Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6cLarKxNwfvpJfU1uEsYuFBuumgoQQe81LJVW31xKea8/0/323830343a366638303a3a2f33322d3332203d3e20323730363634.roa
File:                     323830343a366638303a3a2f33322d3332203d3e20323730363634.roa (raw, json)
Hash identifier:          BA4jnWbg28kxtfwSjsPnikaAoUSGIsZxHUg5m0V3vdY=
Subject key identifier:   84:29:7F:F6:3F:AE:DA:96:E8:16:06:D4:CD:5E:F5:F2:B8:9B:BC:67
Certificate issuer:       /CN=A6E0D9CA6868D31BF7A22B7655196D758DDF6F3D
Certificate serial:       7D4E2BE881A511A7F955BBA4F84209B0DDB1FBA6
Authority key identifier: A6:E0:D9:CA:68:68:D3:1B:F7:A2:2B:76:55:19:6D:75:8D:DF:6F:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A6E0D9CA6868D31BF7A22B7655196D758DDF6F3D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6cLarKxNwfvpJfU1uEsYuFBuumgoQQe81LJVW31xKea8/0/323830343a366638303a3a2f33322d3332203d3e20323730363634.roa
Signing time:             Wed 27 Sep 2023 19:00:33 +0000
ROA not before:           Wed 27 Sep 2023 18:55:33 +0000
ROA not after:            Wed 25 Sep 2024 19:00:33 +0000
asID:                     270664
IP address blocks:        2804:6f80::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:4e:2b:e8:81:a5:11:a7:f9:55:bb:a4:f8:42:09:b0:dd:b1:fb:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6E0D9CA6868D31BF7A22B7655196D758DDF6F3D
        Validity
            Not Before: Sep 27 18:55:33 2023 GMT
            Not After : Sep 25 19:00:33 2024 GMT
        Subject: CN=84297FF63FAEDA96E81606D4CD5EF5F2B89BBC67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:38:40:b8:b2:77:b7:74:be:90:d4:9c:20:67:
                    c0:14:c0:fe:67:f2:47:59:cd:5f:e0:22:47:c2:0b:
                    0f:f0:8d:3c:aa:f4:c4:3c:75:45:33:2d:31:15:a0:
                    82:18:a3:d0:44:ef:72:14:da:21:0f:aa:c1:0f:47:
                    5b:89:ae:4f:40:6c:01:e8:c2:24:b5:70:aa:7e:0e:
                    da:25:97:fe:2c:f9:f5:90:ee:b5:85:71:89:b1:a2:
                    4a:eb:e8:61:d4:a6:f0:5f:c8:5d:03:0f:44:0b:a5:
                    6f:02:91:84:43:0e:9e:8f:a7:e6:90:66:22:fd:7b:
                    ed:77:02:c6:c3:cf:1e:9e:cb:bf:ec:15:1b:44:96:
                    02:52:62:22:16:c2:9d:b9:e4:2d:56:24:d6:bb:4d:
                    37:b9:24:37:76:27:a0:15:13:18:47:40:1c:a5:0d:
                    8b:ce:96:f2:1f:5d:2e:97:38:45:3b:03:20:66:68:
                    9c:98:5e:79:79:0c:e0:05:26:2b:78:a1:d0:0f:92:
                    1a:53:4e:c4:55:0d:86:73:4f:92:28:c9:16:71:eb:
                    6c:df:81:b3:32:02:7b:79:bc:67:94:e5:0b:30:a2:
                    93:14:83:ef:8b:30:4e:57:2d:65:24:2e:79:32:04:
                    7e:03:db:b7:ad:8f:df:14:a5:fd:a1:c4:a2:bb:d8:
                    fc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:29:7F:F6:3F:AE:DA:96:E8:16:06:D4:CD:5E:F5:F2:B8:9B:BC:67
            X509v3 Authority Key Identifier:
                keyid:A6:E0:D9:CA:68:68:D3:1B:F7:A2:2B:76:55:19:6D:75:8D:DF:6F:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6cLarKxNwfvpJfU1uEsYuFBuumgoQQe81LJVW31xKea8/0/A6E0D9CA6868D31BF7A22B7655196D758DDF6F3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A6E0D9CA6868D31BF7A22B7655196D758DDF6F3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6cLarKxNwfvpJfU1uEsYuFBuumgoQQe81LJVW31xKea8/0/323830343a366638303a3a2f33322d3332203d3e20323730363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:7c:e2:e3:77:a8:0a:65:52:38:cf:77:b5:53:a0:5e:5b:81:
         8e:e9:ee:6c:2f:e2:b4:f9:8b:6c:a6:cf:10:33:12:e9:08:c7:
         72:e5:f6:55:b6:9f:35:70:e6:26:6c:f7:d3:96:66:11:cd:4f:
         10:11:94:b2:bc:61:58:00:09:40:a2:3e:a0:8f:08:9a:63:58:
         8d:62:35:98:cd:10:ba:08:bc:3a:93:16:bd:4a:40:ce:f2:19:
         d3:a6:b0:8c:7a:15:fc:40:45:da:f3:d0:eb:0b:ae:73:20:dd:
         ea:c6:e4:2c:72:a3:b1:8c:c8:a9:e3:15:be:ad:ca:43:bd:85:
         41:22:ac:7d:fd:b3:a1:d8:d0:01:60:f4:f5:ea:63:0c:4d:76:
         af:e3:c1:6f:3c:ec:93:ae:6b:53:d1:2d:d9:4a:ff:ab:68:a7:
         c0:cf:36:48:a3:7e:5a:96:fe:4d:0e:b9:0c:8a:8e:8a:34:27:
         c1:4e:20:52:c9:dc:18:f2:bf:0e:37:98:b6:96:4b:2c:d3:ab:
         67:9e:d5:e8:c0:2d:a7:1b:3e:42:51:87:34:39:20:14:46:60:
         e3:52:48:d4:ff:47:1d:c9:ea:dd:f9:b7:25:4b:4f:da:f0:a3:
         05:4a:9a:52:75:ad:fe:19:03:c1:25:32:4e:d6:dc:bc:f2:82:
         ce:ed:bd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----