Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8tYofYtqSAiCtdqz7MDAigJF6AieTbiUsW2ztDyPtV91/0/323830343a353130633a3a2f33322d3332203d3e203631353934.roa
File:                     323830343a353130633a3a2f33322d3332203d3e203631353934.roa (raw, json)
Hash identifier:          DT71LLZ48zboOiDm5DonYVOJKyCyvrQt3M7jkgwRN8c=
Subject key identifier:   8B:A3:0B:AB:9B:73:3E:57:AB:C2:12:0B:82:61:F9:27:6B:0B:DB:0D
Certificate issuer:       /CN=78C6C5A79CFFDD7077E4BB9A89FC100460FAC31C
Certificate serial:       26DCDEC3587C67B62C3325B6DEEBBC80BBEC5B46
Authority key identifier: 78:C6:C5:A7:9C:FF:DD:70:77:E4:BB:9A:89:FC:10:04:60:FA:C3:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78C6C5A79CFFDD7077E4BB9A89FC100460FAC31C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8tYofYtqSAiCtdqz7MDAigJF6AieTbiUsW2ztDyPtV91/0/323830343a353130633a3a2f33322d3332203d3e203631353934.roa
Signing time:             Thu 05 Oct 2023 16:54:27 +0000
ROA not before:           Thu 05 Oct 2023 16:49:27 +0000
ROA not after:            Thu 03 Oct 2024 16:54:27 +0000
asID:                     61594
IP address blocks:        2804:510c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:dc:de:c3:58:7c:67:b6:2c:33:25:b6:de:eb:bc:80:bb:ec:5b:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78C6C5A79CFFDD7077E4BB9A89FC100460FAC31C
        Validity
            Not Before: Oct  5 16:49:27 2023 GMT
            Not After : Oct  3 16:54:27 2024 GMT
        Subject: CN=8BA30BAB9B733E57ABC2120B8261F9276B0BDB0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f4:eb:57:44:1b:67:5d:6b:81:2d:03:86:8a:
                    9c:4c:cb:7a:cc:54:b5:5f:5e:53:f8:b4:7a:12:56:
                    01:63:7e:97:9f:11:78:22:d8:a4:49:99:4a:0e:c4:
                    59:e2:18:82:c9:3b:3b:4b:11:ab:b1:74:9f:c2:bd:
                    e9:97:5f:21:34:a5:eb:80:79:6a:e8:a6:c6:9b:f6:
                    78:76:57:7f:eb:e6:36:fe:08:de:78:d9:86:b8:b0:
                    8b:f5:20:fd:dc:4c:98:f2:de:a4:1e:f1:03:55:fd:
                    17:c7:69:e2:ca:ee:fe:68:e6:02:ae:cf:c2:72:39:
                    3b:fe:e7:1b:ad:78:0f:24:0b:aa:4b:2f:4d:fb:3b:
                    b0:ac:5d:42:80:d5:9e:5c:cc:3d:15:c0:a7:e0:03:
                    a7:8a:97:92:64:bc:0b:61:ed:13:aa:c3:1a:5b:4a:
                    fc:1d:cf:37:2d:c6:9b:06:3e:2d:83:cd:ab:59:00:
                    20:d8:c1:5c:ca:e6:84:35:3d:0d:f8:8e:bb:eb:0d:
                    67:d7:91:95:1a:c0:bb:74:8d:5c:f9:c3:a8:5a:fe:
                    96:f1:5b:87:6e:c7:ab:e3:dd:76:f0:bd:a6:2d:d9:
                    aa:bc:27:bf:0a:0b:89:33:9b:37:af:3f:52:dd:07:
                    58:2a:b0:81:93:1d:53:bb:c4:ca:06:2c:4b:a0:27:
                    de:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A3:0B:AB:9B:73:3E:57:AB:C2:12:0B:82:61:F9:27:6B:0B:DB:0D
            X509v3 Authority Key Identifier:
                keyid:78:C6:C5:A7:9C:FF:DD:70:77:E4:BB:9A:89:FC:10:04:60:FA:C3:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8tYofYtqSAiCtdqz7MDAigJF6AieTbiUsW2ztDyPtV91/0/78C6C5A79CFFDD7077E4BB9A89FC100460FAC31C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78C6C5A79CFFDD7077E4BB9A89FC100460FAC31C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8tYofYtqSAiCtdqz7MDAigJF6AieTbiUsW2ztDyPtV91/0/323830343a353130633a3a2f33322d3332203d3e203631353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:510c::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:31:d2:fb:f5:10:89:98:86:62:db:b3:b7:6c:d8:fb:95:0c:
         5e:fa:1c:66:1f:39:51:c3:7c:5a:f5:8b:1c:3e:47:5e:e3:08:
         4d:18:82:ad:95:ef:ac:6e:ae:2b:e8:1b:d4:7c:28:6a:29:a3:
         c6:70:92:0e:ed:5a:e7:5c:ba:97:ce:0f:e3:66:06:d7:ac:a6:
         40:c6:b4:da:f4:3a:95:7f:83:c1:a5:9d:85:5d:b2:ac:f5:99:
         21:ee:42:d1:5a:bb:82:60:ff:fe:05:9a:53:47:2f:0c:86:50:
         db:24:53:95:5c:5c:19:42:6b:60:95:d4:15:34:02:af:96:14:
         48:db:45:75:e2:05:6f:60:8a:d3:6a:11:69:1f:ec:32:21:13:
         8f:5d:be:71:25:b8:68:22:05:72:d8:4d:0b:87:61:4c:25:83:
         7f:ab:53:b7:33:46:1e:66:ce:38:4b:8b:2d:8e:1f:80:60:c8:
         f5:f7:13:9f:6e:27:85:73:b8:45:cb:19:86:c7:dc:6b:a0:64:
         dc:c0:8d:07:d7:92:c7:4d:d9:05:0f:73:2f:be:7d:48:39:ff:
         37:ca:9d:56:8a:56:15:82:f3:bd:91:31:16:0f:58:43:11:81:
         47:b4:a2:2d:4e:71:7c:88:1e:67:26:f0:b4:c0:a9:0b:47:fb:
         6b:56:ef:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----