Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/323830343a326663383a653030303a3a2f33352d3335203d3e20323632363131.roa
File:                     323830343a326663383a653030303a3a2f33352d3335203d3e20323632363131.roa (raw, json)
Hash identifier:          SefE4LHbQnoYl/p5/vXPZbpiKqZH1KN0hDp8tP19EAs=
Subject key identifier:   0F:FF:3D:C7:98:C1:B8:14:A4:68:BC:FE:A0:74:4A:E2:20:32:D7:D1
Certificate issuer:       /CN=ADAED9008F24F5B61987180BB1C1D68810BA17CC
Certificate serial:       2A647357B935EF14805B6DC727875A0A958EDB1D
Authority key identifier: AD:AE:D9:00:8F:24:F5:B6:19:87:18:0B:B1:C1:D6:88:10:BA:17:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAED9008F24F5B61987180BB1C1D68810BA17CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/323830343a326663383a653030303a3a2f33352d3335203d3e20323632363131.roa
Signing time:             Fri 11 Aug 2023 11:30:01 +0000
ROA not before:           Fri 11 Aug 2023 11:25:01 +0000
ROA not after:            Fri 09 Aug 2024 11:30:01 +0000
asID:                     262611
IP address blocks:        2804:2fc8:e000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:64:73:57:b9:35:ef:14:80:5b:6d:c7:27:87:5a:0a:95:8e:db:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADAED9008F24F5B61987180BB1C1D68810BA17CC
        Validity
            Not Before: Aug 11 11:25:01 2023 GMT
            Not After : Aug  9 11:30:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f8:55:8a:87:3c:0b:1c:a9:9c:1c:a9:ed:0d:
                    5e:4a:2e:a3:f8:a4:79:23:3f:a9:20:c0:61:9f:61:
                    09:43:e6:03:79:dc:f8:1f:3e:69:27:94:30:59:3b:
                    47:4a:a9:dc:16:66:89:21:f2:1d:14:54:e9:48:bb:
                    c6:96:db:2e:17:ca:6b:c9:6b:e4:fd:02:b0:28:85:
                    c1:09:43:c0:23:2e:38:95:9e:d5:3d:29:54:32:14:
                    e9:3f:db:e2:64:49:7d:5e:fc:d3:a5:36:f2:ec:16:
                    9d:67:ba:8d:94:78:c7:ba:af:19:96:ac:6d:bb:d7:
                    d9:4b:28:03:e9:db:7e:b2:c1:40:88:b9:90:e0:97:
                    e8:25:33:b8:52:e8:ab:19:ce:ce:be:60:4b:69:e3:
                    39:13:56:0c:a9:f6:2b:01:26:52:f1:11:58:15:a3:
                    8f:ac:b0:bd:db:2c:4e:0f:9a:25:26:20:50:d3:1b:
                    a1:67:09:3c:28:d6:d2:00:ae:e4:1e:bb:08:ec:f5:
                    d6:f0:58:7d:97:20:33:40:a1:fa:43:77:6e:9b:ad:
                    e4:a9:15:a8:5d:f9:f2:d2:c7:75:08:cc:2f:83:a9:
                    99:d9:b3:18:14:06:ef:0e:09:77:7b:ea:14:94:ca:
                    fc:a7:2b:71:d4:2e:c2:6a:7e:01:9d:85:f2:47:23:
                    de:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:FF:3D:C7:98:C1:B8:14:A4:68:BC:FE:A0:74:4A:E2:20:32:D7:D1
            X509v3 Authority Key Identifier:
                keyid:AD:AE:D9:00:8F:24:F5:B6:19:87:18:0B:B1:C1:D6:88:10:BA:17:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/ADAED9008F24F5B61987180BB1C1D68810BA17CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAED9008F24F5B61987180BB1C1D68810BA17CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/323830343a326663383a653030303a3a2f33352d3335203d3e20323632363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2fc8:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         ab:8a:64:fe:16:11:91:44:b2:c0:08:b7:df:9c:16:15:d1:f9:
         21:f3:f1:7f:57:27:37:d8:df:5a:e4:79:be:19:3c:6c:b2:2b:
         a0:f8:5e:7a:2e:39:1e:e6:56:44:04:cd:37:64:3e:e8:ee:d4:
         e9:96:bd:61:2d:d9:fd:ea:33:44:0e:f7:7f:d6:f5:58:5b:2e:
         e8:a1:bf:b7:2f:50:78:46:64:17:79:ea:b7:bd:e2:2f:b9:53:
         5d:cd:9f:60:26:54:21:79:88:3e:8e:1b:e9:53:69:4b:3e:e4:
         6a:77:49:9c:15:2a:4c:c5:35:ac:24:80:2e:0a:b9:fd:61:7d:
         dc:ab:45:e4:0d:4a:b0:7d:6f:bb:32:1a:b9:72:d2:bf:09:c3:
         27:d2:6f:26:ee:99:21:6f:85:68:dc:63:11:1c:a7:56:df:d4:
         59:a3:a1:52:2e:33:b0:22:3e:da:db:55:9e:ba:a3:9e:72:d5:
         7d:63:06:33:a0:80:91:8d:2e:a5:aa:c5:38:42:54:c4:6e:6a:
         45:8e:ea:ca:1d:32:4b:d6:f9:5e:92:4d:6b:2b:39:06:9c:ef:
         30:84:be:cc:86:a4:67:4c:d0:21:6d:a5:77:3e:09:7f:3a:93:
         76:10:ef:e5:4b:8c:78:20:e5:10:bb:ee:ac:c3:77:86:f8:d4:
         d0:f3:b8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----