Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AT3ZXcRvgWYrxsQgvJNExBdUjmuJDENdh4Xo5XJs6SFy/0/323830343a333163383a3a2f33322d3334203d3e20323635303337.roa
File:                     323830343a333163383a3a2f33322d3334203d3e20323635303337.roa (raw, json)
Hash identifier:          YTGkbt1AuFqNSL/IJBZKt7uFHvuZm4khGXqzQaB4Sgg=
Subject key identifier:   F3:06:F3:07:F1:8E:72:BB:42:09:63:C9:33:99:59:9B:DE:AE:9B:88
Certificate issuer:       /CN=6E4BE4A4A4116449B4E38EF09B2BE4376EBFF688
Certificate serial:       6851521229263E6C0894ED1995A74269DC358942
Authority key identifier: 6E:4B:E4:A4:A4:11:64:49:B4:E3:8E:F0:9B:2B:E4:37:6E:BF:F6:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6E4BE4A4A4116449B4E38EF09B2BE4376EBFF688.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AT3ZXcRvgWYrxsQgvJNExBdUjmuJDENdh4Xo5XJs6SFy/0/323830343a333163383a3a2f33322d3334203d3e20323635303337.roa
Signing time:             Wed 01 Nov 2023 16:00:00 +0000
ROA not before:           Wed 01 Nov 2023 15:55:00 +0000
ROA not after:            Wed 30 Oct 2024 16:00:00 +0000
asID:                     265037
IP address blocks:        2804:31c8::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:51:52:12:29:26:3e:6c:08:94:ed:19:95:a7:42:69:dc:35:89:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E4BE4A4A4116449B4E38EF09B2BE4376EBFF688
        Validity
            Not Before: Nov  1 15:55:00 2023 GMT
            Not After : Oct 30 16:00:00 2024 GMT
        Subject: CN=3082010A0282010100BA12568F6DC067EE3FFE460A8F8D899B2696B7C2910E89D88B69157A7A49069056C93174D4681933DECCC7BB5204A9848DE2DFCA42B07A3DB705F420E9E6BE276367538CD6F29A08A6C6A7DD21AEBC750E8EB3BAFA8D4D867798B687A7DE87EBD4C0E29A6080C828075B69934F17E6C8371719A1290F22EA466692F8F499E591B6D140A6153DE335BD7E6229735AA2FDB79EE239B8EFDCAAC76847909744B761E68E27919D1C8ACD52799476AF9C370D5F9778A6AB516B634FEF84B68360D08B4CF37B68B37CE57A0772E5412565A8C4B69534A8A472F0FA155F18560B2C18DE9EBD1470D073808281B40117E12CB97DDB3CE2B076DFDAFB722A31300FB1510B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:12:56:8f:6d:c0:67:ee:3f:fe:46:0a:8f:8d:
                    89:9b:26:96:b7:c2:91:0e:89:d8:8b:69:15:7a:7a:
                    49:06:90:56:c9:31:74:d4:68:19:33:de:cc:c7:bb:
                    52:04:a9:84:8d:e2:df:ca:42:b0:7a:3d:b7:05:f4:
                    20:e9:e6:be:27:63:67:53:8c:d6:f2:9a:08:a6:c6:
                    a7:dd:21:ae:bc:75:0e:8e:b3:ba:fa:8d:4d:86:77:
                    98:b6:87:a7:de:87:eb:d4:c0:e2:9a:60:80:c8:28:
                    07:5b:69:93:4f:17:e6:c8:37:17:19:a1:29:0f:22:
                    ea:46:66:92:f8:f4:99:e5:91:b6:d1:40:a6:15:3d:
                    e3:35:bd:7e:62:29:73:5a:a2:fd:b7:9e:e2:39:b8:
                    ef:dc:aa:c7:68:47:90:97:44:b7:61:e6:8e:27:91:
                    9d:1c:8a:cd:52:79:94:76:af:9c:37:0d:5f:97:78:
                    a6:ab:51:6b:63:4f:ef:84:b6:83:60:d0:8b:4c:f3:
                    7b:68:b3:7c:e5:7a:07:72:e5:41:25:65:a8:c4:b6:
                    95:34:a8:a4:72:f0:fa:15:5f:18:56:0b:2c:18:de:
                    9e:bd:14:70:d0:73:80:82:81:b4:01:17:e1:2c:b9:
                    7d:db:3c:e2:b0:76:df:da:fb:72:2a:31:30:0f:b1:
                    51:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:06:F3:07:F1:8E:72:BB:42:09:63:C9:33:99:59:9B:DE:AE:9B:88
            X509v3 Authority Key Identifier:
                keyid:6E:4B:E4:A4:A4:11:64:49:B4:E3:8E:F0:9B:2B:E4:37:6E:BF:F6:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AT3ZXcRvgWYrxsQgvJNExBdUjmuJDENdh4Xo5XJs6SFy/0/6E4BE4A4A4116449B4E38EF09B2BE4376EBFF688.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6E4BE4A4A4116449B4E38EF09B2BE4376EBFF688.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AT3ZXcRvgWYrxsQgvJNExBdUjmuJDENdh4Xo5XJs6SFy/0/323830343a333163383a3a2f33322d3334203d3e20323635303337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:31c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:12:2c:2e:b8:47:4d:ee:ed:4c:a3:de:bb:c0:70:16:3e:1c:
         c9:e7:c6:18:ed:68:14:6d:fe:57:d4:b0:0f:b9:c9:f5:e7:d6:
         b8:78:0d:c6:07:9a:51:3b:fe:cc:17:f6:5a:0b:da:43:ce:f6:
         96:01:d3:11:e0:84:c7:91:f5:55:a0:df:e7:6c:30:e9:a3:ce:
         20:f6:67:af:28:e2:97:23:2a:34:57:b9:24:00:f4:3f:2e:80:
         a1:84:cd:c9:90:c5:39:14:18:8f:2f:de:70:fd:2d:9f:34:89:
         7b:87:0d:db:e8:aa:7e:2f:d2:31:c2:6b:41:7c:1e:e4:d0:60:
         b3:b4:57:02:84:23:8e:d0:7f:e5:45:90:97:9c:5f:bf:9a:a5:
         81:ed:14:96:1a:20:cd:68:c2:38:ce:5f:33:2d:60:a8:11:f8:
         f1:0e:cb:0f:45:56:64:6c:65:c0:9d:6e:8a:67:bc:fc:fb:04:
         57:fa:ca:4c:f4:9b:e2:09:0c:94:08:45:e3:95:ca:be:ca:72:
         53:8f:c1:f7:91:f3:c5:62:c0:df:f8:3a:0e:c7:1d:3b:44:5d:
         8e:be:9f:e2:f4:7a:50:9b:d5:ab:a7:e2:9a:5f:ac:31:bb:40:
         c1:1c:88:5f:b3:91:b1:c8:2b:c7:24:dc:8c:00:9c:26:b2:07:
         60:22:ea:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----