Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/323830343a313630303a613034303a3a2f35302d3530203d3e20323633343231.roa
File:                     323830343a313630303a613034303a3a2f35302d3530203d3e20323633343231.roa (raw, json)
Hash identifier:          OmUzsd73DH0xYmIpSt+j3PCjarMWBeUScgPEI6+vIY4=
Subject key identifier:   44:CF:92:68:CA:93:6E:00:43:CC:C6:B1:77:E4:F6:A3:29:A4:48:DB
Certificate issuer:       /CN=411194BD84722FD252C79F3307A7C3ACFDC84782
Certificate serial:       52B8E4BC55E6085019496029049343B0FCB585ED
Authority key identifier: 41:11:94:BD:84:72:2F:D2:52:C7:9F:33:07:A7:C3:AC:FD:C8:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/411194BD84722FD252C79F3307A7C3ACFDC84782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/323830343a313630303a613034303a3a2f35302d3530203d3e20323633343231.roa
Signing time:             Fri 21 Jul 2023 17:31:10 +0000
ROA not before:           Fri 21 Jul 2023 17:26:10 +0000
ROA not after:            Fri 19 Jul 2024 17:31:10 +0000
asID:                     263421
IP address blocks:        2804:1600:a040::/50 maxlen: 50

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:b8:e4:bc:55:e6:08:50:19:49:60:29:04:93:43:b0:fc:b5:85:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=411194BD84722FD252C79F3307A7C3ACFDC84782
        Validity
            Not Before: Jul 21 17:26:10 2023 GMT
            Not After : Jul 19 17:31:10 2024 GMT
        Subject: CN=44CF9268CA936E0043CCC6B177E4F6A329A448DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ba:dc:05:12:15:05:7a:db:b4:14:0f:34:ec:
                    ad:07:05:6a:7a:5e:70:c4:c4:7f:e4:83:db:51:51:
                    c4:63:be:5c:09:31:e9:1f:46:e2:c8:09:63:9c:93:
                    99:60:95:b4:39:09:ff:4e:dd:8a:74:58:ab:15:5e:
                    f9:b0:4c:cb:86:0c:ce:01:52:4d:7b:77:97:45:ad:
                    c2:f2:25:08:86:98:00:dc:c0:1d:07:19:c4:d0:a6:
                    b7:76:e3:c2:d1:ff:7e:49:2a:e0:28:82:de:65:14:
                    03:1a:9a:eb:71:4e:d9:30:81:10:04:e8:a1:ad:13:
                    1f:2b:10:64:77:d8:72:8c:dd:03:4e:18:b9:de:e5:
                    b9:e3:b3:60:07:e1:26:ee:e9:8a:5b:ae:01:46:1e:
                    09:3c:62:38:0a:39:65:8d:1b:7e:f3:51:55:f6:e7:
                    81:14:cc:14:d3:58:81:3e:03:5b:76:8a:9a:3f:32:
                    88:37:70:3c:bc:ae:84:2a:55:28:34:86:b9:87:90:
                    ea:04:6c:be:45:5f:ed:4a:65:94:52:c0:f9:1d:97:
                    5a:98:95:29:24:af:ce:52:c3:e4:2f:c0:ba:d4:0e:
                    87:9d:d2:37:d3:7f:fa:07:d3:b1:3e:c1:fc:74:2c:
                    c6:64:7d:7d:db:00:7e:6f:b5:09:5e:68:4d:02:a4:
                    58:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:CF:92:68:CA:93:6E:00:43:CC:C6:B1:77:E4:F6:A3:29:A4:48:DB
            X509v3 Authority Key Identifier:
                keyid:41:11:94:BD:84:72:2F:D2:52:C7:9F:33:07:A7:C3:AC:FD:C8:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/411194BD84722FD252C79F3307A7C3ACFDC84782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/411194BD84722FD252C79F3307A7C3ACFDC84782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/323830343a313630303a613034303a3a2f35302d3530203d3e20323633343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1600:a040::/50

    Signature Algorithm: sha256WithRSAEncryption
         bc:72:3b:94:ac:fa:6d:2a:03:8b:9b:80:ca:a4:2a:21:d4:98:
         22:87:5e:cb:73:e0:c9:80:8f:a0:b0:61:57:23:56:07:5a:c9:
         72:7b:d5:75:07:ca:4a:cf:f8:92:9b:26:39:28:70:81:b4:ef:
         16:d6:f9:9c:74:89:40:da:98:2d:c1:33:53:bb:0c:9b:85:29:
         cc:de:7f:c2:61:3c:bd:88:c5:72:a3:f7:49:29:e2:65:55:9b:
         3a:3f:44:9d:76:49:b8:71:ef:4f:e8:35:61:ac:6e:9b:4e:65:
         e5:9c:03:67:20:24:37:a6:48:de:18:f1:c3:5f:9d:ac:9f:00:
         9a:f3:89:28:bc:de:54:74:06:a9:8d:ed:de:08:0c:62:89:d9:
         f0:35:e0:ad:97:b8:6d:b8:31:f4:b3:db:6a:f8:8d:e4:51:1d:
         71:fd:1d:1e:81:3e:d7:a4:5d:16:f5:a5:a6:12:a2:e3:71:df:
         f2:ce:3d:1c:59:00:43:8d:8f:7a:f5:81:3b:8b:42:78:a7:4c:
         fc:1e:c9:ca:6d:70:dc:6a:50:75:02:57:f8:c1:e6:3b:ac:24:
         e4:c2:39:c0:48:a2:f5:03:bb:54:9c:5e:d1:8a:90:4f:c9:2c:
         9d:c2:2b:aa:a3:a9:8d:e2:19:cb:d0:ac:ad:28:fd:60:74:b2:
         72:69:03:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----