Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/323830343a3763303a3a2f33322d3332203d3e20323632333136.roa
File:                     323830343a3763303a3a2f33322d3332203d3e20323632333136.roa (raw, json)
Hash identifier:          MsuX1fey2ViKTwzPO5K97voK5nMIFuFQ1sVG/SyK7OQ=
Subject key identifier:   4E:C1:2A:9D:48:EA:7D:46:74:62:70:F6:2C:60:32:C8:3A:0C:E6:A9
Certificate issuer:       /CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
Certificate serial:       798E594CFFDCFAE3E46E18B73016C72B73D83290
Authority key identifier: CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/323830343a3763303a3a2f33322d3332203d3e20323632333136.roa
Signing time:             Mon 21 Aug 2023 13:26:36 +0000
ROA not before:           Mon 21 Aug 2023 13:21:36 +0000
ROA not after:            Mon 19 Aug 2024 13:26:36 +0000
asID:                     262316
IP address blocks:        2804:7c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:8e:59:4c:ff:dc:fa:e3:e4:6e:18:b7:30:16:c7:2b:73:d8:32:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
        Validity
            Not Before: Aug 21 13:21:36 2023 GMT
            Not After : Aug 19 13:26:36 2024 GMT
        Subject: CN=4EC12A9D48EA7D46746270F62C6032C83A0CE6A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b6:0e:fa:a5:b8:fa:85:33:72:2d:f2:30:63:
                    c7:b2:fe:ce:ba:65:7a:4c:df:68:ca:46:23:97:b2:
                    58:97:25:2e:03:45:61:2c:2f:89:37:fd:1f:08:3b:
                    30:c3:62:4e:86:fb:ba:77:6a:01:46:4b:14:bc:2f:
                    7d:47:75:6e:d9:6a:98:2e:17:3b:db:c0:23:2d:24:
                    30:b2:63:44:f0:e5:6b:a6:e0:44:e6:e6:ce:71:5e:
                    be:06:64:ee:6b:49:3b:1a:b3:8f:60:f9:97:f8:7d:
                    03:d4:4a:93:ba:3f:d0:bc:0d:40:c1:6b:65:0f:3e:
                    d0:0b:7a:6a:23:6f:88:e6:0c:ab:4e:01:93:50:0c:
                    09:c8:6d:dd:33:a9:86:fe:a8:c5:fc:cb:b9:4b:d0:
                    55:f1:a1:e5:4e:1f:30:88:5c:f5:60:93:04:c9:1a:
                    e5:08:19:87:98:f5:18:b0:37:2f:d2:19:b1:c4:b9:
                    f1:71:f9:7c:e3:90:2d:79:3b:f1:32:96:09:c2:d6:
                    26:75:3e:44:fa:0e:42:71:46:07:40:57:41:a7:3a:
                    ba:ea:44:c5:5b:9d:50:0f:3f:47:fc:4f:58:7d:9c:
                    c8:f5:39:ff:95:c1:4f:fc:f5:1b:90:ea:96:ff:be:
                    12:b9:45:1d:78:84:09:b0:71:64:76:11:8c:bf:3d:
                    12:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C1:2A:9D:48:EA:7D:46:74:62:70:F6:2C:60:32:C8:3A:0C:E6:A9
            X509v3 Authority Key Identifier:
                keyid:CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/323830343a3763303a3a2f33322d3332203d3e20323632333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:95:af:6e:38:f8:87:6c:9d:e4:fc:53:82:80:53:1a:48:d5:
         54:78:23:ae:24:58:29:bf:5f:43:d6:23:75:83:1b:9b:5f:ec:
         cb:18:37:01:ae:78:df:20:db:51:a8:e1:a6:63:8d:a5:d0:f3:
         63:31:e8:6a:25:50:08:66:53:eb:21:58:a5:4b:d7:29:1d:e2:
         5d:c9:85:88:49:05:e8:2a:18:88:20:f7:f0:41:18:a0:f7:f5:
         e1:76:a2:91:c2:cd:6d:7b:c6:ca:75:c4:b9:fd:0f:ee:b2:7a:
         71:7d:00:bd:41:be:7e:87:c8:67:c4:c4:d0:b0:f3:2c:83:4a:
         a0:80:3b:d7:51:b2:dc:09:b0:cb:56:90:ce:27:7c:6a:0e:1b:
         00:7d:12:da:4d:5d:c2:a4:af:40:31:75:37:fa:55:e5:0f:3f:
         b2:06:71:39:15:bf:c4:ee:6d:69:4b:50:64:33:36:35:8b:3a:
         d1:62:9d:99:67:c0:d1:26:90:d9:60:98:bd:e1:63:cc:67:da:
         2d:61:28:fd:61:1f:43:a9:0d:a7:96:c3:44:a2:c3:1c:dd:22:
         ae:da:bf:4f:4e:4a:7f:0a:0f:a1:0b:82:34:51:9d:32:86:e6:
         da:81:e0:45:e5:7f:d8:06:21:48:d1:e0:b7:87:41:90:d4:0a:
         b2:4d:7f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----