Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8GNtT9fPE7RatLLeo7Dg3LiFckTsJisiM9mH4baHAenY/0/323830343a366235343a3a2f33322d3332203d3e20323730333933.roa
File:                     323830343a366235343a3a2f33322d3332203d3e20323730333933.roa (raw, json)
Hash identifier:          bqzs+A+vT+q238Ka2fjEe5/VMEHeonHdgfLLxpS/rBw=
Subject key identifier:   50:F7:A0:45:A0:FA:6D:31:43:FE:97:DB:FF:2C:EA:91:38:8A:2B:24
Certificate issuer:       /CN=F85B06359227861B2D78F9E4EAB635F99B381050
Certificate serial:       73A9E2F4426F2F8EEFBA1179F8CA50921958BD41
Authority key identifier: F8:5B:06:35:92:27:86:1B:2D:78:F9:E4:EA:B6:35:F9:9B:38:10:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F85B06359227861B2D78F9E4EAB635F99B381050.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8GNtT9fPE7RatLLeo7Dg3LiFckTsJisiM9mH4baHAenY/0/323830343a366235343a3a2f33322d3332203d3e20323730333933.roa
Signing time:             Mon 03 Apr 2023 19:50:38 +0000
ROA not before:           Mon 03 Apr 2023 19:45:38 +0000
ROA not after:            Mon 01 Apr 2024 19:50:38 +0000
asID:                     270393
IP address blocks:        2804:6b54::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:a9:e2:f4:42:6f:2f:8e:ef:ba:11:79:f8:ca:50:92:19:58:bd:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F85B06359227861B2D78F9E4EAB635F99B381050
        Validity
            Not Before: Apr  3 19:45:38 2023 GMT
            Not After : Apr  1 19:50:38 2024 GMT
        Subject: CN=50F7A045A0FA6D3143FE97DBFF2CEA91388A2B24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6d:a6:c7:cb:40:ce:20:34:64:30:31:2b:67:
                    60:82:79:8e:c2:2e:56:d7:b7:9c:d0:ab:02:dc:1f:
                    3e:a0:13:54:7c:f8:43:d6:b9:cf:eb:1f:a7:26:c8:
                    70:e8:fd:4d:90:6c:08:f9:c4:6b:b2:81:48:e0:da:
                    48:a9:a4:4f:54:a6:d6:28:19:93:12:84:6a:20:74:
                    ff:ee:62:66:9a:da:0a:a6:b7:b6:5c:ca:21:5c:bd:
                    fa:86:0c:1a:e9:18:05:db:f3:bc:38:db:03:13:c9:
                    0d:50:11:f9:b0:01:1f:66:ac:ba:20:89:02:eb:a5:
                    6d:7c:fb:65:18:33:c3:8b:29:92:d0:16:bf:de:c3:
                    60:bc:ee:44:c4:a3:d6:c1:c5:7d:7d:72:33:4e:d4:
                    1c:c2:55:34:1f:1a:e9:c1:48:d6:7f:7f:06:93:45:
                    7f:d5:e9:b0:47:bc:14:c7:96:28:86:2a:69:36:a9:
                    31:9e:08:56:2d:69:aa:cc:1e:c5:84:44:53:23:c0:
                    06:dc:40:06:b7:b7:d1:c2:a4:d0:db:23:b4:ea:ff:
                    b6:79:0f:b7:4c:e4:78:cc:f1:a5:d2:c4:5c:c3:55:
                    3c:76:7c:ef:56:2b:42:4f:3c:0a:b3:8e:af:6b:f5:
                    37:89:62:67:31:de:98:a0:98:36:16:9c:2a:0e:bc:
                    47:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F7:A0:45:A0:FA:6D:31:43:FE:97:DB:FF:2C:EA:91:38:8A:2B:24
            X509v3 Authority Key Identifier:
                keyid:F8:5B:06:35:92:27:86:1B:2D:78:F9:E4:EA:B6:35:F9:9B:38:10:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8GNtT9fPE7RatLLeo7Dg3LiFckTsJisiM9mH4baHAenY/0/F85B06359227861B2D78F9E4EAB635F99B381050.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F85B06359227861B2D78F9E4EAB635F99B381050.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8GNtT9fPE7RatLLeo7Dg3LiFckTsJisiM9mH4baHAenY/0/323830343a366235343a3a2f33322d3332203d3e20323730333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b54::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:75:62:fd:2b:5c:c9:71:42:0f:d9:29:7d:3d:1a:63:cc:39:
         06:54:e6:bc:9d:37:20:c0:6b:d3:c9:8c:94:fd:f8:a0:51:da:
         f3:6b:a9:a4:91:12:0c:0c:ea:61:5e:d9:ec:e3:b5:84:36:65:
         ec:10:72:54:9b:58:64:06:59:03:3f:5f:f7:01:4a:c9:6a:f8:
         07:f9:d3:05:e2:e4:b8:8a:b7:85:c7:9e:f2:bd:23:1a:e1:12:
         57:cb:90:d1:5d:4a:ac:63:41:81:63:72:39:fc:cf:26:7f:10:
         fe:b8:68:15:8b:c5:4f:75:7b:13:43:1c:d4:34:06:f8:a4:67:
         d2:60:4f:f5:af:e4:05:28:62:2d:9e:ae:6e:0b:0e:dc:52:c1:
         b7:f5:29:e2:a0:e7:62:4c:06:14:e7:d4:5f:27:34:fc:47:88:
         07:e4:7b:18:48:4a:68:dc:24:ba:91:57:b5:88:2f:53:89:5c:
         d0:1f:2f:d6:15:00:ee:4e:42:ee:a5:8a:1d:49:d8:71:c1:5c:
         0f:d2:ea:8b:77:d9:ff:35:05:aa:bd:b2:b7:77:f0:da:98:cd:
         ec:73:bd:b4:aa:5e:5b:22:2d:54:9f:4c:1d:89:77:2a:89:9d:
         5e:d3:73:ae:ba:b0:4d:08:74:bb:53:fa:62:a6:c6:aa:3a:c8:
         6c:bc:da:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----