Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QQgQvBNDWgDFvbzU12VsqXaWeutroNve8xSwTfsjByi/0/323830343a343864343a3a2f33322d3438203d3e20323637313437.roa
File:                     323830343a343864343a3a2f33322d3438203d3e20323637313437.roa (raw, json)
Hash identifier:          i0NV/MRSADYUVtmugo4NQpR1tiB/UCADU6mKRXNwAvM=
Subject key identifier:   57:D2:29:51:49:D3:1B:82:4C:AC:2D:90:55:B8:FB:BA:CA:22:F0:DE
Certificate issuer:       /CN=B73BF0E2F1298145FEEE53A6FD22172627C39AAC
Certificate serial:       26557C4E6F37D0F3A09D6E27328CE35479856110
Authority key identifier: B7:3B:F0:E2:F1:29:81:45:FE:EE:53:A6:FD:22:17:26:27:C3:9A:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B73BF0E2F1298145FEEE53A6FD22172627C39AAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QQgQvBNDWgDFvbzU12VsqXaWeutroNve8xSwTfsjByi/0/323830343a343864343a3a2f33322d3438203d3e20323637313437.roa
Signing time:             Wed 12 Jul 2023 21:12:32 +0000
ROA not before:           Wed 12 Jul 2023 21:07:32 +0000
ROA not after:            Wed 10 Jul 2024 21:12:32 +0000
asID:                     267147
IP address blocks:        2804:48d4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:55:7c:4e:6f:37:d0:f3:a0:9d:6e:27:32:8c:e3:54:79:85:61:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B73BF0E2F1298145FEEE53A6FD22172627C39AAC
        Validity
            Not Before: Jul 12 21:07:32 2023 GMT
            Not After : Jul 10 21:12:32 2024 GMT
        Subject: CN=57D2295149D31B824CAC2D9055B8FBBACA22F0DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bb:35:56:aa:3e:8d:3e:c8:83:07:ce:09:d9:
                    8c:ac:7f:5c:96:a7:01:17:49:dc:3b:f2:0e:bf:06:
                    30:35:19:30:93:77:8d:e0:62:06:f1:da:ac:3d:c2:
                    f9:ca:fb:38:84:da:f6:fc:5a:19:d7:70:02:20:2c:
                    d9:ee:d9:fa:35:d7:1b:49:86:13:4e:8e:bb:3d:51:
                    f1:5f:0e:9d:78:16:17:28:13:d6:fd:a2:40:c3:94:
                    3a:d0:88:46:d0:13:a9:a0:22:03:86:97:3a:c0:b4:
                    a5:d3:33:10:44:a2:6f:80:4a:3d:f6:4a:e4:b7:f5:
                    e7:e3:b1:c5:e0:ca:f5:e7:6a:45:bf:3e:f1:51:fb:
                    f1:3b:3f:3d:74:4d:54:84:33:8f:19:08:86:03:c7:
                    99:a3:a5:b8:7b:e9:df:4e:06:e2:b9:9f:73:1b:02:
                    52:47:a7:54:1d:f5:57:03:95:af:2f:17:b1:d5:4e:
                    e4:5e:a7:22:06:64:ae:78:60:a9:98:f2:6c:cd:4f:
                    c1:1b:37:d6:aa:f1:57:e6:56:d2:c6:b0:03:8f:23:
                    d2:6f:ef:e5:d5:47:98:56:36:96:f6:16:38:5a:78:
                    05:82:08:bb:d9:5d:15:2a:f2:2b:55:9d:45:20:40:
                    ca:56:8a:7e:bd:1b:02:20:bc:2f:ee:64:11:6f:15:
                    77:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D2:29:51:49:D3:1B:82:4C:AC:2D:90:55:B8:FB:BA:CA:22:F0:DE
            X509v3 Authority Key Identifier:
                keyid:B7:3B:F0:E2:F1:29:81:45:FE:EE:53:A6:FD:22:17:26:27:C3:9A:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QQgQvBNDWgDFvbzU12VsqXaWeutroNve8xSwTfsjByi/0/B73BF0E2F1298145FEEE53A6FD22172627C39AAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B73BF0E2F1298145FEEE53A6FD22172627C39AAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QQgQvBNDWgDFvbzU12VsqXaWeutroNve8xSwTfsjByi/0/323830343a343864343a3a2f33322d3438203d3e20323637313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:48d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:b7:55:91:50:7b:20:50:c9:85:66:5d:3d:9d:63:fb:a4:fd:
         38:bc:9a:02:ff:13:bb:2b:b7:1e:c8:21:89:38:10:ce:3a:4f:
         4a:a5:3b:fe:9d:18:61:31:96:b0:49:49:5d:dd:3a:9e:a4:48:
         0a:16:ff:85:8e:bf:9e:54:e3:cc:b2:3c:51:2e:87:9a:38:7b:
         57:5e:fa:d2:55:27:d9:ae:7c:0d:a6:9d:be:d3:e0:aa:4e:e1:
         20:29:d2:23:ed:57:99:4a:1a:69:a7:60:fa:b0:93:0b:0a:bf:
         82:d0:a5:e9:50:48:2c:f0:1e:41:bd:7e:29:2b:5e:c9:72:41:
         30:a1:c0:2d:db:3c:8a:7f:b7:79:a7:63:ee:7f:e2:99:70:05:
         b6:a6:3a:fe:4a:71:39:cc:67:82:c6:7e:63:e5:82:b0:32:82:
         85:04:b9:cd:63:25:bb:a2:d6:e3:85:af:00:a2:6c:84:b7:43:
         2b:0e:1d:a2:b1:ea:61:41:36:46:ae:a2:da:11:94:79:58:a1:
         23:30:92:08:77:64:ed:b5:37:87:25:99:94:6b:17:07:cd:a3:
         4d:33:5b:11:75:a4:75:d9:77:a8:84:e7:ee:db:73:f0:fb:35:
         b9:db:17:f6:c0:04:6a:26:12:00:31:78:a1:f6:b0:c3:7c:1c:
         91:68:83:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----