Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/0/323830343a363030303a3a2f33322d3438203d3e20323639313339.roa
File:                     323830343a363030303a3a2f33322d3438203d3e20323639313339.roa (raw, json)
Hash identifier:          7xjun7IoLdNRMKh33fRIQEcMTNHCS4DQ2jnOLXvjbyE=
Subject key identifier:   83:99:60:DF:AF:F1:74:1E:D1:45:BC:FF:BE:2B:AD:13:36:7C:69:5B
Certificate issuer:       /CN=DEA46C6DCA6F3B35A10B8A9B456D1F7E137507A1
Certificate serial:       23171E259379A54B3EF52640DE8E23F443406555
Authority key identifier: DE:A4:6C:6D:CA:6F:3B:35:A1:0B:8A:9B:45:6D:1F:7E:13:75:07:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEA46C6DCA6F3B35A10B8A9B456D1F7E137507A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/0/323830343a363030303a3a2f33322d3438203d3e20323639313339.roa
Signing time:             Mon 25 Mar 2024 20:34:00 +0000
ROA not before:           Mon 25 Mar 2024 20:29:00 +0000
ROA not after:            Mon 24 Mar 2025 20:34:00 +0000
asID:                     269139
IP address blocks:        2804:6000::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:17:1e:25:93:79:a5:4b:3e:f5:26:40:de:8e:23:f4:43:40:65:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEA46C6DCA6F3B35A10B8A9B456D1F7E137507A1
        Validity
            Not Before: Mar 25 20:29:00 2024 GMT
            Not After : Mar 24 20:34:00 2025 GMT
        Subject: CN=839960DFAFF1741ED145BCFFBE2BAD13367C695B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:26:39:18:f1:bd:9e:86:ad:55:c5:78:a0:6a:
                    5a:18:53:cc:f4:a9:c5:7e:3a:4a:98:c2:8b:8d:83:
                    31:f1:3a:ab:a5:1c:65:43:cd:13:95:92:f5:55:8a:
                    4e:c2:c1:e7:90:c3:a6:35:c6:96:10:d8:fb:4d:71:
                    ca:e1:b5:c4:f9:d8:32:35:ab:bf:06:a7:b9:7a:4d:
                    e3:12:54:67:ef:41:aa:b9:40:67:85:2a:44:90:bb:
                    f2:55:94:f3:f4:69:d9:74:c6:1c:62:f3:aa:92:5a:
                    8e:72:f2:28:0d:cd:33:ce:dd:4f:62:f6:d9:06:1f:
                    3f:52:c4:7b:73:65:5b:f8:92:d1:99:e4:c4:93:b9:
                    7a:9b:9c:84:70:0b:19:ba:a8:9d:de:f9:0d:e7:9e:
                    dd:3b:f4:d9:ae:e0:bc:d0:4b:28:a7:9f:bb:a8:a6:
                    8d:8d:f8:b8:d0:6f:4e:07:85:af:f5:3f:9e:56:97:
                    80:c2:21:04:47:83:05:cb:d7:22:a8:b0:e7:15:7b:
                    69:89:fb:d4:15:39:6d:71:a6:f7:74:f3:e9:b9:61:
                    0a:a3:12:38:b5:ea:fd:6a:59:82:02:9d:44:15:e8:
                    fb:55:f3:52:f2:48:28:ab:da:b5:0d:10:aa:f6:3e:
                    a0:19:a5:03:c9:5d:3a:5b:72:e3:71:8d:c2:dd:d2:
                    03:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:99:60:DF:AF:F1:74:1E:D1:45:BC:FF:BE:2B:AD:13:36:7C:69:5B
            X509v3 Authority Key Identifier:
                keyid:DE:A4:6C:6D:CA:6F:3B:35:A1:0B:8A:9B:45:6D:1F:7E:13:75:07:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/0/DEA46C6DCA6F3B35A10B8A9B456D1F7E137507A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEA46C6DCA6F3B35A10B8A9B456D1F7E137507A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/0/323830343a363030303a3a2f33322d3438203d3e20323639313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6000::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:38:83:ce:a3:e9:74:46:fd:02:9b:ee:c7:91:a9:6a:d0:1a:
         f0:13:07:d1:80:22:56:c3:75:26:34:bd:5b:b7:f9:91:88:1c:
         31:91:4f:1c:69:b3:63:07:1d:cf:b9:69:54:73:af:b0:42:33:
         73:d7:20:bb:86:8d:98:4b:52:a1:56:eb:44:c9:9c:19:42:20:
         ab:57:99:cb:0e:6a:0b:26:7d:33:3d:5d:14:13:e5:cb:55:fe:
         88:96:41:9e:22:1d:fc:79:5b:e9:e5:30:21:d5:7b:bd:7e:6a:
         dd:59:82:9e:d4:b0:6d:29:09:6f:24:39:06:d1:73:47:15:18:
         04:b1:83:c9:b3:2b:59:85:17:4a:e5:53:db:13:ce:31:86:37:
         09:27:23:8d:83:3a:8b:3e:72:16:10:a5:bd:3a:f5:d1:00:50:
         38:be:16:47:ff:10:4f:29:bc:ea:cd:0f:4e:80:35:60:bb:4c:
         86:7e:41:ef:84:4f:74:1a:e6:61:08:20:37:f0:bc:ff:04:73:
         3f:68:e5:da:a6:c7:9b:10:9d:79:59:45:e9:f0:cb:12:3f:a3:
         1b:a1:79:85:72:3c:9c:1d:5a:3c:09:de:9b:59:26:9a:43:7e:
         58:eb:d9:43:3e:8b:35:a4:21:d4:dd:16:f4:a9:54:68:03:bf:
         c5:38:6a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----