Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/1/323830343a326636383a3a2f33322d3438203d3e20323634383839.roa
File:                     323830343a326636383a3a2f33322d3438203d3e20323634383839.roa (raw, json)
Hash identifier:          hor4uw0fcabwwjSrHIi0HtAzqRnqY1+bdU76oR2nUvQ=
Subject key identifier:   61:ED:B1:54:4A:D7:04:88:AF:FA:83:C1:59:4C:A5:8C:7A:88:86:31
Certificate issuer:       /CN=6B1752AA3446916E5297A6E09C7C08107A973A4C
Certificate serial:       61AEA10A25364EDC7B71D5E339C32B943723C8CC
Authority key identifier: 6B:17:52:AA:34:46:91:6E:52:97:A6:E0:9C:7C:08:10:7A:97:3A:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B1752AA3446916E5297A6E09C7C08107A973A4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/1/323830343a326636383a3a2f33322d3438203d3e20323634383839.roa
Signing time:             Thu 04 Apr 2024 16:01:40 +0000
ROA not before:           Thu 04 Apr 2024 15:56:40 +0000
ROA not after:            Thu 03 Apr 2025 16:01:40 +0000
asID:                     264889
IP address blocks:        2804:2f68::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ae:a1:0a:25:36:4e:dc:7b:71:d5:e3:39:c3:2b:94:37:23:c8:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B1752AA3446916E5297A6E09C7C08107A973A4C
        Validity
            Not Before: Apr  4 15:56:40 2024 GMT
            Not After : Apr  3 16:01:40 2025 GMT
        Subject: CN=61EDB1544AD70488AFFA83C1594CA58C7A888631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:86:dd:39:fd:cb:cd:6c:bc:f7:dd:3f:f1:cd:
                    81:8c:99:44:83:cc:ac:bd:17:64:34:f4:f3:99:1e:
                    44:81:2e:30:98:98:f3:a6:6f:bb:53:dc:e2:5a:8d:
                    1f:3b:a7:ab:f6:a3:f4:29:2d:87:92:6a:c9:66:1f:
                    c9:99:df:16:37:1c:01:8c:88:f7:ad:68:81:61:c8:
                    6c:25:cb:4e:fa:51:16:aa:13:72:f0:be:b6:9b:d5:
                    d2:02:96:00:14:eb:39:c8:ed:4c:7d:5a:65:db:3c:
                    38:60:2f:21:db:aa:48:5c:98:25:ec:bd:b1:9e:e8:
                    db:cd:53:46:07:82:af:bb:e0:c0:23:b4:31:02:b4:
                    40:f8:7e:62:cf:70:74:48:61:bb:55:aa:16:33:86:
                    22:2b:19:cf:ed:a6:f9:07:79:d6:13:d8:76:e7:d1:
                    02:f4:25:5a:89:8d:10:d1:f5:10:d6:74:d7:dc:47:
                    f4:54:f6:b1:b5:0d:d5:c4:d6:52:17:10:4c:dd:f2:
                    a1:a3:b3:1a:05:e8:7f:29:77:db:d4:91:d7:27:b5:
                    e5:ff:2e:8f:8a:6e:69:74:05:f7:87:56:c5:f9:52:
                    a5:e8:ab:9a:23:ce:97:7d:96:0f:40:48:45:ad:bf:
                    65:4b:41:12:c3:e9:2b:ea:d9:55:b6:5c:c6:5a:ee:
                    f9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:ED:B1:54:4A:D7:04:88:AF:FA:83:C1:59:4C:A5:8C:7A:88:86:31
            X509v3 Authority Key Identifier:
                keyid:6B:17:52:AA:34:46:91:6E:52:97:A6:E0:9C:7C:08:10:7A:97:3A:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/1/6B1752AA3446916E5297A6E09C7C08107A973A4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B1752AA3446916E5297A6E09C7C08107A973A4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/1/323830343a326636383a3a2f33322d3438203d3e20323634383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f68::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:e8:3b:30:30:1b:43:8e:c2:d3:d5:a6:10:94:e8:13:f0:74:
         d1:2e:fe:c8:26:ad:10:10:13:62:4f:63:6e:30:88:63:1e:0d:
         cf:80:67:59:cb:fa:fa:58:3e:12:92:ec:16:48:fc:48:8d:7b:
         80:18:1f:e2:0a:99:fc:c9:2d:6b:82:a6:45:53:30:95:88:62:
         17:4e:c2:e2:43:6c:86:01:67:7f:8e:8f:6b:e4:48:20:d6:b8:
         bc:2c:23:c8:5f:e1:fa:fd:7f:d1:b7:2d:5a:a8:a3:a1:7f:67:
         8c:ca:4f:fb:fb:ea:65:04:f1:c3:65:23:27:4d:49:67:69:ef:
         6c:b8:86:f8:2b:3f:a2:dd:f9:26:00:a4:d6:12:96:5c:bc:3b:
         6f:54:f1:90:50:63:ad:06:b6:9d:75:fd:ae:1c:f5:c5:50:2b:
         f2:be:02:f3:50:6a:fd:68:ab:c2:86:33:d9:d5:91:ec:8d:43:
         97:8c:e8:aa:b3:2b:d2:ed:34:4c:47:8d:80:b5:8c:f7:9d:54:
         4d:ed:b8:e3:1d:12:47:6c:8d:a5:95:7f:bf:af:3e:9d:8a:78:
         d7:ad:b3:5e:99:87:22:4f:57:14:08:f7:9f:94:a0:5e:9a:4a:
         36:00:f1:d4:d5:a9:38:60:d3:75:1a:b8:e9:dd:bc:f7:66:d7:
         6c:a4:4a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----