Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/323830343a366562383a3a2f33322d3332203d3e20323730363135.roa
File:                     323830343a366562383a3a2f33322d3332203d3e20323730363135.roa (raw, json)
Hash identifier:          065pxC3ZbgZ/oCPCWU4cQSHkIAXxJnKLRerFntMnGEA=
Subject key identifier:   95:58:7F:B4:F0:75:B9:20:7C:19:07:7A:FB:38:DD:89:E8:85:36:41
Certificate issuer:       /CN=8E970756ED5B45BB3259FB4311AA88EE977EAEE0
Certificate serial:       4AF81C385397E7779F332883D20806FD3597A38E
Authority key identifier: 8E:97:07:56:ED:5B:45:BB:32:59:FB:43:11:AA:88:EE:97:7E:AE:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E970756ED5B45BB3259FB4311AA88EE977EAEE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/323830343a366562383a3a2f33322d3332203d3e20323730363135.roa
Signing time:             Fri 16 Feb 2024 18:38:43 +0000
ROA not before:           Fri 16 Feb 2024 18:33:43 +0000
ROA not after:            Fri 14 Feb 2025 18:38:43 +0000
asID:                     270615
IP address blocks:        2804:6eb8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:f8:1c:38:53:97:e7:77:9f:33:28:83:d2:08:06:fd:35:97:a3:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E970756ED5B45BB3259FB4311AA88EE977EAEE0
        Validity
            Not Before: Feb 16 18:33:43 2024 GMT
            Not After : Feb 14 18:38:43 2025 GMT
        Subject: CN=95587FB4F075B9207C19077AFB38DD89E8853641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8c:8d:2b:c6:ac:52:ab:90:a9:1e:e5:39:6a:
                    fe:c4:8d:6b:f9:de:cd:93:18:0a:cb:0f:0f:9c:12:
                    78:fb:6e:54:06:75:40:1c:8d:39:b2:19:f1:58:45:
                    e8:14:7e:92:5a:62:92:42:c7:85:75:d9:3b:8e:f2:
                    ad:47:0b:75:26:3a:d1:bf:d8:8b:3e:1e:b2:9e:2f:
                    5b:d0:cc:c4:ff:af:35:85:cf:0d:5e:33:87:19:2c:
                    d8:3e:35:3f:ad:b9:97:37:74:c1:3c:7f:31:a8:94:
                    21:e4:46:44:67:cf:14:9f:16:7c:21:df:d7:86:0d:
                    b7:a1:fb:ec:bf:18:54:d0:f4:f9:fd:3b:0a:98:27:
                    b8:3f:e5:de:20:47:84:84:6e:27:41:4b:f8:1e:d0:
                    f7:60:30:a9:ee:c6:d5:c4:18:27:3b:31:a4:c7:15:
                    20:65:73:8d:f0:eb:39:1d:0d:1c:1e:e7:6e:33:9e:
                    b7:4f:e9:28:7f:04:3d:c7:0d:08:c2:04:92:c8:e2:
                    8c:12:8d:c1:6c:fd:e0:33:97:2c:71:0b:9d:65:13:
                    4f:51:6d:78:55:78:15:ee:bc:ac:c3:07:17:d0:d6:
                    36:0e:df:99:ec:ad:55:45:0d:78:d4:79:31:ad:5f:
                    24:a9:22:e2:48:3e:ef:bf:11:ac:b0:13:77:1f:e5:
                    cb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:58:7F:B4:F0:75:B9:20:7C:19:07:7A:FB:38:DD:89:E8:85:36:41
            X509v3 Authority Key Identifier:
                keyid:8E:97:07:56:ED:5B:45:BB:32:59:FB:43:11:AA:88:EE:97:7E:AE:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/8E970756ED5B45BB3259FB4311AA88EE977EAEE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E970756ED5B45BB3259FB4311AA88EE977EAEE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/323830343a366562383a3a2f33322d3332203d3e20323730363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6eb8::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:30:2c:f8:b7:a7:2d:4e:3d:ce:18:19:75:8b:ed:26:36:0b:
         59:af:d2:af:7a:c2:ad:1a:86:39:28:31:54:a1:aa:92:fd:d2:
         34:42:1c:a3:c1:fe:84:c9:16:a6:d5:fd:4f:22:59:5a:68:96:
         02:fd:ea:06:8a:d5:49:ed:ed:d0:c6:8c:79:99:12:16:93:fe:
         52:db:10:f9:d1:91:18:2c:b1:0b:d6:e8:2e:be:63:20:8c:df:
         cc:e5:b8:68:85:9a:2e:c0:8c:28:fc:60:2c:a4:87:ac:e7:e4:
         f6:77:54:ce:68:d4:93:bc:a1:2c:54:5c:76:1f:aa:0b:70:85:
         60:4d:d6:37:6a:3c:7b:0a:5f:ff:10:e3:cb:68:c1:06:b8:e3:
         dd:d3:5e:34:6c:1d:2c:84:ad:eb:62:89:8c:fb:a5:0c:e1:67:
         f4:de:2a:11:df:b1:b9:e0:9d:04:b6:21:eb:22:16:0c:ee:69:
         a7:a2:eb:06:4c:53:02:07:df:3a:a4:68:5f:b2:17:02:3e:ac:
         7f:23:7b:a3:1a:a4:b7:96:3c:ce:94:75:6f:eb:b3:33:5a:7c:
         55:dd:4d:a9:47:44:07:b5:6f:e0:a6:26:24:18:b6:b8:c4:0b:
         c6:9c:fa:50:1c:60:6d:4f:19:86:c8:3f:22:c2:c6:17:ac:3f:
         02:fe:cd:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----