Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/323830343a353332633a3132383a3a2f34352d3435203d3e20323638353638.roa
File:                     323830343a353332633a3132383a3a2f34352d3435203d3e20323638353638.roa (raw, json)
Hash identifier:          3Y8GZZ3g8aUBMJEdvbTb+ug7MfRg/OOwDKyiggbhwq8=
Subject key identifier:   BC:CD:48:2A:68:72:94:F0:C3:6F:1A:9F:D6:22:D9:97:49:26:07:C0
Certificate issuer:       /CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
Certificate serial:       518D82617EA9BF340EB67005CB9C3AABC5EF074B
Authority key identifier: 7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/323830343a353332633a3132383a3a2f34352d3435203d3e20323638353638.roa
Signing time:             Wed 17 Jan 2024 17:58:01 +0000
ROA not before:           Wed 17 Jan 2024 17:53:01 +0000
ROA not after:            Wed 15 Jan 2025 17:58:01 +0000
asID:                     268568
IP address blocks:        2804:532c:128::/45 maxlen: 45

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:8d:82:61:7e:a9:bf:34:0e:b6:70:05:cb:9c:3a:ab:c5:ef:07:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
        Validity
            Not Before: Jan 17 17:53:01 2024 GMT
            Not After : Jan 15 17:58:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a1:cf:32:97:03:ce:70:63:a8:a4:3b:6a:f6:
                    1e:28:fa:9f:d9:fb:72:46:87:52:d6:36:5d:48:75:
                    ef:e4:ce:40:fd:48:f1:71:5c:5b:7a:73:b7:8f:c6:
                    14:0c:ea:fe:88:b4:dc:bb:9f:6e:44:4e:82:ed:43:
                    ab:5b:f6:55:af:f1:f0:ea:dc:53:ee:65:41:99:59:
                    98:fc:95:99:ee:42:c0:2a:24:ae:2b:ed:11:47:7e:
                    0e:0e:06:24:81:6e:0b:c7:1b:26:f3:9c:af:e1:f8:
                    74:f6:4c:25:48:e3:3e:96:13:66:f9:17:5f:76:f2:
                    37:3c:e2:5b:68:e0:32:4d:d0:b9:a6:07:5b:4e:4e:
                    86:75:51:87:eb:06:7a:6d:70:9a:48:de:58:5e:82:
                    85:ff:d4:9e:7f:fe:76:c1:e2:6e:43:49:52:15:9e:
                    82:ca:6f:c2:d8:2a:9a:ab:06:92:09:e6:ae:e4:1c:
                    f8:98:70:1f:a9:9e:11:04:ef:f8:2f:d0:45:ae:cb:
                    4b:f9:da:13:bb:9b:38:9a:23:57:ca:6e:da:a6:ce:
                    4d:3c:d2:f4:c4:e5:a7:1d:90:88:ee:b4:19:43:6c:
                    12:d8:d0:6a:96:32:2d:69:20:33:c9:01:ec:42:51:
                    eb:8d:3b:b5:a9:de:20:fd:d7:7e:97:3e:bb:df:a7:
                    3b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:CD:48:2A:68:72:94:F0:C3:6F:1A:9F:D6:22:D9:97:49:26:07:C0
            X509v3 Authority Key Identifier:
                keyid:7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/323830343a353332633a3132383a3a2f34352d3435203d3e20323638353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:532c:128::/45

    Signature Algorithm: sha256WithRSAEncryption
         9c:de:d4:4e:7c:63:20:39:61:43:ad:fa:35:db:90:e3:e2:25:
         b5:70:1b:1b:56:2d:52:d7:4e:06:bd:16:5b:8c:b3:3a:18:f8:
         3f:73:04:90:cd:a4:62:0d:64:4d:b0:22:c0:22:22:fb:9f:54:
         56:25:06:df:61:fa:7c:56:e3:c9:a0:64:67:31:1f:bc:16:37:
         d0:bf:bb:38:3b:1f:93:01:cf:80:aa:04:5b:8b:83:99:fc:29:
         1c:0d:12:17:7e:ba:e3:4b:f6:9e:9d:3b:21:f7:80:4b:67:01:
         c0:36:67:11:e0:d9:7b:f8:f5:fe:e5:dc:a2:90:0b:85:05:48:
         e7:80:1c:aa:98:5c:da:20:33:08:eb:eb:d1:d4:2c:c1:ae:85:
         08:61:f7:a2:1c:c5:19:00:83:90:ba:ba:97:e9:c1:36:c3:39:
         10:bc:dc:4a:f8:e0:17:ce:97:7c:29:2b:fe:a1:bf:fd:9d:24:
         0f:85:13:1d:7e:08:52:c3:72:9e:c3:3e:51:bb:67:a1:c0:9f:
         31:f5:cd:eb:51:08:1e:3e:e2:73:c6:45:1e:63:f2:e0:36:de:
         54:39:be:c6:d5:05:db:fd:fd:02:12:60:6b:e4:20:8b:54:eb:
         50:6b:fe:ed:66:bb:5c:c1:a6:a3:2c:21:33:83:53:83:af:5a:
         d4:d4:f0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----