Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/1/323830343a363862633a3a2f33322d3332203d3e20323639373132.roa
File:                     323830343a363862633a3a2f33322d3332203d3e20323639373132.roa (raw, json)
Hash identifier:          iOjx8osWk66VxWmdqMl39smVERwmQ5MqoXAxp7U3VUM=
Subject key identifier:   0A:8F:1E:C2:DE:A7:C8:E4:E3:9B:E1:B7:C5:A0:E3:BB:20:CF:6F:7D
Certificate issuer:       /CN=26D31A8C73C47EAB403D78A3D37CBA859CC99B69
Certificate serial:       4C0819D22B2D091EA7454B8B3F3DCC6FD8669F5C
Authority key identifier: 26:D3:1A:8C:73:C4:7E:AB:40:3D:78:A3:D3:7C:BA:85:9C:C9:9B:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26D31A8C73C47EAB403D78A3D37CBA859CC99B69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/1/323830343a363862633a3a2f33322d3332203d3e20323639373132.roa
Signing time:             Wed 03 Apr 2024 18:44:30 +0000
ROA not before:           Wed 03 Apr 2024 18:39:30 +0000
ROA not after:            Wed 02 Apr 2025 18:44:30 +0000
asID:                     269712
IP address blocks:        2804:68bc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:08:19:d2:2b:2d:09:1e:a7:45:4b:8b:3f:3d:cc:6f:d8:66:9f:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26D31A8C73C47EAB403D78A3D37CBA859CC99B69
        Validity
            Not Before: Apr  3 18:39:30 2024 GMT
            Not After : Apr  2 18:44:30 2025 GMT
        Subject: CN=0A8F1EC2DEA7C8E4E39BE1B7C5A0E3BB20CF6F7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:01:c8:34:28:75:e0:29:59:6a:7c:99:48:74:
                    68:da:7f:06:4a:46:d9:9d:5e:81:f5:75:29:b5:42:
                    ed:80:c7:13:c0:d2:05:96:e1:7a:40:ca:7c:c2:78:
                    e7:05:82:9b:83:35:f4:15:c5:94:78:71:5d:1e:dc:
                    1d:cf:73:53:0c:a5:35:51:62:3a:9f:51:3d:96:74:
                    05:dc:f2:39:ab:fe:c9:6a:a2:bc:30:f7:d3:9b:cb:
                    5e:52:32:4d:62:bd:99:a5:ec:22:5d:51:09:d2:75:
                    66:50:e1:72:7f:18:f9:8f:9a:84:80:c6:27:c8:73:
                    0f:be:8b:d7:17:b6:d3:b7:ee:39:74:ff:2c:8a:37:
                    65:59:e1:57:8b:8b:1a:4f:3b:f0:48:06:5a:98:a8:
                    73:ae:21:24:4e:d3:1a:b8:c0:77:81:d2:32:0e:5d:
                    9a:37:39:06:b4:8d:60:0c:33:82:89:44:76:e9:f9:
                    2b:8e:7a:0c:48:ac:32:27:84:f3:3c:a4:a5:9b:50:
                    ca:a2:9a:c8:83:f3:94:e5:55:97:a5:3e:64:9f:2f:
                    a9:d1:35:9a:bd:2a:95:52:9f:08:31:87:f5:3a:d4:
                    75:0c:36:57:bc:87:e8:5d:3a:34:d3:e4:51:82:ab:
                    d2:12:e8:2d:0a:f9:9e:4e:ab:ea:eb:6b:4d:3e:f0:
                    ec:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:8F:1E:C2:DE:A7:C8:E4:E3:9B:E1:B7:C5:A0:E3:BB:20:CF:6F:7D
            X509v3 Authority Key Identifier:
                keyid:26:D3:1A:8C:73:C4:7E:AB:40:3D:78:A3:D3:7C:BA:85:9C:C9:9B:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/1/26D31A8C73C47EAB403D78A3D37CBA859CC99B69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26D31A8C73C47EAB403D78A3D37CBA859CC99B69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/1/323830343a363862633a3a2f33322d3332203d3e20323639373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:68bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:06:0e:56:40:fc:e1:f1:aa:de:8d:a3:18:2b:61:04:8d:e2:
         46:65:53:24:1c:42:e2:cd:34:27:6c:f4:7b:7c:96:00:be:73:
         cc:9f:6d:86:62:6c:a7:73:cd:a1:5f:2f:62:63:1d:8c:2d:26:
         eb:fe:2c:14:64:6e:62:ab:8f:5a:29:d4:1b:75:8d:28:f5:92:
         29:9e:25:61:20:03:a6:95:5e:92:c7:3a:ed:db:f9:22:c5:bf:
         08:48:df:8c:b4:6d:7a:48:7d:38:af:4d:d9:89:59:4b:ec:55:
         81:44:02:e3:ce:32:fa:24:c9:ea:38:84:f3:6f:15:33:02:a4:
         c4:bb:ab:49:3c:aa:6b:4a:d6:e1:b4:95:bd:c3:21:59:65:9f:
         e5:05:3e:25:e4:93:a6:2c:75:15:21:4c:b8:3a:0c:1d:2c:18:
         55:f2:1c:f0:a6:72:e4:f5:85:77:0f:6b:06:e0:8e:3f:70:f1:
         9d:ec:9e:7a:82:47:02:00:9e:f3:59:ec:48:f2:e8:cd:7d:10:
         47:00:f7:a3:d4:dc:6d:4a:7c:27:07:ed:3c:20:1d:db:74:ce:
         3d:e3:42:ad:09:35:3a:69:95:bf:ae:8f:44:0e:38:2f:35:56:
         81:7d:cb:40:e5:77:4f:c5:21:d3:b2:6c:94:f5:49:ea:0c:4e:
         80:fe:8c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----