Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6TWNkitT6scLMi24w1LiZPinWjfqxqtrxguMaXY4iqXz/0/323830343a373262633a3a2f33322d3332203d3e20323730383732.roa
File:                     323830343a373262633a3a2f33322d3332203d3e20323730383732.roa (raw, json)
Hash identifier:          T3SikcewdmYJqJCish4IhBJbToEnkNukNP0ss+YP08s=
Subject key identifier:   7F:82:2D:99:60:31:68:44:B9:A5:AC:2D:BF:C0:31:AC:06:98:D0:F8
Certificate issuer:       /CN=49E4F4FD20AECD45BF68022E29E3B301F9B89DFB
Certificate serial:       37983D7E065F0CC3FB0893D5AA5C95F2B0091ECF
Authority key identifier: 49:E4:F4:FD:20:AE:CD:45:BF:68:02:2E:29:E3:B3:01:F9:B8:9D:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49E4F4FD20AECD45BF68022E29E3B301F9B89DFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6TWNkitT6scLMi24w1LiZPinWjfqxqtrxguMaXY4iqXz/0/323830343a373262633a3a2f33322d3332203d3e20323730383732.roa
Signing time:             Thu 25 May 2023 17:07:20 +0000
ROA not before:           Thu 25 May 2023 17:02:20 +0000
ROA not after:            Thu 23 May 2024 17:07:20 +0000
asID:                     270872
IP address blocks:        2804:72bc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:98:3d:7e:06:5f:0c:c3:fb:08:93:d5:aa:5c:95:f2:b0:09:1e:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49E4F4FD20AECD45BF68022E29E3B301F9B89DFB
        Validity
            Not Before: May 25 17:02:20 2023 GMT
            Not After : May 23 17:07:20 2024 GMT
        Subject: CN=7F822D9960316844B9A5AC2DBFC031AC0698D0F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9d:22:08:28:7d:3f:50:f2:37:0a:d0:ec:4c:
                    f7:61:e8:e3:0f:35:37:55:b6:f6:76:98:45:97:29:
                    b4:48:a6:cd:24:a1:20:13:90:07:e7:37:65:c5:d4:
                    f6:64:65:63:cf:3c:24:e0:57:c7:72:7c:1b:ac:73:
                    43:55:69:ac:06:9c:05:8c:0d:79:73:0c:e4:1c:c1:
                    0b:f8:d9:e8:6a:40:6d:d7:55:e8:d5:98:1f:4d:16:
                    71:93:32:da:37:b9:aa:49:35:c0:41:f4:a7:12:65:
                    00:cb:0c:bf:20:b8:ca:d0:16:fe:df:66:d8:1c:0d:
                    ad:bc:0d:33:17:e2:c1:a2:21:9e:2c:1f:af:85:43:
                    49:9c:74:62:22:a3:9c:a9:ff:82:21:14:86:97:14:
                    f1:f5:b9:20:09:c6:f2:bc:f6:bb:f2:2b:56:4f:79:
                    4c:46:fe:14:84:4b:f8:b5:96:16:96:32:f4:b4:83:
                    fe:89:eb:3b:87:a7:09:f6:72:7a:ae:f3:6f:67:c6:
                    f4:fe:b2:cc:79:72:14:a0:eb:f4:cf:15:e0:bd:f7:
                    4d:76:81:43:a6:91:3b:af:ee:cd:01:46:e6:41:7d:
                    e5:8e:f1:f4:e8:15:21:ed:c4:73:61:d8:74:48:fe:
                    1d:86:2b:0d:9c:46:a1:da:bf:09:bc:f8:df:fc:2c:
                    e7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:82:2D:99:60:31:68:44:B9:A5:AC:2D:BF:C0:31:AC:06:98:D0:F8
            X509v3 Authority Key Identifier:
                keyid:49:E4:F4:FD:20:AE:CD:45:BF:68:02:2E:29:E3:B3:01:F9:B8:9D:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6TWNkitT6scLMi24w1LiZPinWjfqxqtrxguMaXY4iqXz/0/49E4F4FD20AECD45BF68022E29E3B301F9B89DFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49E4F4FD20AECD45BF68022E29E3B301F9B89DFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6TWNkitT6scLMi24w1LiZPinWjfqxqtrxguMaXY4iqXz/0/323830343a373262633a3a2f33322d3332203d3e20323730383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:72bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:7f:5e:9b:88:64:aa:02:27:ce:8e:98:da:20:bb:60:d1:20:
         d3:0b:e9:16:b0:8b:4b:4e:8a:9e:5b:7f:4a:17:88:70:99:00:
         ec:4e:4b:c4:8f:03:ce:b9:1d:e0:e4:42:db:26:48:e0:01:fb:
         fd:96:c4:88:20:85:cd:77:61:47:7f:58:b8:ed:dc:dc:fd:f2:
         91:dd:23:f4:16:64:cf:ba:70:32:e1:4e:83:52:da:26:fb:85:
         64:14:86:91:0c:ad:96:bc:e8:bc:e2:ae:75:f3:a7:84:33:c5:
         01:d7:a9:01:2a:e6:ab:85:17:14:c4:1d:77:29:7d:83:5f:95:
         0c:a4:d9:6d:66:49:c7:23:6d:c9:b3:38:8f:0d:68:98:57:c9:
         15:b2:9b:4d:07:4b:a9:20:f2:d8:a9:e5:62:a1:86:91:5c:8e:
         2c:c9:e7:64:3c:e5:ef:58:05:b4:b3:ca:06:95:62:15:7e:e6:
         3d:d8:ca:69:db:3d:37:e4:d7:d6:60:d5:27:1c:0d:ff:70:df:
         1e:0e:b1:a4:98:08:f4:ac:03:dd:27:1c:59:67:fc:2e:bc:84:
         d0:87:f6:87:92:c4:f8:91:7b:11:af:cd:b2:d8:ac:9d:4c:61:
         7a:22:2b:bd:1c:51:01:80:a3:db:0a:24:ff:50:d7:96:6e:68:
         6e:07:e5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----