Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3334303a3a2f34322d3432203d3e20323635313837.roa
File:                     323830343a326330303a3334303a3a2f34322d3432203d3e20323635313837.roa (raw, json)
Hash identifier:          xgtV2bybdTXxxUjTU1H2wXZnwtseOdduPbwjm7k7LOk=
Subject key identifier:   23:8F:68:F1:90:44:6C:78:FB:F7:A6:91:9D:D5:7C:99:EF:EA:0D:08
Certificate issuer:       /CN=81175370221E26181F39FB407E63064DEB20E6EE
Certificate serial:       2ED0774ABE11EFBC7B9788BD5E1BEB9E2B90FC16
Authority key identifier: 81:17:53:70:22:1E:26:18:1F:39:FB:40:7E:63:06:4D:EB:20:E6:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81175370221E26181F39FB407E63064DEB20E6EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3334303a3a2f34322d3432203d3e20323635313837.roa
Signing time:             Thu 03 Aug 2023 19:00:01 +0000
ROA not before:           Thu 03 Aug 2023 18:55:01 +0000
ROA not after:            Thu 01 Aug 2024 19:00:01 +0000
asID:                     265187
IP address blocks:        2804:2c00:340::/42 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:d0:77:4a:be:11:ef:bc:7b:97:88:bd:5e:1b:eb:9e:2b:90:fc:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81175370221E26181F39FB407E63064DEB20E6EE
        Validity
            Not Before: Aug  3 18:55:01 2023 GMT
            Not After : Aug  1 19:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b1:9d:e9:49:b1:71:c5:02:52:e1:5c:c3:81:
                    ba:d1:e8:a9:c1:56:13:64:8d:1f:01:10:cd:18:d9:
                    2a:61:53:35:04:9f:2f:e6:42:2b:e0:64:3f:b7:fa:
                    63:71:0c:93:c7:dd:eb:c3:90:58:53:e5:c5:f3:59:
                    91:bc:b3:e5:ce:1b:4c:df:90:3d:95:99:c7:07:2c:
                    f7:e4:84:cb:bc:71:f1:51:c8:69:f8:98:f9:49:b3:
                    eb:04:26:24:db:b0:98:12:5a:ba:e9:5e:dc:ce:49:
                    d0:06:5a:99:5a:7e:64:38:56:57:e7:2e:e8:a8:fc:
                    97:40:a5:11:f5:74:dd:99:36:f7:95:28:7b:1c:ef:
                    d8:05:81:03:cb:cc:ec:0d:0c:91:b8:7d:3d:17:d2:
                    ac:2e:27:e4:98:7a:0f:aa:fd:3b:70:89:8c:97:00:
                    c0:d8:d0:08:32:0e:33:b1:f6:c7:bc:22:dc:8a:62:
                    e1:dd:33:32:fa:da:5f:5c:20:61:05:a9:af:e2:c1:
                    c0:98:c1:c1:9d:c6:71:12:a3:60:93:ca:8d:4c:6e:
                    77:c8:cc:7f:25:eb:6c:65:33:56:24:9b:aa:d6:55:
                    69:c6:d7:3f:6d:cd:3d:ce:4e:c8:45:60:a7:a6:b2:
                    0f:00:7b:fe:ef:2e:84:e9:a1:f6:ce:14:cf:3f:cb:
                    4f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:8F:68:F1:90:44:6C:78:FB:F7:A6:91:9D:D5:7C:99:EF:EA:0D:08
            X509v3 Authority Key Identifier:
                keyid:81:17:53:70:22:1E:26:18:1F:39:FB:40:7E:63:06:4D:EB:20:E6:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/81175370221E26181F39FB407E63064DEB20E6EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81175370221E26181F39FB407E63064DEB20E6EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3334303a3a2f34322d3432203d3e20323635313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c00:340::/42

    Signature Algorithm: sha256WithRSAEncryption
         72:8a:bc:32:fd:91:b8:9c:21:b1:7d:e2:d4:62:e7:6c:2d:37:
         87:6d:4b:72:96:83:25:f7:97:55:d2:6f:20:92:ee:cb:49:94:
         9d:0a:19:3b:88:91:07:3d:c3:3e:3f:80:75:a7:8c:42:4d:fa:
         62:bd:cd:85:00:48:a8:42:b7:84:05:ba:01:7c:1d:f6:08:9b:
         65:c5:ae:0a:69:2a:e2:4d:15:a9:0d:bc:ef:d2:b4:01:15:de:
         3d:26:e3:b2:6e:28:44:12:68:b3:e6:e0:dc:d0:49:5f:d9:c3:
         4b:b4:dc:29:f5:44:8d:88:f9:98:86:8d:eb:a8:42:cc:a0:5f:
         9a:ec:c1:85:60:87:ce:ac:8c:c3:3e:07:63:71:95:fa:7c:19:
         7f:0e:85:e4:26:48:ac:03:40:f2:f4:93:3d:d0:3a:ed:12:cf:
         cf:9a:62:c9:9a:28:c1:6e:fd:6c:2e:e3:c0:c6:00:33:3d:97:
         e3:aa:03:35:28:9a:c0:a8:90:9d:26:e9:11:cc:dc:3e:ba:07:
         f8:b8:d3:c8:e8:00:cb:94:14:92:c0:fc:ec:da:e9:20:6f:9b:
         36:76:43:c7:e3:13:ee:b8:c9:84:4c:7f:d3:ec:09:96:13:e5:
         34:cc:57:62:d2:2a:4a:46:e6:28:4c:90:9a:0d:f1:15:12:b5:
         12:2f:d9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----