc:9c:11:f7:cc:12:d3:92:b7:a6:a7:48:7e:
         bc:5a:8e:3d:d3:04:d5:47:26:0c:af:6d:69:b2:6f:6d:b9:cd:
         21:31:b8:7c:ed:0a:6a:a1:1d:ff:72:78:5d:71:f1:44:44:97:
         ce:3d:b5:ad:2e:0b:b7:88:fd:43:08:2a:8d:61:e5:a8:19:9b:
         7b:55:9a:d2:84:d2:12:a6:ee:03:a7:21:5b:c0:98:57:6a:ed:
         8c:05:52:b1:17:d2:dd:27:91:87:e2:ad:2e:7f:57:12:88:56:
         7b:87:70:3b:e0:20:f6:5a:7c:98:7f:1a:0c:f5:05:27:d9:00:
         35:0c:2d:f7:e9:06:51:c4:01:c2:5b:14:3b:8d:57:a4:2e:57:
         f3:ce:ea:f6:4b:ee:4f:0d:40:30:77:15:42:43:aa:4f:d2:5e:
         bd:04:c6:85:8c:04:6c:21:47:75:ec:df:54:74:56:aa:79:37:
         1b:f1:9e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----