Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a323a3a2f34382d3438203d3e20323730323636.roa
File:                     323830343a363936303a323a3a2f34382d3438203d3e20323730323636.roa (raw, json)
Hash identifier:          xp5w97uTd3s0CUTRf0R5FqZLQCDCgQViyqLbtwuCQTA=
Subject key identifier:   04:47:37:DF:EB:C6:9C:12:EB:83:FD:03:97:D7:91:EB:43:01:CC:07
Certificate issuer:       /CN=B8470C10AC644BEF4DF266924C4E0832C8FBA8A2
Certificate serial:       10E89409DC6CB137DA73BFA9DFEFBD2A1837AAB6
Authority key identifier: B8:47:0C:10:AC:64:4B:EF:4D:F2:66:92:4C:4E:08:32:C8:FB:A8:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a323a3a2f34382d3438203d3e20323730323636.roa
Signing time:             Wed 03 Apr 2024 13:53:20 +0000
ROA not before:           Wed 03 Apr 2024 13:48:20 +0000
ROA not after:            Wed 02 Apr 2025 13:53:20 +0000
asID:                     270266
IP address blocks:        2804:6960:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:e8:94:09:dc:6c:b1:37:da:73:bf:a9:df:ef:bd:2a:18:37:aa:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8470C10AC644BEF4DF266924C4E0832C8FBA8A2
        Validity
            Not Before: Apr  3 13:48:20 2024 GMT
            Not After : Apr  2 13:53:20 2025 GMT
        Subject: CN=044737DFEBC69C12EB83FD0397D791EB4301CC07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:61:34:19:22:e7:45:cd:f8:22:6b:08:96:ae:
                    06:11:3c:dc:74:f6:60:c6:58:06:96:06:0c:7b:69:
                    f6:02:89:1b:13:a8:40:55:a0:de:5c:24:e6:ca:3e:
                    b7:b3:59:c0:cc:79:0e:d1:6d:2b:3b:84:51:d5:da:
                    1f:4e:d5:70:01:9b:cf:15:fc:3e:cc:4d:b2:7e:a2:
                    0b:6b:4c:73:07:ec:0c:e8:fb:fd:9e:ec:c7:53:c8:
                    e8:3e:b5:04:a9:ec:64:c8:2a:4c:40:7e:5b:81:9e:
                    ca:17:bc:cd:f0:6c:fd:fe:b8:6a:f4:66:bc:59:df:
                    f9:82:f5:55:59:5d:3d:a8:f2:75:25:ad:13:ec:68:
                    82:24:eb:6f:5e:c0:f5:99:83:55:c6:95:d3:89:d2:
                    b4:52:11:40:b9:df:76:0a:89:bf:07:0c:d5:4a:ce:
                    6d:be:61:03:d9:83:e6:28:64:c1:04:61:50:8a:58:
                    62:1e:90:bc:d9:b8:a0:b4:6f:b8:55:6a:22:db:7d:
                    75:be:9d:1f:46:32:ad:13:78:09:ab:d5:89:e1:10:
                    a7:f3:5d:cd:44:d8:c2:66:54:11:9e:b7:db:b3:52:
                    a6:75:44:e9:e7:17:a8:fa:b5:b0:0f:e4:69:83:f4:
                    3c:f4:fc:19:51:c2:8f:15:c1:74:af:dc:ce:51:6a:
                    90:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:47:37:DF:EB:C6:9C:12:EB:83:FD:03:97:D7:91:EB:43:01:CC:07
            X509v3 Authority Key Identifier:
                keyid:B8:47:0C:10:AC:64:4B:EF:4D:F2:66:92:4C:4E:08:32:C8:FB:A8:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a323a3a2f34382d3438203d3e20323730323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6960:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:cf:df:95:9a:88:7e:d7:7a:3e:ea:03:d1:59:16:65:f8:ff:
         67:69:eb:89:8e:3a:a9:c6:53:fc:c9:dd:de:c2:b3:0b:81:aa:
         74:11:b0:11:b8:9c:c0:16:36:4d:3c:71:b7:d0:ab:8d:70:8a:
         e5:cc:ea:10:e9:43:2e:ec:70:da:5c:be:2b:72:56:ef:c4:43:
         93:38:3d:42:57:10:ec:a9:de:30:3e:78:c8:7b:90:82:db:96:
         cc:6a:f3:62:a2:cc:df:af:b1:28:8c:41:01:f6:5c:85:9a:70:
         30:2f:23:d7:ee:18:16:5c:bb:f1:6e:43:9c:8d:b7:60:c8:93:
         b3:3d:d0:07:e6:76:64:9c:7b:d5:46:dc:d5:2c:1b:84:b7:21:
         3e:82:14:7d:65:a4:a5:1e:aa:4e:a0:8a:80:f5:cf:a8:5e:b0:
         6c:5d:ee:21:26:70:0c:ad:6d:51:b8:76:3f:b0:e8:51:06:a0:
         5e:82:89:94:9d:95:f9:59:3b:49:11:d4:e2:0b:f2:4b:2c:19:
         82:a1:20:23:c4:7e:7a:b3:4d:01:e2:21:21:1d:a6:3a:52:bd:
         ae:75:94:aa:c1:8e:cb:14:4e:ec:ef:2c:c0:fe:ed:6d:d2:e7:
         9c:d3:3f:a5:8e:68:8c:a6:79:f2:ed:1b:0c:61:0a:b2:50:a5:
         13:ef:57:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----