Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a633030303a3a2f33342d3334203d3e20323732313832.roa
File:                     323830343a383333303a633030303a3a2f33342d3334203d3e20323732313832.roa (raw, json)
Hash identifier:          kDWnIRvPcgrG51JSIfKt1keKnm3gx5cvEgY+6NXmm9E=
Subject key identifier:   C2:95:82:03:85:61:A6:3C:52:DA:0A:9B:E6:8D:12:8E:7F:F7:55:63
Certificate issuer:       /CN=8676DCF1D873533AB6D8D41ADF1DB8078DE7F289
Certificate serial:       27B4ACF46DF61EA0BAEF635AEF4BD47BE85A57F9
Authority key identifier: 86:76:DC:F1:D8:73:53:3A:B6:D8:D4:1A:DF:1D:B8:07:8D:E7:F2:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8676DCF1D873533AB6D8D41ADF1DB8078DE7F289.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a633030303a3a2f33342d3334203d3e20323732313832.roa
Signing time:             Thu 29 Jun 2023 20:00:00 +0000
ROA not before:           Thu 29 Jun 2023 19:55:00 +0000
ROA not after:            Thu 27 Jun 2024 20:00:00 +0000
asID:                     272182
IP address blocks:        2804:8330:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:b4:ac:f4:6d:f6:1e:a0:ba:ef:63:5a:ef:4b:d4:7b:e8:5a:57:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8676DCF1D873533AB6D8D41ADF1DB8078DE7F289
        Validity
            Not Before: Jun 29 19:55:00 2023 GMT
            Not After : Jun 27 20:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:14:ce:fa:c0:28:cb:b7:ba:6a:50:d3:ad:e2:
                    08:b0:ea:b2:00:10:78:34:dd:c4:28:c1:fe:40:35:
                    61:2b:46:79:22:e4:7b:c0:a3:a2:aa:b7:08:3a:1e:
                    c7:c7:ce:dc:90:97:c1:3b:36:cd:94:49:36:c6:09:
                    4c:01:e6:65:9c:c6:b5:60:c2:af:34:e4:0b:dc:ee:
                    75:2e:46:86:52:27:d6:80:19:9c:92:4e:63:70:ab:
                    2d:72:f4:23:e7:55:21:65:ed:f4:8f:70:0a:b0:0a:
                    44:40:5c:2a:b1:23:4b:59:58:a5:0f:62:3d:70:d1:
                    6e:e5:c9:7d:e9:0b:d9:fd:0b:f5:2e:e9:3a:f3:f3:
                    3d:02:f4:9b:45:05:8e:be:7b:1e:96:b9:d1:16:98:
                    2e:72:46:19:3c:a9:df:f0:56:ad:90:48:4a:13:3e:
                    99:3b:72:cd:9e:72:57:80:57:bb:81:ad:3f:a5:ce:
                    f5:87:37:bb:ea:c0:96:bc:3c:e8:e6:18:42:0e:5a:
                    1a:1f:cb:9f:02:7f:95:eb:f9:0e:b1:1e:cd:08:35:
                    5c:7e:b5:bd:f7:69:83:a9:fe:0d:34:dc:9c:65:11:
                    d6:00:05:9e:78:7e:94:00:31:39:38:fe:7e:36:64:
                    e2:7b:aa:6e:fe:91:d4:12:33:9f:d3:83:16:4e:13:
                    88:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:95:82:03:85:61:A6:3C:52:DA:0A:9B:E6:8D:12:8E:7F:F7:55:63
            X509v3 Authority Key Identifier:
                keyid:86:76:DC:F1:D8:73:53:3A:B6:D8:D4:1A:DF:1D:B8:07:8D:E7:F2:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/8676DCF1D873533AB6D8D41ADF1DB8078DE7F289.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8676DCF1D873533AB6D8D41ADF1DB8078DE7F289.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a633030303a3a2f33342d3334203d3e20323732313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8330:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         29:d3:ae:26:19:43:84:eb:a7:fc:a9:b3:ad:00:c9:60:62:e0:
         b5:a9:fa:9b:45:39:32:ec:14:cf:ae:c5:b2:85:8d:54:0a:92:
         fa:cd:59:02:d7:cf:7d:6f:ad:32:86:c4:59:6e:ad:d9:b8:20:
         4d:c6:29:d1:10:8f:93:e5:65:19:b5:a1:c3:15:48:d0:25:32:
         26:8b:77:43:7d:bc:dc:03:f9:34:2f:f0:1e:35:74:51:c5:58:
         47:66:73:d7:ee:a4:10:d8:53:5c:9d:49:af:2f:b1:18:3e:80:
         aa:a0:a8:19:49:cf:47:1a:3c:2c:b8:c1:aa:8f:97:fd:a8:a4:
         37:c6:3c:ee:2c:3e:99:2d:ca:b0:a8:df:ee:55:b1:9d:7d:a4:
         fd:4b:5e:9e:d8:01:dd:4e:b6:5c:b0:46:1f:04:b5:95:61:bd:
         cd:ec:da:de:ee:df:31:55:2f:e0:2f:4e:79:f0:f0:96:3b:af:
         80:24:19:5a:df:0a:ae:51:84:14:ac:3e:9a:f6:79:ef:ea:97:
         1b:b0:8e:24:a9:34:1a:30:31:db:d3:b9:04:a8:c9:cc:d2:54:
         ce:13:c3:58:f4:cd:73:bf:8c:2a:2f:e5:ff:a4:42:19:62:83:
         06:1f:df:f6:16:c9:c5:4a:ea:3a:af:04:bf:dd:74:67:12:a7:
         45:b3:96:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----