Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/0/323830343a326563303a3a2f33322d3332203d3e20323635333634.roa
File:                     323830343a326563303a3a2f33322d3332203d3e20323635333634.roa (raw, json)
Hash identifier:          D84fDzoruxYTRTK4piAnNT0I5FOePUMNIMKrH0pqC4k=
Subject key identifier:   7D:FB:35:72:80:87:36:DF:CE:71:AB:CA:D8:5E:1D:1B:B6:15:92:5D
Certificate issuer:       /CN=952A85BFC0E691CB7CE10742B5260602B9A8A0BA
Certificate serial:       5BDF6A9DA7FB3853392EEF4DD38A397867B5D500
Authority key identifier: 95:2A:85:BF:C0:E6:91:CB:7C:E1:07:42:B5:26:06:02:B9:A8:A0:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/952A85BFC0E691CB7CE10742B5260602B9A8A0BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/0/323830343a326563303a3a2f33322d3332203d3e20323635333634.roa
Signing time:             Fri 28 Jul 2023 17:42:25 +0000
ROA not before:           Fri 28 Jul 2023 17:37:25 +0000
ROA not after:            Fri 26 Jul 2024 17:42:25 +0000
asID:                     265364
IP address blocks:        2804:2ec0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:df:6a:9d:a7:fb:38:53:39:2e:ef:4d:d3:8a:39:78:67:b5:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=952A85BFC0E691CB7CE10742B5260602B9A8A0BA
        Validity
            Not Before: Jul 28 17:37:25 2023 GMT
            Not After : Jul 26 17:42:25 2024 GMT
        Subject: CN=7DFB3572808736DFCE71ABCAD85E1D1BB615925D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:72:a4:50:53:3f:83:a4:0a:cf:9a:79:90:d0:
                    23:ec:d9:a0:98:65:a0:39:d5:d0:f9:e0:d0:0e:3a:
                    19:40:d4:e4:67:07:95:13:68:6a:56:04:25:5b:8a:
                    0c:f8:ec:f0:21:56:c0:97:46:c9:b9:6b:22:b7:b1:
                    e0:ea:29:c5:22:c1:2a:c2:5a:e9:87:cc:bc:99:68:
                    a3:6c:32:d9:43:3c:ee:3f:10:de:b9:0f:bf:a5:97:
                    15:e6:a9:e9:ef:2e:38:bf:59:58:de:b8:6d:c9:88:
                    b3:35:90:fc:ca:b1:c4:29:64:ed:41:e6:7b:7f:85:
                    c6:00:52:b2:52:d1:ca:13:96:0a:bf:e6:4d:77:2d:
                    9d:7d:4c:51:a0:86:0f:50:05:a6:7e:9e:5f:1c:37:
                    1b:71:b7:d2:4c:3b:9a:6d:ce:14:a0:e7:f8:4a:72:
                    0d:c4:43:fd:1f:ae:7e:ff:76:1d:94:86:6b:ab:91:
                    0f:cb:41:bd:c2:ce:4f:63:da:34:be:a7:31:69:06:
                    5d:82:02:05:55:c5:c2:35:09:10:42:11:32:7b:7f:
                    c1:3a:0c:50:a4:15:50:06:6d:a0:85:23:5b:82:be:
                    7e:50:d6:a3:dd:44:54:8a:a6:6f:f8:7e:18:bf:8d:
                    c0:c6:8a:ef:53:90:36:bf:5b:e4:bd:96:c9:bf:a6:
                    48:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:FB:35:72:80:87:36:DF:CE:71:AB:CA:D8:5E:1D:1B:B6:15:92:5D
            X509v3 Authority Key Identifier:
                keyid:95:2A:85:BF:C0:E6:91:CB:7C:E1:07:42:B5:26:06:02:B9:A8:A0:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/0/952A85BFC0E691CB7CE10742B5260602B9A8A0BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/952A85BFC0E691CB7CE10742B5260602B9A8A0BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/0/323830343a326563303a3a2f33322d3332203d3e20323635333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:0f:2c:1c:53:54:38:61:19:d5:c1:b0:a5:97:00:a7:86:f6:
         4f:f3:01:58:6f:fa:42:a8:65:3c:5c:e1:0e:8b:85:bd:57:60:
         b5:c0:cf:5d:9d:17:bf:fd:b7:3c:8b:26:33:b3:50:90:dd:0b:
         c3:6b:1d:bf:31:7f:d0:05:48:e0:c5:bb:bb:87:88:25:6c:fc:
         6a:65:7a:45:05:4a:2a:06:0a:12:7d:79:27:c5:f3:22:3f:e0:
         0a:4f:9b:e3:fb:2a:be:fc:88:72:64:a2:29:f1:c9:d7:e7:f0:
         a2:a7:85:2a:43:40:39:c0:a7:d7:e4:09:22:6a:5b:88:2d:96:
         8e:10:f1:ba:49:87:22:f5:64:35:92:69:d1:a0:9d:7e:af:1a:
         dd:04:ae:8a:70:f3:de:6c:4b:5d:d0:d9:32:c8:13:80:88:a6:
         ee:73:1a:f5:62:b2:ca:62:d6:bb:22:1a:2f:0b:6f:6c:37:09:
         7a:59:b4:25:41:45:1f:95:2e:8d:91:18:83:b9:29:4c:25:db:
         d3:d1:80:25:bd:5a:c5:ce:54:20:25:37:7b:6e:04:ff:b0:54:
         a5:24:c4:66:f6:f3:55:60:26:53:6e:fa:85:6f:7b:7d:5a:71:
         2e:01:bd:31:d9:73:67:8e:fa:23:87:6f:b1:fd:c0:11:12:17:
         ce:fd:de:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----