Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/323830343a316236383a383030343a3a2f34382d3438203d3e203631373236.roa
File:                     323830343a316236383a383030343a3a2f34382d3438203d3e203631373236.roa (raw, json)
Hash identifier:          wJEcMjSp0O52asyikhQjnngGmm9jd+YNB1jJaZNj4Zw=
Subject key identifier:   DC:B7:42:6D:83:FD:43:8E:60:8B:17:F7:C6:6D:D9:6C:C2:02:7C:46
Certificate issuer:       /CN=DD0ADDE73F928E43B84E117E0F7591F247D189BD
Certificate serial:       090F57F177B29326B65C83406D4979BC812EE9A9
Authority key identifier: DD:0A:DD:E7:3F:92:8E:43:B8:4E:11:7E:0F:75:91:F2:47:D1:89:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD0ADDE73F928E43B84E117E0F7591F247D189BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/323830343a316236383a383030343a3a2f34382d3438203d3e203631373236.roa
Signing time:             Tue 06 Feb 2024 18:22:42 +0000
ROA not before:           Tue 06 Feb 2024 18:17:42 +0000
ROA not after:            Tue 04 Feb 2025 18:22:42 +0000
asID:                     61726
IP address blocks:        2804:1b68:8004::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:0f:57:f1:77:b2:93:26:b6:5c:83:40:6d:49:79:bc:81:2e:e9:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD0ADDE73F928E43B84E117E0F7591F247D189BD
        Validity
            Not Before: Feb  6 18:17:42 2024 GMT
            Not After : Feb  4 18:22:42 2025 GMT
        Subject: CN=DCB7426D83FD438E608B17F7C66DD96CC2027C46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:18:bf:17:f1:3c:0b:56:54:0b:92:90:73:cd:
                    16:89:44:bc:27:be:9f:ed:6f:5d:38:d7:0a:e1:bd:
                    66:c6:98:56:94:5f:97:7b:28:d4:0b:2a:89:a0:50:
                    a5:2d:ab:ba:af:bc:1f:5c:07:b6:65:ad:9f:17:ba:
                    2a:bb:6c:af:47:4d:c3:28:e2:b4:26:da:44:99:d8:
                    79:68:90:fb:d5:88:fb:9d:f6:be:d6:0a:a5:52:ab:
                    ec:f9:6c:66:5e:0e:9d:b9:16:b5:76:f2:83:84:76:
                    2c:b7:2e:75:f5:44:cc:ac:87:4b:1f:50:1f:9a:5c:
                    6a:40:e8:70:29:0c:5f:8c:c5:5d:89:88:1c:5a:02:
                    d0:20:3c:22:3d:25:91:87:24:6f:56:a1:a7:1c:9d:
                    c8:3c:8a:ad:a0:2e:6c:09:b9:0b:42:c4:41:ab:3a:
                    bb:aa:72:24:db:8d:98:58:76:a3:fb:36:2d:86:bd:
                    41:fe:32:30:14:c6:7f:0b:40:b5:92:20:b4:9d:9b:
                    78:83:93:29:95:c2:20:21:46:22:dd:a5:f3:2b:f6:
                    e5:7e:55:08:4f:17:42:55:c7:e7:49:95:43:9d:21:
                    d6:6f:19:43:d8:9a:c2:f5:f7:dc:cd:8a:06:36:71:
                    85:42:c9:d0:6e:e7:3e:9b:d6:b7:df:98:dc:57:5c:
                    e3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B7:42:6D:83:FD:43:8E:60:8B:17:F7:C6:6D:D9:6C:C2:02:7C:46
            X509v3 Authority Key Identifier:
                keyid:DD:0A:DD:E7:3F:92:8E:43:B8:4E:11:7E:0F:75:91:F2:47:D1:89:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/DD0ADDE73F928E43B84E117E0F7591F247D189BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD0ADDE73F928E43B84E117E0F7591F247D189BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/323830343a316236383a383030343a3a2f34382d3438203d3e203631373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b68:8004::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:07:f0:12:55:88:33:b4:68:22:e4:b3:57:10:ba:74:85:51:
         db:be:38:7f:e0:4c:77:89:14:64:48:a9:cc:79:d2:d6:c0:ef:
         88:6c:62:c5:37:05:e9:3d:24:25:46:69:bc:bd:d0:2d:7d:10:
         82:79:be:3f:41:66:2e:07:76:b2:a4:63:df:8e:d7:01:4b:4a:
         39:08:5a:b9:78:cb:a8:4e:03:9c:9f:20:84:d3:bd:25:20:25:
         66:df:db:48:fe:f3:26:3d:c8:20:d9:c2:21:ed:53:7e:e4:03:
         1a:02:12:eb:6d:95:c9:f1:ba:00:67:08:31:8b:d5:35:ae:09:
         f3:fd:18:36:53:33:29:2f:50:ac:15:33:39:80:4e:ed:a2:d9:
         4e:3a:3a:a7:a9:4d:ce:64:50:31:33:90:1b:8b:90:20:cf:86:
         9b:3b:87:09:66:8e:6c:c4:81:bb:e3:54:a4:0c:dd:b6:bc:59:
         1d:c6:80:e9:0d:4c:65:69:b2:52:77:36:c1:c7:26:3c:62:e1:
         2d:a2:1a:82:16:6a:f2:b0:a2:c4:82:c2:03:88:e7:5f:4a:f9:
         42:4b:8a:82:a8:c4:6a:78:5b:da:92:88:cc:37:10:79:b1:21:
         30:96:6c:98:06:7b:f4:e7:26:2e:b1:3f:3d:40:1b:77:22:35:
         26:b9:92:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----