Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/0/323830343a343666633a3a2f33322d3332203d3e20323637303234.roa
File:                     323830343a343666633a3a2f33322d3332203d3e20323637303234.roa (raw, json)
Hash identifier:          tAWbO565H1cByR2UTXvs4dNe6tQSDbRWm30cfOzlTiY=
Subject key identifier:   17:68:C1:B3:B2:A5:96:BE:D7:76:F5:79:12:7B:72:0B:6C:3B:04:10
Certificate issuer:       /CN=57566AD0E614192635CC891E97E47A090618F3F5
Certificate serial:       5078AB1CC1E14D64B5B3A8326FC5261D5904D859
Authority key identifier: 57:56:6A:D0:E6:14:19:26:35:CC:89:1E:97:E4:7A:09:06:18:F3:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57566AD0E614192635CC891E97E47A090618F3F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/0/323830343a343666633a3a2f33322d3332203d3e20323637303234.roa
Signing time:             Mon 18 Sep 2023 12:09:39 +0000
ROA not before:           Mon 18 Sep 2023 12:04:39 +0000
ROA not after:            Mon 16 Sep 2024 12:09:39 +0000
asID:                     267024
IP address blocks:        2804:46fc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:78:ab:1c:c1:e1:4d:64:b5:b3:a8:32:6f:c5:26:1d:59:04:d8:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57566AD0E614192635CC891E97E47A090618F3F5
        Validity
            Not Before: Sep 18 12:04:39 2023 GMT
            Not After : Sep 16 12:09:39 2024 GMT
        Subject: CN=1768C1B3B2A596BED776F579127B720B6C3B0410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:de:24:3b:a8:42:bf:19:73:59:53:c5:59:23:
                    4b:5a:fe:f5:03:d2:e1:77:e9:06:ca:39:e2:d1:a7:
                    99:ac:01:97:b4:10:de:b6:3f:dc:90:b9:3c:1e:56:
                    06:aa:46:80:4f:f3:68:9d:bd:04:fc:54:1f:30:ab:
                    55:59:18:3b:69:71:9e:1e:d0:90:9e:ed:f9:ad:40:
                    bf:ab:d4:45:26:e4:3e:11:79:a1:00:4c:e1:74:e1:
                    74:90:49:f5:79:ea:9f:91:00:0b:dd:ab:ca:9f:bf:
                    a8:47:53:2d:85:cb:6b:93:8a:04:b8:79:e8:31:e3:
                    2b:d9:0d:bf:b0:ec:d2:8e:ab:26:dd:69:cd:8d:b3:
                    5d:a1:5d:15:9e:06:67:ae:ff:ab:9f:06:b7:29:32:
                    01:f4:a4:0c:fd:5c:52:5a:b8:20:91:a9:02:0a:98:
                    8b:9b:14:99:c1:57:ff:ca:ee:38:4f:a7:d9:ae:1f:
                    6b:ab:3c:e5:b7:ed:14:0f:da:33:3b:1e:74:a9:1f:
                    74:ff:76:7f:75:71:eb:10:7e:bd:41:39:c0:9e:20:
                    dd:25:63:b6:86:a5:1e:1a:62:37:3e:83:cb:de:d2:
                    d6:77:e7:a7:7c:d3:b1:8d:50:0e:ec:cd:c7:ed:2c:
                    db:e7:bc:f5:76:7e:07:2d:f4:f7:89:d6:e1:28:c5:
                    c8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:68:C1:B3:B2:A5:96:BE:D7:76:F5:79:12:7B:72:0B:6C:3B:04:10
            X509v3 Authority Key Identifier:
                keyid:57:56:6A:D0:E6:14:19:26:35:CC:89:1E:97:E4:7A:09:06:18:F3:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/0/57566AD0E614192635CC891E97E47A090618F3F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57566AD0E614192635CC891E97E47A090618F3F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/0/323830343a343666633a3a2f33322d3332203d3e20323637303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:46fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:e5:4b:6e:40:4f:c7:47:53:b7:0e:31:bd:d7:0d:74:a8:c3:
         95:9f:69:db:19:66:dc:4e:55:c3:ff:3e:c1:7f:ab:33:8d:90:
         f8:93:5d:7b:bd:09:58:d9:d3:19:4f:ab:42:92:4e:d6:80:cb:
         20:7b:ec:b2:6e:d3:f5:81:11:a0:99:05:37:1c:7e:c9:4a:c3:
         9d:22:8a:c2:4c:a9:b2:36:58:99:2b:d2:57:47:6d:f5:7a:d8:
         72:aa:15:56:a0:d4:73:99:09:7a:db:82:3b:14:13:a9:35:61:
         44:1c:66:27:88:76:53:22:01:ba:25:e1:c4:55:f7:69:e8:24:
         ab:d4:4c:ff:08:7b:ee:64:19:82:ac:06:84:cb:35:22:0c:10:
         b8:ad:7e:0d:30:8f:80:13:e1:82:b5:1c:4b:d2:da:b7:04:28:
         f3:46:9b:f4:5c:b6:b3:69:42:bd:5f:e3:f8:76:ea:f4:52:fd:
         47:32:18:6d:bd:ad:3a:65:e2:9f:fb:6a:9f:c3:91:39:dc:59:
         2f:55:7a:86:45:1e:76:d1:52:46:04:85:ae:df:7c:75:6f:cd:
         0a:9a:c9:7b:e0:af:68:3d:10:b9:42:44:5f:e3:8d:cf:24:2d:
         5b:9a:30:ba:e3:67:9a:2d:74:5f:27:6c:65:1d:4a:2e:b1:66:
         14:c1:53:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----