Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/1/323830343a373131303a383030303a3a2f34382d3438203d3e20323730373634.roa
File:                     323830343a373131303a383030303a3a2f34382d3438203d3e20323730373634.roa (raw, json)
Hash identifier:          uCn3b5/kKAXDlQAb4nzQwe4+yGt4cpxgVGWDnfnny7g=
Subject key identifier:   D3:47:D0:B5:B5:A2:61:DD:EB:61:B6:E8:07:4E:17:D1:1C:1E:14:6F
Certificate issuer:       /CN=6F24DF4A84CC21337AB0CA314C265DC9D5DDA9A0
Certificate serial:       79CCAD0662F50A04E25FB9F8E3FE6438BC600679
Authority key identifier: 6F:24:DF:4A:84:CC:21:33:7A:B0:CA:31:4C:26:5D:C9:D5:DD:A9:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F24DF4A84CC21337AB0CA314C265DC9D5DDA9A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/1/323830343a373131303a383030303a3a2f34382d3438203d3e20323730373634.roa
Signing time:             Thu 04 Apr 2024 18:05:30 +0000
ROA not before:           Thu 04 Apr 2024 18:00:30 +0000
ROA not after:            Thu 03 Apr 2025 18:05:30 +0000
asID:                     270764
IP address blocks:        2804:7110:8000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:cc:ad:06:62:f5:0a:04:e2:5f:b9:f8:e3:fe:64:38:bc:60:06:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F24DF4A84CC21337AB0CA314C265DC9D5DDA9A0
        Validity
            Not Before: Apr  4 18:00:30 2024 GMT
            Not After : Apr  3 18:05:30 2025 GMT
        Subject: CN=D347D0B5B5A261DDEB61B6E8074E17D11C1E146F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:24:7f:57:f8:16:d5:01:0c:ce:95:b0:59:99:
                    d6:28:fb:49:b5:68:16:0e:cf:d4:8f:13:1f:6c:39:
                    6b:d9:96:fe:ce:23:4c:a1:09:b7:17:d2:41:68:51:
                    b1:32:f2:25:e9:80:17:0b:2f:74:0e:3f:76:e6:32:
                    c2:75:93:08:de:ad:5a:66:f3:f6:5b:5d:f8:ce:63:
                    37:1b:2d:aa:8d:19:78:8a:ae:5d:4c:09:d9:ae:c6:
                    69:d0:30:b9:a8:06:24:60:b0:e1:d1:23:a8:78:08:
                    2c:ab:36:bf:d9:46:18:0a:42:59:19:aa:54:f6:e2:
                    e1:75:9d:75:ec:a3:ce:ea:c3:4b:27:33:98:58:5f:
                    8c:ed:af:e1:9b:fc:38:cc:c3:29:86:12:f9:eb:49:
                    fa:22:d6:71:da:d3:71:41:8a:c4:69:f7:5a:a4:a9:
                    e4:a4:bc:5c:e8:05:32:23:5f:bb:b4:d2:58:32:8e:
                    a0:ac:4c:03:0b:91:b5:95:f6:a1:c2:cf:eb:f3:2b:
                    f9:98:f9:d0:00:15:b4:be:5e:91:5a:ea:f1:1d:14:
                    22:17:e5:6b:ae:e3:d3:36:70:92:2d:2f:69:02:b1:
                    42:d4:1d:95:eb:8e:bb:d7:e4:b4:0a:d4:ae:ec:a0:
                    b2:14:b1:5d:7c:e3:4d:99:39:e1:04:f9:4f:5a:6e:
                    ea:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:47:D0:B5:B5:A2:61:DD:EB:61:B6:E8:07:4E:17:D1:1C:1E:14:6F
            X509v3 Authority Key Identifier:
                keyid:6F:24:DF:4A:84:CC:21:33:7A:B0:CA:31:4C:26:5D:C9:D5:DD:A9:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/1/6F24DF4A84CC21337AB0CA314C265DC9D5DDA9A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F24DF4A84CC21337AB0CA314C265DC9D5DDA9A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/1/323830343a373131303a383030303a3a2f34382d3438203d3e20323730373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7110:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:e5:e1:76:e1:d7:d3:b0:d1:79:06:39:5b:ad:52:5d:40:79:
         ef:ac:04:1e:80:11:56:98:5c:c1:bd:29:1b:83:56:84:66:a2:
         58:8e:37:99:05:33:cb:c6:5e:84:da:95:e6:88:25:a3:08:b8:
         81:e5:0c:77:31:80:f9:6e:94:8e:db:73:c8:e5:10:3e:82:fe:
         02:b7:b4:d8:e2:e8:35:f8:5e:e1:9f:57:35:07:39:7e:d3:e6:
         d1:6f:a1:90:f2:81:4e:e9:1e:63:8d:2e:b8:7d:11:18:ad:b8:
         14:04:fa:f3:22:29:cc:99:fb:3d:d7:60:c8:77:45:f9:a0:f6:
         12:73:8d:32:52:c9:e5:16:a1:bc:9a:cf:dc:c4:1e:b0:1c:3c:
         24:36:74:72:a5:17:54:ad:6b:63:35:c8:b8:bb:39:52:30:1b:
         90:c5:7a:03:db:7e:98:13:69:a9:9a:99:c5:69:27:da:23:d8:
         c1:4d:a2:11:e2:3f:68:b2:7b:d3:45:c5:71:ce:9e:f8:8b:d2:
         c1:52:28:86:ae:97:45:e3:63:85:7a:b7:4d:33:9a:6d:99:1a:
         47:44:fc:80:7c:cf:1b:88:d1:0e:2a:58:1d:a3:be:4b:25:5f:
         6f:cb:23:00:01:22:36:31:16:a1:c6:3c:52:e6:28:c3:6d:f0:
         8c:19:64:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----