Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/323830343a333537633a3a2f33322d3438203d3e20323636323839.roa
File:                     323830343a333537633a3a2f33322d3438203d3e20323636323839.roa (raw, json)
Hash identifier:          W3T5FIOc8yu715U8fA0FpdhZ9GtuhTYJD+QpbJL4Eis=
Subject key identifier:   32:54:4D:4C:FA:52:2F:98:9C:87:84:E9:C1:72:9C:F9:E5:C6:16:56
Certificate issuer:       /CN=CF5FC39CAA8DDAA086EC7AFC2096F916A4C71B0C
Certificate serial:       1F530681CF017F1C2A41F0D4FEE799E05CBAE0DD
Authority key identifier: CF:5F:C3:9C:AA:8D:DA:A0:86:EC:7A:FC:20:96:F9:16:A4:C7:1B:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF5FC39CAA8DDAA086EC7AFC2096F916A4C71B0C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/323830343a333537633a3a2f33322d3438203d3e20323636323839.roa
Signing time:             Mon 17 Jul 2023 23:00:00 +0000
ROA not before:           Mon 17 Jul 2023 22:55:00 +0000
ROA not after:            Mon 15 Jul 2024 23:00:00 +0000
asID:                     266289
IP address blocks:        2804:357c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:53:06:81:cf:01:7f:1c:2a:41:f0:d4:fe:e7:99:e0:5c:ba:e0:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF5FC39CAA8DDAA086EC7AFC2096F916A4C71B0C
        Validity
            Not Before: Jul 17 22:55:00 2023 GMT
            Not After : Jul 15 23:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:28:81:c8:f2:b7:34:62:1a:11:8c:5d:bb:e1:
                    7f:0b:73:95:94:e4:dc:6e:ef:f2:43:25:02:27:53:
                    8c:d9:1c:87:bc:db:c1:18:d4:c4:62:74:1a:0d:d1:
                    c6:7a:81:e3:88:6e:e8:3c:8b:f1:91:97:93:ae:bc:
                    7b:41:54:d3:4e:3b:5a:3c:79:f7:9f:ac:da:db:fa:
                    97:5d:88:eb:bc:34:72:9d:77:47:e3:13:ef:c4:65:
                    ce:89:6d:28:75:57:b0:44:eb:95:90:18:17:46:d2:
                    8d:5c:c6:49:09:71:69:04:d7:6f:15:42:6d:f6:1b:
                    65:07:4d:c9:ea:7d:62:4b:e7:91:3e:96:b2:5c:5b:
                    e3:33:83:a7:b3:71:57:f6:cd:e8:c9:5b:cc:85:cd:
                    59:ac:c9:c5:1d:30:1b:d5:19:b8:33:f1:43:a2:f8:
                    74:d6:e2:a0:f6:5c:ad:d2:92:50:51:02:4c:59:77:
                    16:d2:87:90:b8:36:1e:03:24:73:41:ae:67:2e:d1:
                    ff:4e:9c:d1:cf:b9:ea:ce:f9:01:59:ef:cf:27:7d:
                    94:d5:85:1d:9b:98:e5:a4:ad:ee:26:d8:d9:18:68:
                    9a:b1:7e:58:b9:19:c7:9c:74:bd:3e:bc:c1:1e:c5:
                    33:4a:dc:37:d5:a7:30:af:cd:4f:2f:97:25:ad:94:
                    ea:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:54:4D:4C:FA:52:2F:98:9C:87:84:E9:C1:72:9C:F9:E5:C6:16:56
            X509v3 Authority Key Identifier:
                keyid:CF:5F:C3:9C:AA:8D:DA:A0:86:EC:7A:FC:20:96:F9:16:A4:C7:1B:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/CF5FC39CAA8DDAA086EC7AFC2096F916A4C71B0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF5FC39CAA8DDAA086EC7AFC2096F916A4C71B0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/323830343a333537633a3a2f33322d3438203d3e20323636323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:357c::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:d4:6b:c4:4e:98:d4:2b:81:94:07:3c:d3:dd:c5:c0:1b:a7:
         2d:5a:22:f7:ac:7c:bd:35:db:f4:f5:cd:47:d6:20:38:06:44:
         68:d3:4b:c0:f5:40:a1:be:2e:1e:79:39:f4:34:45:b0:5c:d8:
         8d:e1:a8:96:0c:6e:ee:80:39:e1:57:23:ab:65:9a:39:49:c1:
         d2:98:f6:9b:a6:b1:d4:06:bf:7e:d6:0d:0f:6a:ae:12:d0:43:
         7f:e1:de:f1:69:31:18:2a:6c:e9:b0:44:ab:e0:90:ff:74:71:
         7b:b1:b3:dc:16:5c:38:e6:e6:f6:a3:af:a8:60:47:83:59:77:
         04:66:05:c3:54:05:b7:59:11:d0:66:2d:af:b4:9f:6c:86:04:
         45:ad:d5:be:45:fb:be:83:1c:21:17:02:c2:d9:8e:ef:0f:fa:
         a5:09:4d:9d:b4:34:6b:7d:41:90:02:bd:be:63:b9:e3:10:6d:
         c6:5a:d2:ab:a9:4e:81:8b:88:37:8e:c8:f6:e8:ab:5b:c0:5a:
         e8:d5:2c:ab:db:59:d1:e7:ed:d6:ed:c2:10:5a:53:d1:51:0b:
         b3:52:47:6a:28:55:a7:a7:ee:2b:95:73:17:5d:03:9f:7b:82:
         ed:40:92:6a:8c:c0:65:7a:eb:c8:4a:9e:c0:ca:ed:f5:f2:58:
         27:5f:7e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----