Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QxpGJjP9Q6bgLnrg5FwMFJLfZ9L5SuH65vcmyrxSdhm/0/323830343a383265383a3a2f33322d3332203d3e20323732313634.roa
File:                     323830343a383265383a3a2f33322d3332203d3e20323732313634.roa (raw, json)
Hash identifier:          wxXxe4IJQJiJxSvkP961kMn2M7RKJaU6plc0eCqqAr0=
Subject key identifier:   18:66:A2:E2:F7:29:A9:3C:22:72:0C:4F:B7:D5:64:44:F1:67:00:A4
Certificate issuer:       /CN=6D0C2E6FED7E38F97A258171425DB7D75B7F8247
Certificate serial:       436C417DFD505FA69BBDD9539769DDB864819F68
Authority key identifier: 6D:0C:2E:6F:ED:7E:38:F9:7A:25:81:71:42:5D:B7:D7:5B:7F:82:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D0C2E6FED7E38F97A258171425DB7D75B7F8247.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QxpGJjP9Q6bgLnrg5FwMFJLfZ9L5SuH65vcmyrxSdhm/0/323830343a383265383a3a2f33322d3332203d3e20323732313634.roa
Signing time:             Thu 14 Sep 2023 16:00:00 +0000
ROA not before:           Thu 14 Sep 2023 15:55:00 +0000
ROA not after:            Thu 12 Sep 2024 16:00:00 +0000
asID:                     272164
IP address blocks:        2804:82e8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:6c:41:7d:fd:50:5f:a6:9b:bd:d9:53:97:69:dd:b8:64:81:9f:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D0C2E6FED7E38F97A258171425DB7D75B7F8247
        Validity
            Not Before: Sep 14 15:55:00 2023 GMT
            Not After : Sep 12 16:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f1:bc:b2:c1:36:07:0a:7d:3f:b6:bf:bf:a8:
                    f8:9a:6c:27:ca:18:b0:a8:ec:a8:05:d6:6b:7b:e5:
                    0a:20:45:68:bc:5e:ba:2a:51:03:1f:a7:c8:3c:d5:
                    3d:36:fe:80:6e:6b:03:f1:26:8a:b3:1b:c3:11:c0:
                    03:ed:09:12:a2:59:67:61:38:14:aa:9f:49:d5:74:
                    c9:30:cd:3a:d4:4b:d2:c6:c3:0c:92:b4:dd:52:a0:
                    bf:2a:a8:80:d7:cc:ad:9d:cf:1e:c6:57:2f:42:29:
                    c1:b2:a3:0e:45:08:5a:55:a3:37:45:57:8a:cb:06:
                    0d:f7:53:52:3c:90:77:be:fe:47:00:1a:0c:db:3f:
                    30:b8:78:5d:31:c5:ce:66:76:56:8f:9a:43:db:a4:
                    eb:f6:17:f7:01:71:ee:30:75:87:f2:93:f0:37:60:
                    e7:27:40:62:c1:b8:bb:e4:81:06:5e:ab:d7:3d:38:
                    34:b8:e6:ef:84:c0:57:67:e6:11:bc:c7:38:69:47:
                    1a:d3:83:6f:a5:82:37:ec:70:d8:77:65:d1:8e:de:
                    0e:d2:07:3d:8b:08:af:9f:54:12:74:5d:b0:9b:06:
                    4e:79:95:9a:31:1f:ca:e9:d3:d2:c1:1f:4f:ed:d1:
                    d7:0c:3b:e3:1d:8b:0f:59:61:be:86:85:0a:50:55:
                    cf:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:66:A2:E2:F7:29:A9:3C:22:72:0C:4F:B7:D5:64:44:F1:67:00:A4
            X509v3 Authority Key Identifier:
                keyid:6D:0C:2E:6F:ED:7E:38:F9:7A:25:81:71:42:5D:B7:D7:5B:7F:82:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QxpGJjP9Q6bgLnrg5FwMFJLfZ9L5SuH65vcmyrxSdhm/0/6D0C2E6FED7E38F97A258171425DB7D75B7F8247.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D0C2E6FED7E38F97A258171425DB7D75B7F8247.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QxpGJjP9Q6bgLnrg5FwMFJLfZ9L5SuH65vcmyrxSdhm/0/323830343a383265383a3a2f33322d3332203d3e20323732313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:82e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:e7:95:70:21:2d:8d:01:5b:e8:16:43:1c:60:de:7d:21:69:
         90:6a:8e:44:e4:22:89:78:61:ae:89:20:52:25:f4:12:89:32:
         70:43:86:e3:58:e1:5b:41:5c:a6:3b:5b:3c:5c:71:7e:df:cd:
         30:3a:fc:28:5b:a9:87:bd:d7:0a:9d:03:cb:97:e4:82:90:26:
         12:ca:a9:4d:e4:37:c0:75:42:87:4d:19:b0:f7:93:ca:02:8a:
         6b:de:bc:0b:be:d5:1d:19:9b:26:91:2e:2d:47:a6:d7:e9:5c:
         04:4f:f6:75:ae:77:64:ac:fc:7f:59:0c:00:9f:57:e4:15:35:
         28:a7:11:d6:69:65:50:96:b8:26:8e:0f:1e:49:a3:9f:60:5f:
         09:eb:c3:00:f3:82:8f:81:f4:53:51:50:5c:09:60:b9:ed:aa:
         91:84:ed:ad:86:f9:7d:1b:31:5a:8e:0d:6a:e1:19:19:8f:9a:
         cc:e2:1c:f6:0a:de:09:33:30:a6:37:89:a1:fc:50:84:b0:d2:
         b9:d9:e6:48:73:fc:14:bd:55:f2:5e:b0:e2:3a:dc:91:fe:dc:
         96:7f:3d:82:08:c2:ab:74:b1:4e:33:8d:36:51:f2:d5:1d:b1:
         df:93:01:9a:4c:38:7e:e6:8a:b6:d0:24:f2:ce:90:58:38:3b:
         79:e0:f1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----