Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/323830343a353862303a3133343a3a2f34362d3436203d3e20323638313434.roa
File:                     323830343a353862303a3133343a3a2f34362d3436203d3e20323638313434.roa (raw, json)
Hash identifier:          rao8LRKBtoXmh9NmR5yPjlH/F6+IjeJ1o/5J1bZTr44=
Subject key identifier:   31:DA:1D:4E:83:A9:C9:71:94:CD:96:5F:28:F0:4B:C1:D2:F9:B4:A9
Certificate issuer:       /CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
Certificate serial:       25F8ADC021A74483C52B0090415D6238324A66D0
Authority key identifier: 7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/323830343a353862303a3133343a3a2f34362d3436203d3e20323638313434.roa
Signing time:             Fri 15 Sep 2023 16:56:01 +0000
ROA not before:           Fri 15 Sep 2023 16:51:01 +0000
ROA not after:            Fri 13 Sep 2024 16:56:01 +0000
asID:                     268144
IP address blocks:        2804:58b0:134::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:f8:ad:c0:21:a7:44:83:c5:2b:00:90:41:5d:62:38:32:4a:66:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
        Validity
            Not Before: Sep 15 16:51:01 2023 GMT
            Not After : Sep 13 16:56:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:98:9b:ac:ce:9f:0b:6d:3f:1b:fe:c9:40:a1:
                    bc:19:72:17:ca:27:ed:7f:79:76:11:bb:c7:63:54:
                    be:b3:ff:66:ee:54:de:4e:68:ad:d0:3a:59:fb:02:
                    79:2f:01:97:1e:70:2b:37:e9:0b:01:fa:ae:9b:44:
                    e6:fc:e8:95:24:ea:c6:5c:ec:4f:23:45:e6:2f:0d:
                    27:68:22:59:c0:ec:5f:fe:84:59:72:6b:4e:c7:ed:
                    60:a8:ba:95:87:af:1b:0a:19:45:72:6d:47:cf:cb:
                    da:f9:b3:fe:13:33:b8:4e:5e:42:31:9a:83:d5:a7:
                    6f:ee:41:ae:be:87:bb:5d:ee:94:5b:68:3c:41:94:
                    0e:c9:e0:69:7d:c4:2b:c7:0a:d8:7e:58:c6:4d:1f:
                    94:56:d0:42:3c:69:64:c2:c5:a8:1c:2c:8a:38:6e:
                    f5:84:bf:77:ce:c8:c7:19:cc:ce:98:db:57:12:25:
                    3f:9f:c8:4e:8d:03:20:c6:f2:f9:4b:7d:78:cf:cd:
                    6d:7f:7a:4e:c8:2e:d2:a0:6b:41:72:4f:09:44:dd:
                    40:6b:f8:9c:4a:ba:c3:61:d4:e4:da:1e:ee:aa:d9:
                    68:4c:fb:bb:db:9e:38:6c:7d:a7:5d:e3:4d:fe:c6:
                    87:b0:6f:db:37:e4:d5:18:5f:8b:fd:19:78:d5:5c:
                    f2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:DA:1D:4E:83:A9:C9:71:94:CD:96:5F:28:F0:4B:C1:D2:F9:B4:A9
            X509v3 Authority Key Identifier:
                keyid:7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/323830343a353862303a3133343a3a2f34362d3436203d3e20323638313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58b0:134::/46

    Signature Algorithm: sha256WithRSAEncryption
         40:e7:d0:2f:ba:68:d6:1a:da:79:60:d5:00:eb:24:e7:fe:2a:
         89:ed:b1:37:73:b0:1b:1a:2e:09:b4:f4:a3:75:d0:17:29:5d:
         c2:75:ef:69:d9:14:02:d5:7e:eb:f6:91:59:45:f4:51:be:8a:
         ce:a9:fe:e0:70:e2:6b:4c:1a:79:b1:f3:53:96:2e:01:bd:3f:
         92:61:a4:e7:b2:6c:71:01:55:ff:ed:05:7c:9a:a9:27:73:6e:
         57:e8:2b:bd:55:ba:fc:c4:aa:b6:b7:0f:0b:fe:37:ee:c3:f1:
         c0:6a:42:1b:49:15:23:9c:b5:85:a8:86:21:d7:0d:70:7d:87:
         43:42:5e:4f:13:0a:bc:2b:aa:e1:99:82:4c:20:a3:0f:38:17:
         4b:07:32:7f:9c:e0:72:7d:80:33:b5:aa:65:f1:ad:5c:cb:fb:
         ec:bf:28:46:d1:4f:95:55:9b:b0:13:48:f6:2d:01:b7:f4:25:
         75:63:b7:4d:ca:1c:e8:76:80:6c:3c:33:50:07:54:7d:b5:d6:
         6b:61:3c:b1:e9:db:bd:4b:31:1b:0e:79:a2:d1:43:66:65:a8:
         a6:d0:cc:c7:ae:08:d4:58:42:7e:91:69:d4:c3:37:ca:b1:17:
         68:43:a6:f7:da:59:fa:b2:d0:df:4d:1e:c8:bb:4b:34:d9:e8:
         c7:ce:cc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----