Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/323830343a35633a3a2f33322d3438203d3e203238323031.roa
File:                     323830343a35633a3a2f33322d3438203d3e203238323031.roa (raw, json)
Hash identifier:          QkrM3y67TdT221qVac6x2KYBwX9FdtH+Obmp8C51bII=
Subject key identifier:   BD:91:7E:FC:0D:EB:61:27:2A:A7:AE:C2:75:B4:66:4E:3A:98:34:51
Certificate issuer:       /CN=27209C6DF15738819D919D908E37AC157E391505
Certificate serial:       31F66E7C1C55135E6CE007A487D351E288625BC8
Authority key identifier: 27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/323830343a35633a3a2f33322d3438203d3e203238323031.roa
Signing time:             Wed 10 Apr 2024 12:30:44 +0000
ROA not before:           Wed 10 Apr 2024 12:25:44 +0000
ROA not after:            Wed 09 Apr 2025 12:30:44 +0000
asID:                     28201
IP address blocks:        2804:5c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:f6:6e:7c:1c:55:13:5e:6c:e0:07:a4:87:d3:51:e2:88:62:5b:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27209C6DF15738819D919D908E37AC157E391505
        Validity
            Not Before: Apr 10 12:25:44 2024 GMT
            Not After : Apr  9 12:30:44 2025 GMT
        Subject: CN=BD917EFC0DEB61272AA7AEC275B4664E3A983451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d6:59:6e:dd:ec:4e:67:b0:31:bf:6b:ce:1f:
                    dc:3e:53:96:8a:9b:51:11:54:84:a3:f0:1a:10:23:
                    f9:37:da:e7:a8:d2:2a:e8:da:70:4c:93:b6:e1:a4:
                    9e:a8:bc:a9:11:aa:bf:92:76:9e:37:77:33:0c:aa:
                    81:8e:36:7f:a7:fc:91:a5:9c:3a:f6:d6:04:a1:13:
                    b3:78:bb:7e:3d:65:33:19:d0:1f:15:05:a1:29:aa:
                    ed:9a:31:f7:3d:da:6a:7a:0a:4a:29:f6:3a:2d:c8:
                    a2:b3:20:2f:d6:64:10:c5:03:b4:0e:a1:02:c1:e7:
                    38:8c:9e:da:7b:32:ee:0a:29:f9:3e:c4:d2:4f:be:
                    2b:bc:23:32:7f:c3:cc:ff:26:d3:24:ea:8b:52:69:
                    9f:1b:b5:79:e5:0b:62:be:0d:06:5f:ad:21:61:09:
                    3d:60:f9:a3:f1:e9:ca:8a:a0:75:b5:3c:10:72:0f:
                    00:2f:98:62:2b:43:01:35:a6:be:1a:38:b4:9f:ed:
                    36:1d:e7:9c:9b:a2:af:bc:7d:88:2d:23:6e:24:32:
                    a7:42:34:1d:d1:5d:b5:8e:3f:b6:7a:c2:38:4d:3b:
                    55:44:eb:bd:02:ee:5b:39:74:9c:7e:09:bd:5c:4a:
                    2b:9c:a7:68:7f:2d:08:fa:80:36:62:e0:e4:8e:9e:
                    2c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:91:7E:FC:0D:EB:61:27:2A:A7:AE:C2:75:B4:66:4E:3A:98:34:51
            X509v3 Authority Key Identifier:
                keyid:27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/27209C6DF15738819D919D908E37AC157E391505.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/323830343a35633a3a2f33322d3438203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5c::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:5b:4b:56:a5:96:10:c8:9f:b3:0c:1b:2a:b4:a9:77:40:52:
         a4:1d:4f:8b:75:92:27:77:70:2f:d8:b6:76:d1:99:7f:ff:19:
         5d:23:d0:6e:ae:04:99:b8:6e:95:44:31:c8:99:77:df:5f:3b:
         0f:11:91:4b:59:50:5f:1b:a4:29:c8:f7:f0:a6:55:6f:cf:a0:
         e1:90:b4:d5:e7:34:5f:85:d8:ce:e5:5c:58:bd:0d:01:fc:1f:
         c2:7a:69:e2:db:19:8b:82:ac:0e:c2:2f:9d:0f:04:44:d5:59:
         86:ff:9a:d7:5a:fe:05:f1:d4:de:8c:c1:a5:91:b5:fa:63:b7:
         78:cb:2e:78:8f:09:22:2e:d7:ad:4e:39:c0:9d:70:df:4d:99:
         a3:ef:79:8a:a7:d5:83:12:ec:b2:55:a6:25:37:28:b9:61:29:
         f4:b9:bb:a4:9a:2a:a2:9d:9a:3d:71:9a:af:1f:42:e0:f1:13:
         d3:03:38:55:66:33:4f:74:30:9a:8f:39:43:2c:52:6b:a4:bf:
         b1:d9:d6:42:f5:d5:66:84:b0:25:5e:0b:cb:9e:19:e3:29:b4:
         55:cc:77:ef:f6:fe:4a:84:0d:b7:2a:85:e0:a1:81:a4:97:df:
         ee:bc:b3:3d:69:c3:d4:d0:31:da:fc:3d:0b:02:bc:d3:dd:ea:
         66:25:3f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----