Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/323830343a316535383a666666633a3a2f34362d3436203d3e20323634343232.roa
File:                     323830343a316535383a666666633a3a2f34362d3436203d3e20323634343232.roa (raw, json)
Hash identifier:          SaKTc2Cokk3TUX9+zV0dKFF1ROEGpwYjdkiNC6FEJRo=
Subject key identifier:   10:66:EA:75:05:4F:AE:A0:BB:48:B0:88:17:94:F6:63:C2:B5:1E:30
Certificate issuer:       /CN=F9A73C97014A0F1C02C22BBF01151B9C8F06FD53
Certificate serial:       5B207430B91F587A619CFB25A7446E37C2E75DD2
Authority key identifier: F9:A7:3C:97:01:4A:0F:1C:02:C2:2B:BF:01:15:1B:9C:8F:06:FD:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/323830343a316535383a666666633a3a2f34362d3436203d3e20323634343232.roa
Signing time:             Thu 04 Apr 2024 11:34:03 +0000
ROA not before:           Thu 04 Apr 2024 11:29:03 +0000
ROA not after:            Thu 03 Apr 2025 11:34:03 +0000
asID:                     264422
IP address blocks:        2804:1e58:fffc::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:20:74:30:b9:1f:58:7a:61:9c:fb:25:a7:44:6e:37:c2:e7:5d:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9A73C97014A0F1C02C22BBF01151B9C8F06FD53
        Validity
            Not Before: Apr  4 11:29:03 2024 GMT
            Not After : Apr  3 11:34:03 2025 GMT
        Subject: CN=1066EA75054FAEA0BB48B0881794F663C2B51E30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e1:d4:5c:0a:d3:6d:0f:44:87:41:a3:aa:13:
                    6b:0d:04:5b:a0:a7:5a:8e:e2:22:9e:78:9e:41:0e:
                    5e:f6:66:46:0f:56:75:e1:a4:23:e7:e8:5b:08:9d:
                    47:79:a6:3b:d9:6c:fd:df:b9:aa:c9:0d:73:36:1f:
                    be:c9:d0:86:1d:12:99:8b:af:98:ab:9c:ce:06:40:
                    c1:38:5b:81:ff:12:51:25:21:8b:d2:8f:b3:77:dc:
                    99:b5:a8:c1:64:fa:b8:7a:80:99:ff:b5:64:ea:11:
                    9d:b3:70:89:de:c9:ee:1b:70:55:b0:3e:6e:40:ea:
                    b5:56:cc:3d:1b:5f:07:7f:ef:a3:89:57:16:aa:eb:
                    4e:d2:91:51:ed:f9:7d:2f:49:1f:f8:71:93:e8:9c:
                    eb:95:34:11:80:b4:4f:33:21:93:ea:d4:f5:f1:ea:
                    45:31:44:c4:89:5c:17:fa:4e:16:b9:f0:d0:62:c8:
                    04:d4:22:9a:c3:5d:26:3a:f4:f6:37:bc:4c:49:87:
                    26:4b:b2:a9:6e:82:30:a4:f5:6c:ad:92:ef:49:d8:
                    c5:83:85:c7:2d:3a:11:20:b1:5b:3b:87:67:13:68:
                    7f:62:3a:0f:26:a4:3d:32:5d:44:a6:2c:70:f6:cf:
                    cc:23:ca:2d:69:e8:a3:88:6f:88:f6:b4:de:7f:df:
                    06:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:66:EA:75:05:4F:AE:A0:BB:48:B0:88:17:94:F6:63:C2:B5:1E:30
            X509v3 Authority Key Identifier:
                keyid:F9:A7:3C:97:01:4A:0F:1C:02:C2:2B:BF:01:15:1B:9C:8F:06:FD:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/323830343a316535383a666666633a3a2f34362d3436203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:fffc::/46

    Signature Algorithm: sha256WithRSAEncryption
         60:5e:ae:34:56:61:c6:60:e4:7d:aa:6a:94:e2:8d:73:50:b3:
         17:00:f0:11:08:73:a1:86:5f:fd:37:a1:6c:e8:3f:31:b6:a0:
         66:f5:04:55:44:52:e2:33:93:8b:df:cb:7f:a1:e3:84:54:85:
         b8:7e:8a:ab:3a:20:4f:d8:a9:7f:02:9f:c3:80:f2:5b:48:c4:
         3f:c1:9b:8d:e5:fc:3d:8f:5a:03:92:69:46:ee:b8:bc:e0:d3:
         ef:9a:1b:76:6d:5d:17:8e:5c:ca:63:29:95:70:1d:32:92:6b:
         95:ee:43:0d:e6:92:77:fc:89:62:c2:8c:6f:af:01:fc:f5:7a:
         6a:4a:7e:b9:4d:db:e5:b4:fe:af:84:15:df:c3:b7:1a:02:99:
         3d:d7:d2:b6:06:d8:f3:69:01:4e:b9:68:a8:1f:c0:dc:79:99:
         40:1b:5f:c8:dc:10:bf:79:48:d0:65:b1:0b:88:4a:c9:f4:ea:
         43:89:3d:74:29:96:43:53:13:15:ae:86:9e:b0:01:71:c0:a1:
         4c:1b:96:52:92:ae:71:87:a4:da:3a:81:8c:a4:c2:d0:77:f7:
         56:84:7a:5a:c8:85:07:c2:17:99:7f:94:d3:f8:f3:df:4e:4e:
         b0:8b:95:62:d7:63:01:96:6b:2c:f2:d3:44:fe:77:ee:ff:13:
         65:eb:48:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----