Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/0/323830343a336462303a3a2f33332d3333203d3e20323636353437.roa
File:                     323830343a336462303a3a2f33332d3333203d3e20323636353437.roa (raw, json)
Hash identifier:          M74gZoHPN+8AXpBdPQDH7yrshpMCPda+X0OAEqSdh/U=
Subject key identifier:   8A:D8:BE:4A:E1:44:CD:79:62:B5:5B:56:A4:F3:45:C3:8E:6B:0C:EA
Certificate issuer:       /CN=24458C13F40474E3749CBA0A49F59B362B4D3E0B
Certificate serial:       4F7F5726663E64FA6CC2C5EE54047D60172FCFE0
Authority key identifier: 24:45:8C:13:F4:04:74:E3:74:9C:BA:0A:49:F5:9B:36:2B:4D:3E:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24458C13F40474E3749CBA0A49F59B362B4D3E0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/0/323830343a336462303a3a2f33332d3333203d3e20323636353437.roa
Signing time:             Tue 14 Nov 2023 04:27:59 +0000
ROA not before:           Tue 14 Nov 2023 04:22:59 +0000
ROA not after:            Tue 12 Nov 2024 04:27:59 +0000
asID:                     266547
IP address blocks:        2804:3db0::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:7f:57:26:66:3e:64:fa:6c:c2:c5:ee:54:04:7d:60:17:2f:cf:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24458C13F40474E3749CBA0A49F59B362B4D3E0B
        Validity
            Not Before: Nov 14 04:22:59 2023 GMT
            Not After : Nov 12 04:27:59 2024 GMT
        Subject: CN=8AD8BE4AE144CD7962B55B56A4F345C38E6B0CEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:24:e3:6e:d8:78:c3:92:14:7b:e2:63:32:3e:
                    32:58:86:46:5e:76:2a:c7:68:f8:31:24:7b:1f:b7:
                    93:f9:67:60:c4:14:db:98:00:b4:61:4c:2d:5a:03:
                    7e:2e:88:a9:df:e3:5c:ab:ff:7c:ed:a8:03:4a:0e:
                    ed:f6:c8:bc:16:f0:40:ef:2b:0f:d0:84:9d:54:9b:
                    51:a2:20:31:5c:01:df:ff:fb:39:7f:e7:59:7b:82:
                    0b:b8:e8:b9:3c:61:f4:c2:5b:fb:94:dd:9a:7f:14:
                    81:ae:04:69:60:d4:7d:a0:90:27:81:53:91:9e:d8:
                    80:14:5e:27:e3:c3:45:7c:0e:52:da:11:98:75:1a:
                    9d:92:8e:e6:43:33:7e:b7:a3:f4:ae:28:02:84:37:
                    c8:10:7f:3a:ff:47:20:3a:aa:12:dd:b5:a7:c5:98:
                    d5:1e:ef:05:f4:f6:d2:a3:43:76:cb:7c:e3:df:de:
                    04:1a:f1:cf:55:6c:34:a0:0e:60:bd:0f:3a:6b:02:
                    03:ab:af:da:78:13:17:48:9d:45:24:c8:21:46:0b:
                    b5:bf:4a:65:78:90:21:90:d5:9d:0a:b7:c1:a4:ca:
                    e0:4f:7f:49:a4:eb:3c:75:cf:ce:1a:b2:a2:3a:e5:
                    73:b1:b1:c2:94:ce:d8:e8:c8:a4:f9:65:de:0f:27:
                    1e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D8:BE:4A:E1:44:CD:79:62:B5:5B:56:A4:F3:45:C3:8E:6B:0C:EA
            X509v3 Authority Key Identifier:
                keyid:24:45:8C:13:F4:04:74:E3:74:9C:BA:0A:49:F5:9B:36:2B:4D:3E:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/0/24458C13F40474E3749CBA0A49F59B362B4D3E0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24458C13F40474E3749CBA0A49F59B362B4D3E0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/0/323830343a336462303a3a2f33332d3333203d3e20323636353437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3db0::/33

    Signature Algorithm: sha256WithRSAEncryption
         83:89:ba:da:95:9f:89:4c:2c:27:6f:d1:ed:15:6e:12:aa:82:
         2f:6c:5a:e2:ce:e8:bb:5e:9f:a0:26:ae:bb:37:c5:99:91:d1:
         d6:9d:cb:22:67:36:23:26:ae:2a:63:ef:6a:de:9b:86:5d:d0:
         71:21:ee:c6:d0:5a:da:68:fc:6e:7b:c6:b9:44:1d:43:40:5b:
         64:d7:7d:9a:ec:28:41:cf:13:57:fd:1b:44:32:d2:5e:34:7e:
         d9:51:50:1d:0b:a9:ee:54:aa:b0:64:1e:da:f3:01:ca:1c:fa:
         e2:d5:19:f6:92:3b:f2:87:42:2e:82:94:db:ca:c1:e7:f2:46:
         fb:67:44:ba:ac:cc:7d:74:3e:3a:a6:6c:8a:63:cc:12:37:42:
         2d:54:66:59:9e:b9:4f:a1:3a:36:87:0c:2a:1d:a9:61:5d:42:
         6c:d7:49:23:d0:7b:05:e9:ab:93:c7:95:c9:c3:3d:00:ea:fa:
         93:ff:ac:ba:ff:8c:ab:8e:c3:71:27:23:74:af:aa:cf:89:d5:
         1f:1b:a3:38:91:d8:5d:11:ad:f9:0e:bc:6a:79:4d:77:53:36:
         6e:6e:32:2f:0c:a2:cc:fd:45:b0:cb:64:35:2c:89:7c:48:37:
         29:5c:cf:25:86:80:59:ca:f3:ff:4a:54:28:77:8d:4c:68:bd:
         7d:3a:c2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----