Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/323830343a343630633a3a2f33322d3332203d3e20323636393635.roa
File:                     323830343a343630633a3a2f33322d3332203d3e20323636393635.roa (raw, json)
Hash identifier:          HLDG5JBPDnYN8pYLZS0T21t95pQD1XcwMrlWAAApJTA=
Subject key identifier:   07:54:10:84:09:B6:D8:AC:57:FE:7B:10:8F:20:A1:51:DE:E9:89:51
Certificate issuer:       /CN=6CD5F4EBC3307B96EF5EED66AC2537ECE977C9B7
Certificate serial:       2FD834D10A92E57F3C428024DDEBC015DC82099A
Authority key identifier: 6C:D5:F4:EB:C3:30:7B:96:EF:5E:ED:66:AC:25:37:EC:E9:77:C9:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6CD5F4EBC3307B96EF5EED66AC2537ECE977C9B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/323830343a343630633a3a2f33322d3332203d3e20323636393635.roa
Signing time:             Fri 22 Mar 2024 16:00:00 +0000
ROA not before:           Fri 22 Mar 2024 15:55:00 +0000
ROA not after:            Sat 22 Mar 2025 16:00:00 +0000
asID:                     266965
IP address blocks:        2804:460c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:d8:34:d1:0a:92:e5:7f:3c:42:80:24:dd:eb:c0:15:dc:82:09:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CD5F4EBC3307B96EF5EED66AC2537ECE977C9B7
        Validity
            Not Before: Mar 22 15:55:00 2024 GMT
            Not After : Mar 22 16:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:13:b3:5f:0f:50:c1:08:9d:93:29:ff:50:cf:
                    31:c7:0c:b0:23:0c:51:3d:e7:9e:ed:92:fb:e7:e6:
                    bd:a6:84:00:4a:a6:2d:65:0a:e5:0c:ee:04:1a:ac:
                    a5:82:64:dd:79:66:32:d6:2c:c8:ee:eb:5f:49:93:
                    41:90:bb:d3:a3:df:72:ec:a3:d9:80:ee:e3:2d:0c:
                    a3:d2:6f:9d:f6:a8:bd:8c:b5:80:96:dc:e9:8b:a1:
                    6c:e8:21:3a:d3:e3:1c:4a:c0:17:cd:55:3d:66:93:
                    39:7f:fa:2c:87:e1:c9:08:c8:49:77:c5:6b:ed:11:
                    6b:5f:a2:55:cc:0a:43:2b:23:53:82:8b:3f:60:40:
                    82:04:26:ca:ae:55:6c:95:e3:0b:f7:fe:48:f0:82:
                    84:1c:bd:27:9f:b8:ca:20:8d:f7:13:87:9f:8c:91:
                    97:29:e7:54:5d:6c:2c:fc:71:54:e5:f5:95:e6:4b:
                    f1:e9:4b:9c:0c:ca:a2:d6:1e:1c:8b:a5:5f:66:bd:
                    e5:ef:51:28:1c:57:5b:92:3b:28:87:e6:aa:46:85:
                    a6:99:00:e1:8e:cb:c7:a6:1d:5f:6d:09:b2:86:2d:
                    5c:d3:79:21:c8:64:92:5e:01:b5:0a:7a:12:29:04:
                    11:d5:6f:79:30:b1:f4:51:8a:02:7a:65:e2:da:10:
                    53:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:54:10:84:09:B6:D8:AC:57:FE:7B:10:8F:20:A1:51:DE:E9:89:51
            X509v3 Authority Key Identifier:
                keyid:6C:D5:F4:EB:C3:30:7B:96:EF:5E:ED:66:AC:25:37:EC:E9:77:C9:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/6CD5F4EBC3307B96EF5EED66AC2537ECE977C9B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6CD5F4EBC3307B96EF5EED66AC2537ECE977C9B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/323830343a343630633a3a2f33322d3332203d3e20323636393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:460c::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:7b:e4:31:98:5b:4b:9e:42:78:4c:b8:8d:75:6f:1c:e3:cf:
         e0:ce:0f:ff:0a:11:dc:f6:9a:4f:79:92:b5:19:cf:36:10:1b:
         38:b1:03:f3:63:0b:20:48:f5:9c:1a:18:c8:56:a2:27:a4:94:
         f5:65:14:55:7e:be:79:43:b4:c3:c6:ad:6a:af:11:fa:7c:9d:
         33:b9:32:c1:66:08:e8:bf:9f:99:42:ee:e6:0c:b5:d8:ca:04:
         33:5f:a0:4d:e1:12:5f:3a:1e:20:c4:11:df:75:ae:b1:35:23:
         8d:21:37:b3:50:3b:ae:00:5c:c2:62:40:dc:a1:80:7b:06:6f:
         c4:ad:99:7e:b9:16:8b:55:62:2c:d3:e0:12:e3:45:f4:a2:17:
         d5:e8:eb:28:7d:57:b0:7c:a3:5c:0d:02:13:13:4e:59:1b:b6:
         50:06:a2:56:af:0b:07:d0:0b:c7:0d:e5:31:c4:0a:89:f8:73:
         af:0a:b0:f4:84:f3:40:a9:c6:6e:4a:3e:70:3a:49:6e:a5:55:
         0d:88:56:f5:62:c0:87:ea:8d:29:7e:a1:67:4b:1a:e0:90:c9:
         60:e2:a0:fd:2f:3a:19:7a:de:26:ae:40:75:b0:71:b0:93:ab:
         2a:94:11:69:e5:f3:b4:74:d3:b6:01:32:97:e3:cc:71:0b:8a:
         00:c8:a7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----