Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7dWSkfTAcBN1DAAa7Vn7Aay3zvsrT1jnSQYDaS9exV8g/0/323830343a316366383a3a2f33322d313238203d3e203631363836.roa
File:                     323830343a316366383a3a2f33322d313238203d3e203631363836.roa (raw, json)
Hash identifier:          hEAri94o/DHJ1VVqTBACCguE6JPkOcpwn/QVNUwyWPs=
Subject key identifier:   3F:C8:40:CE:BB:C2:00:2D:01:6E:F4:5B:1C:A5:15:9C:48:96:67:C2
Certificate issuer:       /CN=A23E9B90137416AB6AD33BC20E65DB5B91FDE6AC
Certificate serial:       6FB9FADB7C9ED1673BB2EAA372EEE98C41F10927
Authority key identifier: A2:3E:9B:90:13:74:16:AB:6A:D3:3B:C2:0E:65:DB:5B:91:FD:E6:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A23E9B90137416AB6AD33BC20E65DB5B91FDE6AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7dWSkfTAcBN1DAAa7Vn7Aay3zvsrT1jnSQYDaS9exV8g/0/323830343a316366383a3a2f33322d313238203d3e203631363836.roa
Signing time:             Tue 26 Dec 2023 18:01:57 +0000
ROA not before:           Tue 26 Dec 2023 17:56:57 +0000
ROA not after:            Tue 24 Dec 2024 18:01:57 +0000
asID:                     61686
IP address blocks:        2804:1cf8::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:b9:fa:db:7c:9e:d1:67:3b:b2:ea:a3:72:ee:e9:8c:41:f1:09:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A23E9B90137416AB6AD33BC20E65DB5B91FDE6AC
        Validity
            Not Before: Dec 26 17:56:57 2023 GMT
            Not After : Dec 24 18:01:57 2024 GMT
        Subject: CN=3FC840CEBBC2002D016EF45B1CA5159C489667C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:66:b2:43:a3:01:31:d8:aa:c0:1b:a3:2c:83:
                    17:66:69:d5:81:74:64:de:d7:d5:64:c5:d8:20:72:
                    8e:ef:ee:b7:d7:3b:f7:4d:3d:35:a3:5c:ce:8f:8a:
                    c0:9b:43:d8:47:0d:b4:34:f1:e9:cd:75:ee:60:ff:
                    26:78:2c:ac:af:8b:5e:fa:be:65:f2:2c:80:5e:8e:
                    6d:c0:a6:bc:6e:1a:46:9b:3c:95:cc:e6:5e:1e:14:
                    dc:18:45:30:b9:e4:45:83:d5:88:a1:95:66:0d:28:
                    77:89:a3:8f:22:2a:41:c4:e0:0d:85:12:e8:da:0c:
                    77:0e:c0:ad:82:76:cc:fd:da:46:74:40:c4:ff:a6:
                    11:21:07:68:77:cf:f5:ff:9d:10:61:ab:28:12:be:
                    dc:bc:ef:04:04:3d:6f:4b:e7:c9:3f:fc:60:e2:92:
                    bc:3e:b5:35:8f:66:bc:31:3b:57:ed:ba:4a:1a:d0:
                    ce:2f:95:20:82:02:b1:a4:01:06:2d:6b:fa:5d:62:
                    2b:97:6e:7f:07:37:ea:a0:ad:8e:4c:93:2d:f1:33:
                    c8:d5:e2:c6:65:d7:5a:b8:ce:bb:1b:8b:2a:fc:e2:
                    f9:0f:ff:56:15:25:36:13:c6:70:a1:93:c0:f8:06:
                    3b:75:ea:ff:d2:aa:fb:5d:96:80:08:0b:c8:e0:b9:
                    06:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C8:40:CE:BB:C2:00:2D:01:6E:F4:5B:1C:A5:15:9C:48:96:67:C2
            X509v3 Authority Key Identifier:
                keyid:A2:3E:9B:90:13:74:16:AB:6A:D3:3B:C2:0E:65:DB:5B:91:FD:E6:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7dWSkfTAcBN1DAAa7Vn7Aay3zvsrT1jnSQYDaS9exV8g/0/A23E9B90137416AB6AD33BC20E65DB5B91FDE6AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A23E9B90137416AB6AD33BC20E65DB5B91FDE6AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7dWSkfTAcBN1DAAa7Vn7Aay3zvsrT1jnSQYDaS9exV8g/0/323830343a316366383a3a2f33322d313238203d3e203631363836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cf8::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:43:27:5b:f4:45:d8:06:28:df:48:1a:b4:da:18:38:0d:57:
         9b:29:6e:71:b9:99:01:19:3b:af:1d:84:57:04:86:6e:46:4c:
         0c:69:48:9f:49:07:1c:cc:cf:0f:75:b6:36:3d:a6:0a:44:2e:
         bd:f8:51:aa:d1:6d:b4:0f:66:64:a6:d3:c4:64:97:4c:ea:5a:
         93:93:4f:53:b1:c7:a1:1d:6d:cd:8c:93:f7:06:f2:bd:56:79:
         a3:5d:14:f3:ce:c1:69:87:45:7c:f8:a5:1d:55:72:21:45:87:
         92:16:9c:57:67:77:96:fd:23:23:e1:25:39:0c:88:79:e6:f2:
         57:0c:a4:17:ac:65:63:62:13:53:dc:95:1c:90:3d:46:f0:bc:
         ea:a1:62:39:29:bc:32:db:48:91:a1:aa:cd:ff:15:a7:33:29:
         c8:56:02:a3:5b:b4:af:f6:76:7b:4a:2c:ed:0b:ea:8d:28:d8:
         fa:af:f8:0c:df:e0:ee:a9:18:c6:8c:01:ca:b0:2a:a2:99:63:
         88:e8:ff:7d:21:b9:cc:8e:6d:3c:80:34:f1:9a:43:0f:cc:6d:
         3f:ef:25:7e:51:23:5f:b9:9b:d9:e6:00:d5:e9:48:3c:ae:8a:
         f5:0e:43:4c:ba:02:09:5f:37:9c:66:96:10:37:9d:89:71:c1:
         c7:92:0a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----