Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/0/323830343a333930633a3a2f33322d3438203d3e20323636353230.roa
File:                     323830343a333930633a3a2f33322d3438203d3e20323636353230.roa (raw, json)
Hash identifier:          6PoboqSWInKpkDYeFF+JgLvsKIWKSKp3XmhZWFvz7+o=
Subject key identifier:   43:C1:67:03:67:E2:57:C7:AD:B8:62:C0:89:1F:FA:FE:C9:69:B9:E5
Certificate issuer:       /CN=98886E660C218FD13E82E809EF5CD801BC0310E5
Certificate serial:       6CB73BBD7058A8B768F0A6B0BC4A41BB059F27CF
Authority key identifier: 98:88:6E:66:0C:21:8F:D1:3E:82:E8:09:EF:5C:D8:01:BC:03:10:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98886E660C218FD13E82E809EF5CD801BC0310E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/0/323830343a333930633a3a2f33322d3438203d3e20323636353230.roa
Signing time:             Thu 11 Apr 2024 19:00:36 +0000
ROA not before:           Thu 11 Apr 2024 18:55:36 +0000
ROA not after:            Thu 10 Apr 2025 19:00:36 +0000
asID:                     266520
IP address blocks:        2804:390c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:b7:3b:bd:70:58:a8:b7:68:f0:a6:b0:bc:4a:41:bb:05:9f:27:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98886E660C218FD13E82E809EF5CD801BC0310E5
        Validity
            Not Before: Apr 11 18:55:36 2024 GMT
            Not After : Apr 10 19:00:36 2025 GMT
        Subject: CN=43C1670367E257C7ADB862C0891FFAFEC969B9E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:67:84:af:63:51:8c:c4:be:7e:13:c8:74:3b:
                    db:cf:26:67:b4:cc:e1:b2:85:c4:41:d6:03:b9:80:
                    0c:13:23:3b:a3:7a:ab:ce:d4:20:9a:4b:3d:87:e2:
                    20:26:da:ea:e5:87:6d:2b:7e:9a:4d:a6:7f:00:68:
                    05:ab:66:38:a9:1c:4d:95:45:38:83:41:82:d4:5c:
                    5a:13:3e:2f:34:da:7d:e3:1a:1e:56:12:5e:d1:2f:
                    b7:e6:ab:7a:25:9c:1b:71:8c:1a:e1:c4:a4:7b:7b:
                    fd:49:b7:93:0f:9e:29:17:59:9c:54:ad:98:39:38:
                    dd:fd:43:e9:65:27:cf:48:bf:f0:3c:3e:07:38:dd:
                    6d:00:0a:ef:33:f7:47:40:f6:f6:3c:a7:b0:55:48:
                    9c:97:6c:3c:94:a2:a2:f8:62:04:65:32:fa:44:0a:
                    6a:de:9b:f9:8c:e1:d3:2e:bf:f6:62:e5:09:43:c1:
                    82:98:aa:18:52:66:20:23:42:75:94:24:e3:90:94:
                    ce:6f:f6:ee:b2:03:25:59:fd:56:1f:c9:6a:3e:1e:
                    7b:fc:3a:0a:05:12:de:1d:22:e3:49:4d:a5:bd:e1:
                    84:7e:0d:53:9a:0e:22:61:37:4a:98:4d:f0:ef:df:
                    36:5e:41:20:cd:4d:92:3d:b0:8d:79:b6:1c:b2:97:
                    6f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:C1:67:03:67:E2:57:C7:AD:B8:62:C0:89:1F:FA:FE:C9:69:B9:E5
            X509v3 Authority Key Identifier:
                keyid:98:88:6E:66:0C:21:8F:D1:3E:82:E8:09:EF:5C:D8:01:BC:03:10:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/0/98886E660C218FD13E82E809EF5CD801BC0310E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98886E660C218FD13E82E809EF5CD801BC0310E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/0/323830343a333930633a3a2f33322d3438203d3e20323636353230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:390c::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:76:31:8b:cb:04:19:ce:72:fc:32:05:6c:91:09:c9:3e:37:
         aa:b8:ce:83:25:b0:5a:94:4b:4a:1d:2e:c9:b3:f6:67:00:37:
         69:c9:68:90:10:42:bd:94:86:9e:65:d5:97:25:c4:c7:fa:0b:
         70:35:8a:cb:73:82:80:31:fe:93:24:7f:57:c2:21:b1:47:af:
         81:c9:de:a4:64:02:1c:42:58:a3:ca:dd:f7:b5:01:63:0c:35:
         4b:f8:52:f5:52:61:ed:17:aa:ff:94:c8:dc:da:16:c7:86:77:
         80:db:9d:ab:c9:64:26:af:26:62:db:99:27:e8:6c:64:30:4b:
         f2:4e:17:c2:18:36:78:b7:d5:54:a6:66:c8:9e:27:88:10:a6:
         d7:1a:e9:9d:66:ed:5d:2a:d5:ba:61:5d:b4:bb:5c:38:f2:50:
         4a:c9:d0:5e:0f:84:c1:f1:3c:ac:38:95:c9:2e:2a:8e:dd:d8:
         23:36:e5:89:b5:a6:7d:56:fa:4b:37:21:3a:66:f0:8c:41:49:
         b2:4c:d3:69:d1:e1:be:17:69:ae:4e:d1:ee:a8:f7:08:e0:6f:
         ff:f1:00:13:e4:ed:bc:9e:a3:cf:a8:a7:2d:5d:b5:fb:fa:79:
         88:9b:b7:9b:25:47:08:ff:20:97:ce:2b:62:fe:83:40:33:66:
         91:5c:19:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----