Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/323830343a326637303a3a2f33322d3332203d3e20323634383931.roa
File:                     323830343a326637303a3a2f33322d3332203d3e20323634383931.roa (raw, json)
Hash identifier:          0Ixf9PftUUAEs3jyx71W98Oby7TJAZIIgQocEMwOKzk=
Subject key identifier:   41:B8:AC:3B:8E:E9:38:75:EE:51:85:CE:3B:13:24:58:E6:0F:97:60
Certificate issuer:       /CN=4E6DA43B69CD8C7E9EC9EF843CCE24BE36F94138
Certificate serial:       36C334C7C92D2D25B5D6DF4A368EE0463509EB8B
Authority key identifier: 4E:6D:A4:3B:69:CD:8C:7E:9E:C9:EF:84:3C:CE:24:BE:36:F9:41:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E6DA43B69CD8C7E9EC9EF843CCE24BE36F94138.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/323830343a326637303a3a2f33322d3332203d3e20323634383931.roa
Signing time:             Thu 04 Jan 2024 13:08:27 +0000
ROA not before:           Thu 04 Jan 2024 13:03:27 +0000
ROA not after:            Thu 02 Jan 2025 13:08:27 +0000
asID:                     264891
IP address blocks:        2804:2f70::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:c3:34:c7:c9:2d:2d:25:b5:d6:df:4a:36:8e:e0:46:35:09:eb:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E6DA43B69CD8C7E9EC9EF843CCE24BE36F94138
        Validity
            Not Before: Jan  4 13:03:27 2024 GMT
            Not After : Jan  2 13:08:27 2025 GMT
        Subject: CN=41B8AC3B8EE93875EE5185CE3B132458E60F9760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4b:8d:45:d2:3a:cf:22:8e:42:d0:e2:78:5a:
                    f5:48:27:54:1a:59:99:29:26:4a:02:5e:6f:c3:14:
                    7e:0b:0f:ce:6c:4d:85:64:e8:a7:5c:11:c6:ef:a1:
                    c7:93:32:45:21:8b:71:ed:ae:d8:eb:22:e7:67:b9:
                    50:44:f2:fc:ca:d9:f5:4c:51:a3:7c:f1:c3:f5:65:
                    c0:ec:ec:23:25:d6:ef:55:53:57:db:45:8f:c1:61:
                    56:60:87:42:4c:96:8f:9d:8b:fa:6d:25:3c:62:b1:
                    17:b0:fa:65:32:11:be:11:20:b0:61:5f:f4:96:84:
                    15:ac:f5:b5:90:64:e0:b4:0f:70:eb:12:05:fe:88:
                    2b:56:ba:df:4c:40:f3:96:eb:67:c2:c5:35:b5:d3:
                    85:c6:f6:43:91:14:31:88:44:d4:11:01:00:83:4e:
                    29:f6:22:68:5b:86:fa:eb:d0:2b:ec:3d:9d:9e:c1:
                    6a:0e:64:23:48:73:ad:59:0d:65:c9:d7:c2:1e:1b:
                    e1:8b:c0:40:d3:22:76:08:09:1a:93:3a:5d:f7:0d:
                    4e:77:e1:af:f1:d6:d8:d4:42:d1:95:d4:2e:14:4c:
                    72:44:e7:c6:fb:90:ce:a5:31:f6:b5:30:0e:c7:87:
                    cc:a4:e0:a2:2c:b6:13:b2:30:51:f0:2b:b8:c0:ee:
                    21:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B8:AC:3B:8E:E9:38:75:EE:51:85:CE:3B:13:24:58:E6:0F:97:60
            X509v3 Authority Key Identifier:
                keyid:4E:6D:A4:3B:69:CD:8C:7E:9E:C9:EF:84:3C:CE:24:BE:36:F9:41:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/4E6DA43B69CD8C7E9EC9EF843CCE24BE36F94138.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E6DA43B69CD8C7E9EC9EF843CCE24BE36F94138.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/323830343a326637303a3a2f33322d3332203d3e20323634383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f70::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:ff:d8:ff:b6:3b:b8:24:36:01:82:cc:c3:c1:a5:84:e4:20:
         2a:cd:59:b2:6c:83:ea:cc:30:b1:cd:40:d2:6d:33:46:a3:da:
         65:7d:4f:d0:ad:f5:3a:18:51:39:ff:62:b4:33:68:7d:a6:2e:
         de:31:58:e7:8c:30:a5:63:0b:c3:e9:7b:8b:24:fa:53:2b:f9:
         56:e6:37:4c:71:2e:43:8d:73:c4:bc:83:f1:14:3a:8c:69:b0:
         2a:30:45:82:3d:c8:c8:0e:04:eb:2c:f4:ef:20:07:87:56:77:
         d2:9a:8f:3c:7e:61:ee:d7:e9:f4:98:c1:ab:49:bb:e6:9a:6f:
         62:e1:8f:74:bb:89:23:00:dc:4e:fb:0f:ef:f3:cd:64:9c:c1:
         6e:cc:d1:9e:26:30:71:ee:bd:70:55:04:1b:f4:29:c7:65:17:
         18:7b:aa:4d:81:ec:b0:17:15:fe:e7:99:f8:cf:c6:e6:14:a0:
         e5:1e:07:d8:7e:80:ee:f3:b0:ee:18:90:0a:02:73:e7:b8:23:
         e8:f4:fc:16:68:e5:f5:f8:80:ce:8a:58:f3:cd:a8:14:0e:1a:
         d5:89:fb:77:cc:da:aa:83:a1:6e:30:cd:73:57:d4:7f:87:ca:
         a2:65:68:e1:15:fc:c6:7a:13:4e:aa:ae:bb:40:6e:3a:e8:06:
         b5:e6:89:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----