Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BEvjLFZCoTqEfWLBefqc8PuiBKmXXA81sJ6XW5soCe5o/0/323830343a376462303a3a2f33322d3332203d3e20323731353736.roa
File:                     323830343a376462303a3a2f33322d3332203d3e20323731353736.roa (raw, json)
Hash identifier:          zcMHBx5ZX8ugAuzsLyNmzVLh9JFndEBaIlLtIeSvCQ8=
Subject key identifier:   C6:3D:F0:26:24:E4:4D:E7:EE:9F:46:F5:82:BB:09:D7:6E:D3:C6:72
Certificate issuer:       /CN=466B969A1FD549298A2898D05A98BECA987CF94B
Certificate serial:       5C2C07E44E14450EDBC3F00FC3DF46FE442BF2C1
Authority key identifier: 46:6B:96:9A:1F:D5:49:29:8A:28:98:D0:5A:98:BE:CA:98:7C:F9:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/466B969A1FD549298A2898D05A98BECA987CF94B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BEvjLFZCoTqEfWLBefqc8PuiBKmXXA81sJ6XW5soCe5o/0/323830343a376462303a3a2f33322d3332203d3e20323731353736.roa
Signing time:             Tue 05 Sep 2023 16:26:57 +0000
ROA not before:           Tue 05 Sep 2023 16:21:57 +0000
ROA not after:            Tue 03 Sep 2024 16:26:57 +0000
asID:                     271576
IP address blocks:        2804:7db0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:2c:07:e4:4e:14:45:0e:db:c3:f0:0f:c3:df:46:fe:44:2b:f2:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=466B969A1FD549298A2898D05A98BECA987CF94B
        Validity
            Not Before: Sep  5 16:21:57 2023 GMT
            Not After : Sep  3 16:26:57 2024 GMT
        Subject: CN=C63DF02624E44DE7EE9F46F582BB09D76ED3C672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:73:7d:16:e4:0a:9e:c6:4c:4c:81:ae:c6:1e:
                    12:b3:9c:ce:3c:4a:47:92:58:db:74:8d:48:53:94:
                    5a:92:aa:96:3e:78:17:c4:49:7b:25:10:42:e2:d9:
                    8c:f0:66:5a:d5:a8:40:99:70:cb:94:63:17:17:cd:
                    cd:91:ac:90:90:0c:f3:15:34:00:f9:3e:26:ff:cf:
                    28:91:8c:ef:db:fc:a6:c4:9a:79:04:3f:4d:d8:0b:
                    73:ce:0f:85:76:a1:91:48:9d:5d:de:1b:02:19:65:
                    68:70:74:d8:45:e9:eb:e3:61:4f:c3:7a:34:f6:23:
                    93:2e:69:e0:6f:39:02:b8:04:04:55:c0:9a:4f:d4:
                    b6:f2:fe:34:fd:df:89:2c:05:ac:04:2f:ec:6e:37:
                    80:9b:f7:18:04:08:2b:3a:51:58:3c:e3:18:f1:8c:
                    55:de:8a:65:14:f9:be:6e:24:7b:92:3f:17:99:90:
                    9c:10:cb:4a:7a:5c:96:2f:0f:ec:0c:e9:05:68:a8:
                    50:54:58:91:1b:3e:48:26:62:28:c5:bc:56:4c:e9:
                    fb:b8:7e:d3:11:d8:79:c1:30:ce:2b:3c:0f:9c:f3:
                    3d:5c:8d:08:22:5b:db:e6:0d:8d:f4:63:06:35:ed:
                    7a:ca:dc:d4:2a:ff:40:d2:9d:ca:f9:3d:4d:42:99:
                    91:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:3D:F0:26:24:E4:4D:E7:EE:9F:46:F5:82:BB:09:D7:6E:D3:C6:72
            X509v3 Authority Key Identifier:
                keyid:46:6B:96:9A:1F:D5:49:29:8A:28:98:D0:5A:98:BE:CA:98:7C:F9:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BEvjLFZCoTqEfWLBefqc8PuiBKmXXA81sJ6XW5soCe5o/0/466B969A1FD549298A2898D05A98BECA987CF94B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/466B969A1FD549298A2898D05A98BECA987CF94B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BEvjLFZCoTqEfWLBefqc8PuiBKmXXA81sJ6XW5soCe5o/0/323830343a376462303a3a2f33322d3332203d3e20323731353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7db0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:0e:f9:a5:6b:1b:4e:55:ce:be:60:dd:8b:2a:63:e2:25:04:
         47:1f:08:3c:b0:37:3a:39:fc:13:d6:bc:b1:01:42:b5:86:03:
         45:d0:c0:dc:bb:db:48:22:5e:1d:66:09:b0:37:04:97:21:b3:
         0a:21:10:7c:84:85:f1:22:54:86:f9:73:8a:3d:43:f6:10:6c:
         99:37:48:36:df:39:ca:42:e4:73:da:1b:1c:f7:8f:86:e8:9b:
         49:3d:93:08:ce:56:29:c4:6c:4d:04:df:ab:5c:4b:33:c3:29:
         c5:d3:8d:7d:bb:50:6b:ea:5f:14:f9:f6:d0:5e:66:ca:e9:8c:
         dc:07:3e:cc:e7:f6:8f:c4:55:4a:71:9f:eb:c8:e8:1c:3a:a0:
         a9:53:f4:99:02:f6:b2:8a:d5:26:3d:a5:34:56:1c:a8:33:70:
         a6:cd:b9:8c:33:a2:eb:1d:2b:db:f3:91:13:cf:79:1b:ff:d4:
         f7:20:cb:07:8c:69:24:28:5b:ab:46:44:72:ef:ca:86:8e:bc:
         58:16:fd:a4:40:c6:8b:ad:78:8d:92:07:a6:9b:b5:d4:86:7b:
         c7:3a:38:c9:60:a9:2d:61:c0:96:d9:12:1d:d1:92:3b:c4:24:
         7f:34:24:b7:cf:35:d3:65:35:17:1f:d4:30:df:18:2d:22:b5:
         14:e0:ae:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----