Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/0/323830343a366261303a3a2f33322d3332203d3e20323730343133.roa
File:                     323830343a366261303a3a2f33322d3332203d3e20323730343133.roa (raw, json)
Hash identifier:          BdS+eCYk1MhTFE5FypH1fhNFUCeYH7blL7jTfMpAQlc=
Subject key identifier:   16:4F:48:B4:43:94:DC:37:01:B9:5E:EE:BD:20:D6:37:30:F0:5F:D9
Certificate issuer:       /CN=AA5079D0DD3D74B9F2F3083FF52A9C68F66BF2A9
Certificate serial:       7EF42E827FB2DB689C8AB80291DC3D5ECD33F354
Authority key identifier: AA:50:79:D0:DD:3D:74:B9:F2:F3:08:3F:F5:2A:9C:68:F6:6B:F2:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA5079D0DD3D74B9F2F3083FF52A9C68F66BF2A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/0/323830343a366261303a3a2f33322d3332203d3e20323730343133.roa
Signing time:             Mon 26 Jun 2023 13:08:03 +0000
ROA not before:           Mon 26 Jun 2023 13:03:03 +0000
ROA not after:            Mon 24 Jun 2024 13:08:03 +0000
asID:                     270413
IP address blocks:        2804:6ba0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:f4:2e:82:7f:b2:db:68:9c:8a:b8:02:91:dc:3d:5e:cd:33:f3:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA5079D0DD3D74B9F2F3083FF52A9C68F66BF2A9
        Validity
            Not Before: Jun 26 13:03:03 2023 GMT
            Not After : Jun 24 13:08:03 2024 GMT
        Subject: CN=164F48B44394DC3701B95EEEBD20D63730F05FD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:32:c4:98:1c:6a:9c:75:28:d8:24:04:7e:c8:
                    71:27:cc:a4:d1:c8:66:b0:43:55:4b:b2:46:fe:51:
                    3e:8b:5c:18:e6:54:ef:b4:6e:37:2c:6a:7b:15:95:
                    96:0d:b6:eb:b2:f7:64:15:bc:41:88:8f:bc:ae:dd:
                    e7:43:4a:b4:13:05:c4:f0:34:45:a8:20:f0:d7:94:
                    58:0b:6b:64:ca:2b:6e:1b:7c:9d:ad:a4:de:d2:07:
                    37:47:35:d6:0e:ef:ac:49:56:7a:ad:98:a1:d2:93:
                    f3:50:03:b7:76:6f:c0:5e:7a:a3:fa:f5:b1:3f:54:
                    8e:2c:ee:30:43:04:10:69:d6:f6:37:f7:52:a2:18:
                    10:c5:c7:bb:b1:77:66:b3:9e:6b:7e:cd:c6:fb:0d:
                    35:cb:cb:24:65:11:14:9a:8a:64:e1:9e:73:f8:35:
                    03:9d:55:68:56:13:1f:9b:90:17:62:73:4f:f9:d9:
                    d2:a0:eb:cf:c1:ea:56:fc:05:40:8e:24:1a:49:78:
                    0c:7c:07:1c:4e:40:25:2a:d2:cf:7c:1c:1a:b3:3a:
                    8a:e1:06:9b:ba:13:96:b4:85:b9:f2:d3:ce:8c:5e:
                    ee:e5:35:22:40:97:2e:7a:ff:a0:5f:23:3c:f2:eb:
                    a9:04:0c:1f:11:12:40:25:69:1a:2a:6f:bf:d2:e9:
                    cc:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:4F:48:B4:43:94:DC:37:01:B9:5E:EE:BD:20:D6:37:30:F0:5F:D9
            X509v3 Authority Key Identifier:
                keyid:AA:50:79:D0:DD:3D:74:B9:F2:F3:08:3F:F5:2A:9C:68:F6:6B:F2:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/0/AA5079D0DD3D74B9F2F3083FF52A9C68F66BF2A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA5079D0DD3D74B9F2F3083FF52A9C68F66BF2A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/0/323830343a366261303a3a2f33322d3332203d3e20323730343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:bc:7a:bd:61:0c:10:d5:5b:55:6c:4f:ac:d1:1a:e6:bc:0c:
         35:f6:ce:23:a1:99:c7:79:71:8e:ba:92:75:e2:8f:08:b1:60:
         72:bd:05:4f:a5:6e:d1:82:e2:4e:93:ec:23:59:18:9c:71:0b:
         45:51:a8:1a:bd:1e:d6:23:c3:7d:3f:77:0a:56:d3:b1:6d:1a:
         fa:91:83:1e:3a:5c:d4:41:13:f8:3d:72:60:30:d5:3c:ea:24:
         1e:88:d0:e7:5e:61:e2:ae:f8:7a:90:c9:48:bb:51:c0:70:09:
         c2:45:0c:b6:e8:a2:fa:ea:d5:6b:1e:26:db:40:e3:70:f5:2c:
         f7:e6:4b:0f:20:a2:37:7f:f0:f3:bb:ea:25:b0:a5:a7:42:2b:
         c3:3a:1d:13:83:09:ca:80:19:da:e6:82:f7:50:3d:a8:f9:fd:
         f9:ce:48:fc:2b:dd:c2:05:3d:e6:8a:5f:e2:ce:b2:03:a8:03:
         61:de:23:1f:ce:5f:84:5d:6a:df:e3:7b:ca:81:04:8b:38:7c:
         44:60:7e:43:1c:d0:3e:e2:24:3b:42:dc:a4:d7:56:fb:e3:c0:
         07:0b:d4:99:98:4d:80:11:34:29:ea:30:66:23:b8:8b:6e:ca:
         b0:d8:d8:e4:63:0d:10:1e:a0:13:f3:2b:6f:53:c0:8c:9b:ca:
         96:b6:44:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----