Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DAwcSTGJWEC9RwWPot2oiR5uHZNpiJYnYwhW5EuuiwJ1/0/323830343a373861633a3a2f33322d3332203d3e20323731323538.roa
File:                     323830343a373861633a3a2f33322d3332203d3e20323731323538.roa (raw, json)
Hash identifier:          GZQHqeFz3w9CgkmdVwe7tOsT1CXdwUYanD20xAyDSTw=
Subject key identifier:   4E:F9:CD:09:01:0C:FE:4C:B5:0A:93:8F:C3:A4:31:7B:BC:04:12:A0
Certificate issuer:       /CN=F0F51C40B234DF304F48E1DC19EF7BB20DFB1A5B
Certificate serial:       15F88E861F76ECD67A97021E94FB6C95262B2247
Authority key identifier: F0:F5:1C:40:B2:34:DF:30:4F:48:E1:DC:19:EF:7B:B2:0D:FB:1A:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F0F51C40B234DF304F48E1DC19EF7BB20DFB1A5B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DAwcSTGJWEC9RwWPot2oiR5uHZNpiJYnYwhW5EuuiwJ1/0/323830343a373861633a3a2f33322d3332203d3e20323731323538.roa
Signing time:             Fri 25 Aug 2023 02:29:21 +0000
ROA not before:           Fri 25 Aug 2023 02:24:21 +0000
ROA not after:            Fri 23 Aug 2024 02:29:21 +0000
asID:                     271258
IP address blocks:        2804:78ac::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:f8:8e:86:1f:76:ec:d6:7a:97:02:1e:94:fb:6c:95:26:2b:22:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0F51C40B234DF304F48E1DC19EF7BB20DFB1A5B
        Validity
            Not Before: Aug 25 02:24:21 2023 GMT
            Not After : Aug 23 02:29:21 2024 GMT
        Subject: CN=4EF9CD09010CFE4CB50A938FC3A4317BBC0412A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0b:af:3c:c8:77:60:93:dc:13:34:c0:9c:24:
                    86:47:f5:e3:86:1d:57:cd:62:42:79:d7:0b:a3:0a:
                    1e:0a:d0:00:a6:c8:9a:8d:6b:33:65:51:6b:d8:9c:
                    26:5d:72:51:13:63:09:1e:71:43:b6:50:be:a8:be:
                    d2:ed:c4:05:4d:90:f1:1d:22:04:bc:07:39:1f:e2:
                    1b:5a:7b:ca:09:8e:69:67:7a:98:ad:2e:85:ef:52:
                    a6:33:3e:59:a1:4e:ba:60:2b:2a:a5:b0:65:8c:8e:
                    ce:16:f8:5f:81:81:5f:79:60:c8:af:80:1d:84:ad:
                    dd:7d:2d:e2:d5:ed:e5:76:f5:25:1c:07:52:aa:56:
                    df:b7:8b:c6:da:1b:f6:ed:05:5e:72:a9:42:65:f8:
                    f0:09:dd:7f:ee:59:c5:d4:96:fc:94:fa:28:9f:14:
                    93:fd:b0:51:b7:af:e9:f2:e5:c6:40:a5:6b:b8:61:
                    80:84:e7:cd:d8:9c:e0:19:db:30:e9:d8:ae:4c:d4:
                    78:ea:10:3a:7c:84:2b:7d:9b:9e:11:82:a9:41:40:
                    20:5e:63:35:80:c1:9a:ff:a2:26:1c:95:f3:13:2a:
                    d9:51:9e:8f:cb:34:07:da:2e:c1:be:cf:02:5a:a6:
                    0e:93:c1:57:e9:34:e9:86:ff:5b:6e:39:bd:5b:ac:
                    1d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:F9:CD:09:01:0C:FE:4C:B5:0A:93:8F:C3:A4:31:7B:BC:04:12:A0
            X509v3 Authority Key Identifier:
                keyid:F0:F5:1C:40:B2:34:DF:30:4F:48:E1:DC:19:EF:7B:B2:0D:FB:1A:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DAwcSTGJWEC9RwWPot2oiR5uHZNpiJYnYwhW5EuuiwJ1/0/F0F51C40B234DF304F48E1DC19EF7BB20DFB1A5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F0F51C40B234DF304F48E1DC19EF7BB20DFB1A5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAwcSTGJWEC9RwWPot2oiR5uHZNpiJYnYwhW5EuuiwJ1/0/323830343a373861633a3a2f33322d3332203d3e20323731323538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:78ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:72:43:e7:23:55:bb:a3:ed:b8:df:04:0f:fd:8a:73:ff:08:
         45:b2:18:82:39:37:04:ec:23:0a:d3:2e:5e:90:ff:23:2e:52:
         08:f6:39:c1:8f:3e:99:01:1f:3a:ed:6b:99:1b:e2:ec:d8:04:
         07:95:7a:63:9e:67:99:03:e9:96:93:84:de:c5:56:c7:5b:ee:
         0c:25:be:0c:c8:a7:a9:9a:ab:f8:4a:f7:5b:0c:3e:75:07:9d:
         12:6a:50:36:3b:10:ad:39:16:6f:db:ec:93:db:87:8c:53:44:
         f7:c8:3c:e7:17:15:1d:2a:7a:c7:1a:23:3e:19:22:0d:28:44:
         b6:4d:a2:e0:84:38:b9:1d:f6:a8:b2:53:ae:4c:97:ad:6a:94:
         4f:69:84:5a:b2:bc:3b:b5:4c:04:61:45:34:18:31:77:a3:9e:
         4a:60:50:48:d6:43:32:31:66:b0:76:b2:4a:1f:91:fe:0f:1e:
         c6:08:54:6a:97:55:59:a9:c5:35:95:c5:35:01:81:75:60:7e:
         fe:d3:68:df:df:20:7f:9e:41:8f:70:32:31:60:8f:d4:35:dc:
         8e:49:ad:74:e8:dd:c1:e8:ef:14:a5:64:49:ee:ca:71:0d:9d:
         f7:bb:87:91:56:68:09:c0:8b:e5:8b:c9:f2:0e:cf:34:22:72:
         4d:66:03:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----