Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9kcvRxCXa8YweSa3xkWdhPejhZBxh7oUpTiGrUg3rbR5/0/323830343a323136303a3a2f33322d313238203d3e20323634353531.roa
File:                     323830343a323136303a3a2f33322d313238203d3e20323634353531.roa (raw, json)
Hash identifier:          F5PoLNG9Ip0kbaEvrb8VmhncbqMxIE9QDoACHhJaJlg=
Subject key identifier:   26:D0:A8:31:B9:A2:B1:F5:D0:D4:EA:4D:3F:74:8B:D4:65:C3:00:F6
Certificate issuer:       /CN=790C00F8A05FA0D218883534C018ADD7838D0242
Certificate serial:       2FE716EBF0634C2531368F066EC7CD6FC94361ED
Authority key identifier: 79:0C:00:F8:A0:5F:A0:D2:18:88:35:34:C0:18:AD:D7:83:8D:02:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/790C00F8A05FA0D218883534C018ADD7838D0242.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9kcvRxCXa8YweSa3xkWdhPejhZBxh7oUpTiGrUg3rbR5/0/323830343a323136303a3a2f33322d313238203d3e20323634353531.roa
Signing time:             Wed 29 Nov 2023 19:18:01 +0000
ROA not before:           Wed 29 Nov 2023 19:13:01 +0000
ROA not after:            Wed 27 Nov 2024 19:18:01 +0000
asID:                     264551
IP address blocks:        2804:2160::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:e7:16:eb:f0:63:4c:25:31:36:8f:06:6e:c7:cd:6f:c9:43:61:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790C00F8A05FA0D218883534C018ADD7838D0242
        Validity
            Not Before: Nov 29 19:13:01 2023 GMT
            Not After : Nov 27 19:18:01 2024 GMT
        Subject: CN=26D0A831B9A2B1F5D0D4EA4D3F748BD465C300F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:98:19:21:40:84:14:60:58:8c:3f:70:2f:cc:
                    c9:86:fc:d9:98:b5:5d:c6:eb:57:ca:cb:08:13:6d:
                    05:5d:69:03:d9:02:ab:47:29:5e:5b:50:19:31:aa:
                    fb:ed:ba:b8:c9:37:74:f7:e8:e8:d8:1f:94:1f:cd:
                    74:d8:ce:a9:eb:02:a6:1e:0f:ce:8a:a9:d0:8a:08:
                    24:8a:d3:4a:58:10:6d:9f:d4:e0:1c:b1:8f:27:06:
                    01:7e:d1:34:1f:13:b3:70:ec:d5:e4:cb:5a:d2:52:
                    e8:72:22:d3:8e:7b:a3:96:46:25:e6:fc:0f:c7:b3:
                    e9:9e:c4:c2:3d:85:4d:44:ff:aa:b3:80:48:bc:9c:
                    a1:32:8a:24:39:ec:38:e9:c1:cf:37:82:16:80:0c:
                    41:cd:7c:93:92:d7:58:42:a9:34:b4:72:40:9b:4f:
                    c7:b4:20:bb:e4:86:48:f3:08:47:0e:19:97:97:8b:
                    6a:6f:95:51:46:65:a5:ea:5b:e3:2e:82:f6:3b:77:
                    ee:d6:61:45:3b:9d:b1:c6:16:5d:c1:7c:d4:3b:b3:
                    34:d3:72:70:9d:e2:11:36:2a:18:a6:fe:bb:b8:3a:
                    2f:bb:04:ee:51:e7:04:92:87:c2:6e:eb:e3:29:b0:
                    1e:b9:d4:25:e3:e8:b9:fa:10:d8:84:33:25:3d:13:
                    9f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:D0:A8:31:B9:A2:B1:F5:D0:D4:EA:4D:3F:74:8B:D4:65:C3:00:F6
            X509v3 Authority Key Identifier:
                keyid:79:0C:00:F8:A0:5F:A0:D2:18:88:35:34:C0:18:AD:D7:83:8D:02:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9kcvRxCXa8YweSa3xkWdhPejhZBxh7oUpTiGrUg3rbR5/0/790C00F8A05FA0D218883534C018ADD7838D0242.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/790C00F8A05FA0D218883534C018ADD7838D0242.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9kcvRxCXa8YweSa3xkWdhPejhZBxh7oUpTiGrUg3rbR5/0/323830343a323136303a3a2f33322d313238203d3e20323634353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2160::/32

    Signature Algorithm: sha256WithRSAEncryption
         d2:31:00:cf:04:61:df:f3:79:c8:a8:b3:99:a3:3b:57:77:66:
         d7:7f:01:a3:c4:da:26:f1:5c:85:80:5f:43:65:4f:63:f5:45:
         78:e4:9e:af:11:a1:56:ed:28:ac:2a:25:67:c8:8f:9e:8e:83:
         31:7f:cf:03:2e:06:0c:91:24:8d:cb:32:ac:a4:21:24:26:8f:
         5d:ca:46:f7:d9:0a:e9:54:f4:b9:dc:89:35:c9:1d:90:81:54:
         b2:36:fe:59:de:87:99:eb:f0:c8:32:a4:66:ed:b8:64:da:71:
         7a:0d:4a:8b:e7:07:d9:cd:7c:53:fd:c0:b2:ec:e1:72:ae:5d:
         56:e0:7a:21:8a:5f:68:e6:4f:33:cd:31:f5:e7:a7:45:07:6c:
         d3:66:a3:82:d0:c4:af:b4:f3:07:5f:7e:0a:f4:c8:ed:80:a9:
         5c:97:e8:71:bd:f3:13:3d:e8:4f:73:72:77:b6:04:3c:7e:dd:
         d8:67:71:8e:58:74:96:e5:f3:b6:51:f0:8b:44:5a:31:ca:33:
         1d:e7:9b:77:a2:2e:0d:0f:61:12:f2:b2:4c:1f:b5:ac:a8:19:
         3a:fe:47:8e:72:a1:89:d6:74:44:60:3b:4f:15:a6:2d:42:5b:
         41:37:32:b7:31:90:22:61:5d:3d:23:e6:fa:c4:94:df:5d:5d:
         29:2a:c9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----