Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BMAfX3sT3R6u9KopiN5DGjdQhR5Crkb5SL2eaTTS4cK1/0/323830343a373164633a3a2f33322d3332203d3e20323730383136.roa
File:                     323830343a373164633a3a2f33322d3332203d3e20323730383136.roa (raw, json)
Hash identifier:          huEgac9tSM1ae1PQzzxAVJGg8vlFVs292xkJx6SiskQ=
Subject key identifier:   89:25:07:60:EB:A9:93:81:6A:30:16:8F:7C:0C:93:AA:95:AA:A2:B4
Certificate issuer:       /CN=6C51CF59AF0C58F09EB57B98495B6A109E920308
Certificate serial:       0D9373D50B667D7545FCB56611C194C9BB47FCDE
Authority key identifier: 6C:51:CF:59:AF:0C:58:F0:9E:B5:7B:98:49:5B:6A:10:9E:92:03:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6C51CF59AF0C58F09EB57B98495B6A109E920308.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BMAfX3sT3R6u9KopiN5DGjdQhR5Crkb5SL2eaTTS4cK1/0/323830343a373164633a3a2f33322d3332203d3e20323730383136.roa
Signing time:             Thu 25 May 2023 18:09:37 +0000
ROA not before:           Thu 25 May 2023 18:04:37 +0000
ROA not after:            Thu 23 May 2024 18:09:37 +0000
asID:                     270816
IP address blocks:        2804:71dc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:93:73:d5:0b:66:7d:75:45:fc:b5:66:11:c1:94:c9:bb:47:fc:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C51CF59AF0C58F09EB57B98495B6A109E920308
        Validity
            Not Before: May 25 18:04:37 2023 GMT
            Not After : May 23 18:09:37 2024 GMT
        Subject: CN=89250760EBA993816A30168F7C0C93AA95AAA2B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a3:0f:4a:3f:c0:52:35:c6:b7:db:e6:be:e6:
                    e5:16:cf:52:b6:13:4b:fa:73:87:3f:ec:3e:d8:b9:
                    32:74:ec:f9:1d:34:1d:d7:32:4c:9c:23:04:29:25:
                    7d:5a:b2:1b:3f:7d:99:34:a3:1c:ef:54:d5:5e:90:
                    a4:f6:fa:b8:3d:e6:9d:9f:00:25:a1:28:5c:c7:5b:
                    e6:84:28:d4:cd:7c:5f:13:6d:f6:d5:c2:63:03:21:
                    1c:c0:e0:1f:41:19:8a:0a:90:c0:f6:a7:7f:ee:4e:
                    c7:74:f1:ab:21:d2:7c:fd:bc:a3:a4:4f:3b:16:8b:
                    d3:e7:84:27:6c:c3:e2:00:06:66:55:09:d6:dc:2e:
                    77:e9:c9:d3:95:b0:fe:be:b2:21:67:92:7b:dd:89:
                    f4:61:a2:4e:7b:f8:11:06:0c:a8:16:de:bb:75:5d:
                    f2:17:72:65:97:65:e5:90:8f:97:00:67:85:d4:64:
                    12:c1:2f:13:e9:78:a9:d6:00:ae:f9:fc:78:de:da:
                    c5:a6:77:d2:53:05:9d:b4:b8:9b:37:b6:5c:06:c0:
                    f4:b4:f9:a2:a0:41:a7:06:bc:46:30:5d:34:6d:24:
                    5e:1c:ed:4e:d1:fb:c1:7f:cb:4e:e7:4c:59:31:5c:
                    d3:ca:b0:43:7e:dc:b7:1c:4a:8f:4f:14:da:42:b9:
                    c3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:25:07:60:EB:A9:93:81:6A:30:16:8F:7C:0C:93:AA:95:AA:A2:B4
            X509v3 Authority Key Identifier:
                keyid:6C:51:CF:59:AF:0C:58:F0:9E:B5:7B:98:49:5B:6A:10:9E:92:03:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BMAfX3sT3R6u9KopiN5DGjdQhR5Crkb5SL2eaTTS4cK1/0/6C51CF59AF0C58F09EB57B98495B6A109E920308.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6C51CF59AF0C58F09EB57B98495B6A109E920308.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMAfX3sT3R6u9KopiN5DGjdQhR5Crkb5SL2eaTTS4cK1/0/323830343a373164633a3a2f33322d3332203d3e20323730383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:71dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:a8:45:dd:2e:4f:e3:ce:09:06:1e:f5:d7:47:39:d4:e2:4a:
         64:c6:60:c3:82:00:f9:dd:45:4d:f9:6f:7e:fc:0f:d8:be:e1:
         9e:7a:60:47:ff:d1:ca:5f:bb:dd:5d:24:3f:7f:63:bf:d5:05:
         e7:6a:95:94:27:e2:f1:ea:7d:a1:27:9d:12:1e:68:7b:fd:92:
         f7:03:e1:ef:25:ed:0e:f6:87:67:56:06:c8:8c:ce:75:81:77:
         2c:98:c9:ec:0e:6c:40:f3:09:95:8f:3b:cd:71:69:7d:16:9c:
         58:dd:11:39:82:a9:f6:93:fa:84:eb:5b:66:82:ad:12:86:e4:
         9e:01:04:89:f2:35:b5:bc:54:5c:f0:7e:bc:8a:a3:23:78:19:
         81:9f:1c:79:89:c1:22:6f:c8:31:b8:fe:d4:de:8a:2d:91:b2:
         34:73:bc:24:cb:8a:10:7f:0b:4e:08:d9:2b:85:e0:37:92:4b:
         99:ba:d2:8e:26:5d:c2:0d:1e:9a:72:b1:5f:00:b0:40:2b:75:
         8a:bd:36:8a:f5:21:d0:b9:c3:8f:32:0e:0a:14:95:be:9a:40:
         80:78:e9:fe:d7:47:c6:29:20:25:45:05:c9:d5:bf:62:8e:c5:
         4d:f3:52:55:d1:d0:cf:85:09:fa:ee:a5:c2:93:8a:f2:8b:ce:
         b5:dd:05:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----