Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/323830343a353862303a3133383a3a2f34352d3435203d3e20323638313434.roa
File:                     323830343a353862303a3133383a3a2f34352d3435203d3e20323638313434.roa (raw, json)
Hash identifier:          gnFu/xlbalc7Vol0BTt5JU2rQs5ZpRskBPRtaDrG2lc=
Subject key identifier:   90:C8:C9:88:6D:0F:45:8D:36:37:39:A7:9D:38:19:10:59:D8:FF:16
Certificate issuer:       /CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
Certificate serial:       5A268FDA8B223569CC5C65BCBD384CA0D9061061
Authority key identifier: 7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/323830343a353862303a3133383a3a2f34352d3435203d3e20323638313434.roa
Signing time:             Fri 15 Sep 2023 16:56:01 +0000
ROA not before:           Fri 15 Sep 2023 16:51:01 +0000
ROA not after:            Fri 13 Sep 2024 16:56:01 +0000
asID:                     268144
IP address blocks:        2804:58b0:138::/45 maxlen: 45

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:26:8f:da:8b:22:35:69:cc:5c:65:bc:bd:38:4c:a0:d9:06:10:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
        Validity
            Not Before: Sep 15 16:51:01 2023 GMT
            Not After : Sep 13 16:56:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:91:9a:1e:c2:7c:4e:54:39:11:6b:6e:c0:6b:
                    db:c9:5f:fb:70:be:1d:5e:fa:89:a9:41:d8:34:c3:
                    8a:af:c9:a8:ac:17:6e:0f:51:38:5d:c5:f0:5c:73:
                    4e:c5:5a:3b:e6:9e:ec:db:06:43:60:59:3b:f2:d4:
                    ff:6c:d4:bb:ef:51:32:f5:6d:b3:94:af:03:ed:17:
                    7a:3b:7b:1f:cd:ba:a0:6e:f1:8f:85:c0:e9:1f:f0:
                    92:0f:1e:95:2b:44:96:18:bd:fe:09:9a:50:5c:0b:
                    1b:58:f4:f0:ad:8e:15:b3:0f:4c:5e:ab:b0:e4:e1:
                    a5:6f:46:38:67:07:bd:16:00:02:97:04:37:77:58:
                    b4:04:fb:3f:9b:9f:a3:97:ed:04:a3:e5:06:3c:16:
                    cf:95:04:f3:d0:c8:08:2d:14:53:f0:8e:3b:b6:07:
                    01:17:fe:33:dd:f0:f1:1b:b1:2a:2c:ef:62:23:4c:
                    86:3c:0c:2a:5c:c4:d9:5b:f3:7b:35:16:8e:e8:32:
                    02:e4:b3:1b:6c:a1:a7:35:c1:0b:de:cc:d3:69:86:
                    13:34:7e:80:29:cb:92:af:63:c4:60:a0:07:cb:f2:
                    2c:e2:16:c7:90:6b:40:e8:21:c7:1d:87:26:8b:98:
                    68:c0:e7:67:19:91:07:66:2e:75:6f:5a:78:fc:b3:
                    95:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:C8:C9:88:6D:0F:45:8D:36:37:39:A7:9D:38:19:10:59:D8:FF:16
            X509v3 Authority Key Identifier:
                keyid:7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/323830343a353862303a3133383a3a2f34352d3435203d3e20323638313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58b0:138::/45

    Signature Algorithm: sha256WithRSAEncryption
         3c:23:d3:2b:ab:94:aa:c7:0a:fc:e1:fb:31:1b:d6:8c:28:cc:
         1d:d3:a0:7e:97:b4:7d:a6:74:af:81:a3:97:d9:7d:d2:1f:b2:
         97:9b:49:bd:3c:f2:9b:90:87:ec:27:2e:39:b4:07:bb:d0:b5:
         e7:ea:b5:0b:44:82:4e:93:32:2b:00:a4:2a:d2:df:9a:a1:4f:
         9b:77:ef:64:c2:15:89:d3:ca:ce:0f:3f:15:4c:27:b5:fb:79:
         40:df:51:70:a6:69:38:a0:b0:8e:86:ef:ac:b0:57:58:d3:69:
         f0:1e:3b:af:33:06:2a:a4:e7:9c:0a:58:3e:e0:40:46:7d:1d:
         18:44:69:e2:e2:86:3a:63:82:f9:b2:b1:76:3b:08:41:6e:9f:
         ac:39:bc:b9:c2:39:20:54:30:4a:ba:f9:33:ce:da:3d:19:39:
         bf:7e:22:01:44:8d:f1:dc:91:1b:bf:59:75:50:8b:51:2b:50:
         f8:73:b4:58:2b:0f:52:a8:d1:ec:58:39:e6:6e:81:4c:11:a9:
         a2:a2:a7:59:21:7a:d2:37:b4:e8:7c:5c:ae:0f:3f:2a:7f:bf:
         fc:01:0c:7f:eb:ac:d7:09:18:d5:51:29:c7:82:b4:67:2d:63:
         b9:54:cd:c9:cc:70:b6:1f:75:aa:c8:df:9c:95:4d:c0:f8:c0:
         71:17:0c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----