Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7oppaaCMH37cQZUxmxUHN1VmoZHphF6oosepCgbA7zPC/0/323830343a366663633a3a2f33322d3332203d3e20323730363835.roa
File:                     323830343a366663633a3a2f33322d3332203d3e20323730363835.roa (raw, json)
Hash identifier:          oyfJqflCVQhZ/1J1j2pqbQseIZ0S/nfkjBuZzteTzPc=
Subject key identifier:   F6:C0:06:E8:6E:AB:2C:91:86:97:98:07:0B:C2:D4:57:F2:9C:80:D7
Certificate issuer:       /CN=6587274A8C66D7DB61B47BBACB6479ECE8EB0009
Certificate serial:       5DA07610561A0EBF59820CC34DC832265FE3E94B
Authority key identifier: 65:87:27:4A:8C:66:D7:DB:61:B4:7B:BA:CB:64:79:EC:E8:EB:00:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6587274A8C66D7DB61B47BBACB6479ECE8EB0009.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7oppaaCMH37cQZUxmxUHN1VmoZHphF6oosepCgbA7zPC/0/323830343a366663633a3a2f33322d3332203d3e20323730363835.roa
Signing time:             Mon 29 Jan 2024 14:10:33 +0000
ROA not before:           Mon 29 Jan 2024 14:05:33 +0000
ROA not after:            Mon 27 Jan 2025 14:10:33 +0000
asID:                     270685
IP address blocks:        2804:6fcc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a0:76:10:56:1a:0e:bf:59:82:0c:c3:4d:c8:32:26:5f:e3:e9:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6587274A8C66D7DB61B47BBACB6479ECE8EB0009
        Validity
            Not Before: Jan 29 14:05:33 2024 GMT
            Not After : Jan 27 14:10:33 2025 GMT
        Subject: CN=F6C006E86EAB2C91869798070BC2D457F29C80D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:03:17:1c:31:9d:21:51:8d:ee:e8:97:0d:9c:
                    98:82:68:8e:d0:c8:a8:ef:da:41:c5:28:09:7a:43:
                    53:a0:8d:da:3d:d9:e7:8e:34:5f:7d:d1:2b:f5:d6:
                    64:6a:36:bd:6a:4e:3e:68:32:41:67:b4:6f:ad:e4:
                    d3:5a:02:1c:17:58:c7:7c:51:64:a5:ec:84:56:28:
                    0a:19:21:54:99:03:e3:d8:f2:74:3d:d7:bc:30:7a:
                    c0:69:90:73:fb:d3:28:44:9f:3a:04:ae:67:54:f4:
                    40:59:39:05:66:3b:c4:3c:34:7a:20:c7:f3:8b:0b:
                    b5:fe:9e:78:b9:c9:83:de:16:17:7b:5d:c2:de:e0:
                    e8:13:d2:d3:d0:1b:af:ad:df:a4:f2:64:78:3d:26:
                    34:1f:3c:c1:30:11:35:f6:c7:cf:6f:77:92:3f:f0:
                    cd:93:af:0c:91:34:de:94:77:72:5c:e2:db:64:4c:
                    85:08:de:53:e8:de:e5:c8:3f:6d:1e:74:6a:5d:55:
                    de:a7:9c:60:b3:2f:bb:9e:d1:95:85:7f:b4:75:5e:
                    d8:f5:ed:57:91:01:34:93:66:14:20:31:f2:cb:46:
                    63:e9:16:2c:5a:78:e5:34:25:ef:14:1b:72:89:74:
                    7b:bc:9e:1c:7e:66:a5:5c:cf:60:fc:d3:9f:1e:13:
                    1c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C0:06:E8:6E:AB:2C:91:86:97:98:07:0B:C2:D4:57:F2:9C:80:D7
            X509v3 Authority Key Identifier:
                keyid:65:87:27:4A:8C:66:D7:DB:61:B4:7B:BA:CB:64:79:EC:E8:EB:00:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7oppaaCMH37cQZUxmxUHN1VmoZHphF6oosepCgbA7zPC/0/6587274A8C66D7DB61B47BBACB6479ECE8EB0009.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6587274A8C66D7DB61B47BBACB6479ECE8EB0009.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7oppaaCMH37cQZUxmxUHN1VmoZHphF6oosepCgbA7zPC/0/323830343a366663633a3a2f33322d3332203d3e20323730363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6fcc::/32

    Signature Algorithm: sha256WithRSAEncryption
         d1:26:bb:70:12:16:ef:76:20:e1:91:83:79:e6:2a:bf:6c:2d:
         ef:b6:49:35:c1:38:77:e2:a4:93:1b:63:87:0e:bb:33:99:9f:
         d0:a8:3f:95:08:89:98:cf:da:9a:46:2d:c6:64:58:0a:e7:1d:
         25:a6:85:51:39:c2:22:8c:fa:c8:49:3f:cf:2d:fd:0e:de:68:
         27:49:4a:b9:de:16:6c:24:dd:08:85:f7:1b:00:b9:c1:5c:1d:
         1f:65:df:dd:9d:b6:10:48:8d:30:69:40:92:b2:81:6d:6f:62:
         73:c5:a3:3d:3e:86:4c:a5:1f:e4:f4:09:65:73:a3:98:3a:3f:
         f7:89:ff:e8:cb:cf:e6:6c:24:d1:88:94:07:76:61:4e:81:ec:
         67:41:73:01:4a:0f:b0:5f:cd:81:a6:5a:bf:f6:7e:0d:83:bd:
         05:34:c0:30:89:ce:1c:08:2b:9f:67:6e:97:0d:9a:27:79:b6:
         9a:a7:71:af:55:da:6f:25:18:87:29:d2:c1:99:7f:53:50:f7:
         90:64:e3:50:a8:4b:ff:31:b4:02:ad:d9:6d:7c:b2:7e:36:9a:
         85:a5:85:e1:4e:12:5c:bb:b8:3e:ed:eb:43:e2:e4:6c:b5:43:
         95:82:09:fb:e2:32:95:1e:b0:f3:65:1b:c2:0b:23:49:27:30:
         6f:b0:74:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----