Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/323830343a3266303a3a2f33322d3438203d3e203533323336.roa
File:                     323830343a3266303a3a2f33322d3438203d3e203533323336.roa (raw, json)
Hash identifier:          ok40Vj4s1qYgc+Q37cc43h8JYPuPa92HLAbGm7b76n0=
Subject key identifier:   D8:88:71:5B:AE:C3:E3:CD:D2:25:3E:4F:94:7F:52:C1:E4:EE:C1:9B
Certificate issuer:       /CN=EE1F2CBFD1CF93D6FA0078818FBF753815C16C09
Certificate serial:       6CBAF68E5278C22E3C3DDC8C3F59236E19499911
Authority key identifier: EE:1F:2C:BF:D1:CF:93:D6:FA:00:78:81:8F:BF:75:38:15:C1:6C:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE1F2CBFD1CF93D6FA0078818FBF753815C16C09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/323830343a3266303a3a2f33322d3438203d3e203533323336.roa
Signing time:             Tue 08 Aug 2023 19:00:00 +0000
ROA not before:           Tue 08 Aug 2023 18:55:00 +0000
ROA not after:            Tue 06 Aug 2024 19:00:00 +0000
asID:                     53236
IP address blocks:        2804:2f0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:ba:f6:8e:52:78:c2:2e:3c:3d:dc:8c:3f:59:23:6e:19:49:99:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE1F2CBFD1CF93D6FA0078818FBF753815C16C09
        Validity
            Not Before: Aug  8 18:55:00 2023 GMT
            Not After : Aug  6 19:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:65:e1:7a:ee:5d:6f:e2:45:9b:6e:ca:5c:5c:
                    11:d9:c5:5c:8b:7e:3b:a0:26:6d:5e:67:92:2c:64:
                    c2:2e:42:fc:9e:08:e7:9b:18:02:96:93:ee:08:df:
                    4c:ea:46:81:cc:42:79:ac:1f:5d:ea:81:1a:fb:73:
                    d6:d4:37:2c:b1:93:f5:1b:26:a2:3d:79:2a:0f:76:
                    97:b7:ae:be:55:92:81:7e:dc:49:9d:49:92:3e:e1:
                    32:af:18:a9:23:be:cc:a5:e5:fd:63:37:f4:c7:a7:
                    fb:1b:5a:3c:ab:0b:7f:d3:1e:0e:03:e4:d2:80:11:
                    1f:4b:06:e0:e9:15:36:bb:10:3c:75:6a:5f:04:6c:
                    48:20:e0:fa:61:5d:ae:f6:ff:94:0e:32:c1:08:da:
                    87:6c:dc:9b:50:ae:61:eb:ce:b7:2c:c1:34:a1:04:
                    46:f9:c8:3e:2f:81:31:51:23:46:50:6e:5a:f5:a0:
                    86:3f:c7:72:96:7a:84:46:c8:e9:8d:cb:e8:5b:2e:
                    d2:39:b7:9f:7c:33:24:ee:67:34:eb:02:4b:5a:13:
                    42:bf:15:6b:64:c4:66:fe:b2:62:35:c1:e6:eb:61:
                    f2:5a:7e:2a:4b:23:9f:47:6d:06:26:74:5c:7f:3e:
                    23:54:cc:ff:0e:9b:0c:0b:a3:47:d0:75:70:8c:f5:
                    e2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:88:71:5B:AE:C3:E3:CD:D2:25:3E:4F:94:7F:52:C1:E4:EE:C1:9B
            X509v3 Authority Key Identifier:
                keyid:EE:1F:2C:BF:D1:CF:93:D6:FA:00:78:81:8F:BF:75:38:15:C1:6C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/EE1F2CBFD1CF93D6FA0078818FBF753815C16C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE1F2CBFD1CF93D6FA0078818FBF753815C16C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/323830343a3266303a3a2f33322d3438203d3e203533323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:65:77:38:ff:bb:78:65:e1:af:a0:0f:12:29:7e:a0:f9:61:
         51:dd:f4:5c:5c:27:1f:b4:cc:43:ff:a3:09:05:63:db:07:9b:
         a0:9a:74:c7:6a:c1:0b:c1:da:28:8b:80:0e:aa:cd:21:39:ae:
         55:fe:05:a5:9b:fa:5b:0a:89:d9:50:41:68:39:2f:44:af:2d:
         8b:4d:a8:26:67:da:5a:2a:1c:a9:ee:6f:dc:c8:3a:c6:ad:04:
         2d:3f:f7:ff:c9:c3:20:c4:ce:53:c2:a5:39:0d:fc:88:e0:0c:
         dc:6e:48:8b:89:0c:55:7b:c1:64:94:63:76:f6:69:93:7f:f6:
         de:43:7c:d1:d2:98:4a:37:6d:ba:44:09:4b:61:55:7a:fe:0e:
         2d:3c:b8:11:71:a4:45:d8:17:30:94:7e:a7:21:b2:a7:29:42:
         7f:92:47:e0:d6:9b:9e:1c:f4:38:7e:7d:79:87:64:94:e4:df:
         f0:24:5e:0e:73:a9:43:17:5b:f5:45:0d:da:e1:b1:ee:0e:21:
         58:c3:f5:eb:7f:91:96:ef:6d:e3:13:48:ce:8a:9e:24:87:c7:
         90:89:f3:0f:60:d1:27:64:88:f3:19:94:ea:f4:9f:ff:e8:9f:
         72:e4:f7:47:20:e9:73:fc:13:e2:8c:e5:24:74:44:0a:12:8d:
         22:3e:74:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----