Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/323830343a316535383a663030303a3a2f34382d3438203d3e20323634343232.roa
File:                     323830343a316535383a663030303a3a2f34382d3438203d3e20323634343232.roa (raw, json)
Hash identifier:          qj615Uo23RSTf3OC9+K6gNajOsWlFvs7y1v4ZlkXb64=
Subject key identifier:   70:06:FF:3D:49:ED:C1:3F:01:2C:93:0B:8E:25:37:3C:AF:E2:76:66
Certificate issuer:       /CN=F9A73C97014A0F1C02C22BBF01151B9C8F06FD53
Certificate serial:       0E4DB401A0601C45FC16C2FDF3DC3FDA42BFFA8C
Authority key identifier: F9:A7:3C:97:01:4A:0F:1C:02:C2:2B:BF:01:15:1B:9C:8F:06:FD:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/323830343a316535383a663030303a3a2f34382d3438203d3e20323634343232.roa
Signing time:             Thu 04 Apr 2024 11:34:08 +0000
ROA not before:           Thu 04 Apr 2024 11:29:08 +0000
ROA not after:            Thu 03 Apr 2025 11:34:08 +0000
asID:                     264422
IP address blocks:        2804:1e58:f000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:4d:b4:01:a0:60:1c:45:fc:16:c2:fd:f3:dc:3f:da:42:bf:fa:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9A73C97014A0F1C02C22BBF01151B9C8F06FD53
        Validity
            Not Before: Apr  4 11:29:08 2024 GMT
            Not After : Apr  3 11:34:08 2025 GMT
        Subject: CN=7006FF3D49EDC13F012C930B8E25373CAFE27666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:50:8d:3f:36:b8:f3:b1:53:d5:aa:8b:6c:c8:
                    d6:13:26:3c:0a:95:4a:c8:c4:6d:8a:20:9e:53:6e:
                    33:9c:7b:91:73:82:2d:3d:83:ac:2c:7b:39:47:6f:
                    74:90:95:0c:71:be:6a:87:00:ba:10:bf:30:dc:db:
                    56:74:d6:bf:8e:84:47:18:f2:62:34:55:21:92:55:
                    65:b6:79:dd:58:3f:5d:7d:62:49:fb:6d:0c:a7:88:
                    55:a4:0d:12:e7:d7:81:e0:e7:1a:99:c4:34:02:53:
                    46:b5:51:58:dd:f5:26:cc:9d:c7:22:14:c3:ab:0c:
                    2b:d8:dc:ae:77:28:16:4c:00:37:86:6f:12:9a:0d:
                    e4:0e:51:c1:2d:ee:d7:c7:c6:c3:ac:d1:0c:04:1b:
                    1b:89:d7:4e:e7:1d:04:b6:38:81:f1:61:36:ea:f1:
                    70:84:fa:34:0a:dd:ef:92:3e:70:db:c3:1f:83:00:
                    0a:76:13:62:19:31:58:31:6d:e3:02:96:2d:62:d1:
                    ad:7e:09:1f:51:16:4f:19:59:2e:66:d0:24:60:0f:
                    54:ee:6d:8e:3c:e8:66:f9:ca:87:58:60:4d:25:b6:
                    59:7c:6d:fd:4f:f6:a9:39:8c:ec:f5:55:90:db:83:
                    bb:f0:a2:b1:93:14:4b:cd:4a:ed:54:97:be:0f:f9:
                    26:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:06:FF:3D:49:ED:C1:3F:01:2C:93:0B:8E:25:37:3C:AF:E2:76:66
            X509v3 Authority Key Identifier:
                keyid:F9:A7:3C:97:01:4A:0F:1C:02:C2:2B:BF:01:15:1B:9C:8F:06:FD:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/323830343a316535383a663030303a3a2f34382d3438203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:f000::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:6b:3b:45:b6:1f:66:a5:b0:a3:10:d9:56:9e:39:56:ec:33:
         f3:13:1a:9d:b1:15:47:af:41:8a:6d:d3:49:bb:70:b1:61:ca:
         b5:bd:f6:e4:e8:9d:44:9a:20:dc:79:7d:9f:fd:99:3b:f8:73:
         56:0e:8c:cf:d4:0c:15:db:cd:d3:cd:33:92:65:58:31:32:c8:
         4e:3b:35:81:d3:c1:b6:94:fd:15:cb:f2:04:69:13:52:a6:16:
         d0:da:45:e9:2d:c4:73:9c:b2:2d:86:d9:10:2e:6b:46:8d:63:
         37:a1:23:2f:1e:ae:2c:39:b2:46:30:85:a9:c7:cb:df:26:d4:
         96:74:6a:35:a7:72:f9:16:a1:bc:46:99:80:5a:31:d8:6b:aa:
         cf:30:d5:25:4e:0d:58:0b:ab:c2:83:7e:d8:a6:58:26:a5:d5:
         c5:d0:f4:4a:18:42:ae:ed:9f:55:6b:9e:e3:5a:b8:79:61:3e:
         21:b1:ff:24:57:e2:c4:f5:00:29:0d:09:f3:a8:cc:c9:d9:75:
         73:09:77:6a:bc:b6:e2:68:f1:b6:44:35:13:a6:8d:68:09:97:
         0a:24:4d:92:01:34:f2:52:f3:39:3a:e6:1a:1b:5a:c9:69:c4:
         c9:0b:d2:ac:da:74:78:7f:4f:7c:6a:a4:be:b3:48:2c:b1:49:
         ac:42:4a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----