Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/323830343a3538303a3a2f33322d3332203d3e20323632353138.roa
File:                     323830343a3538303a3a2f33322d3332203d3e20323632353138.roa (raw, json)
Hash identifier:          LKv7RuFWR2iKGrJEMPRzqvQxvJB5qZ0Gl078E672Ln0=
Subject key identifier:   DB:5E:D5:99:55:0D:2D:D6:3C:45:CA:52:E3:DE:B1:AF:7A:D9:EC:CF
Certificate issuer:       /CN=A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46
Certificate serial:       5E28F347BECF91D13F9D228D612ECB58672A853F
Authority key identifier: A1:BE:25:BA:AE:90:F7:90:8E:E5:77:C3:C3:75:2F:E0:8A:F3:EC:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/323830343a3538303a3a2f33322d3332203d3e20323632353138.roa
Signing time:             Tue 11 Jul 2023 11:41:19 +0000
ROA not before:           Tue 11 Jul 2023 11:36:19 +0000
ROA not after:            Tue 09 Jul 2024 11:41:19 +0000
asID:                     262518
IP address blocks:        2804:580::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:28:f3:47:be:cf:91:d1:3f:9d:22:8d:61:2e:cb:58:67:2a:85:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46
        Validity
            Not Before: Jul 11 11:36:19 2023 GMT
            Not After : Jul  9 11:41:19 2024 GMT
        Subject: CN=DB5ED599550D2DD63C45CA52E3DEB1AF7AD9ECCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:74:d0:64:8f:a2:96:f7:9e:a2:b4:37:94:6d:
                    07:9a:d1:c4:5c:67:ef:d9:b1:5d:36:43:a5:52:69:
                    17:77:1a:cf:41:0d:03:c0:e6:c3:ee:cf:1b:79:21:
                    7a:9d:c8:5e:94:e6:b3:de:fa:4f:bc:30:c4:79:64:
                    a1:21:54:c9:02:6e:ac:47:a1:92:b7:3a:f0:47:8c:
                    68:d4:48:5d:d1:b9:c5:12:bf:32:33:1a:a0:0b:5b:
                    a0:a3:18:e7:29:44:c7:f2:cb:25:87:45:63:67:c6:
                    70:13:94:30:a1:56:ca:c8:ea:71:7c:c2:9f:1c:ce:
                    ef:37:34:ef:16:e3:42:7e:5a:e2:64:1e:4a:52:0e:
                    a6:28:c0:bc:6f:46:d9:07:a4:7a:78:9b:c3:41:a2:
                    0a:76:1e:82:d5:8f:46:8d:44:f8:65:70:e4:15:b6:
                    9e:27:ec:12:f3:12:24:a1:ec:80:88:af:12:42:62:
                    ef:f3:c8:82:ef:15:96:d1:36:c9:34:84:82:ce:a3:
                    a4:78:14:30:75:ab:21:bf:21:6f:57:0b:ad:b1:e8:
                    19:bb:f8:16:4b:a0:f7:2e:67:6c:28:52:77:79:32:
                    8e:8e:73:2f:6c:9a:3c:d7:bb:67:de:05:45:a8:f6:
                    53:8a:fe:08:2d:ac:b6:49:e4:b3:cf:9a:4f:2f:51:
                    0e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:5E:D5:99:55:0D:2D:D6:3C:45:CA:52:E3:DE:B1:AF:7A:D9:EC:CF
            X509v3 Authority Key Identifier:
                keyid:A1:BE:25:BA:AE:90:F7:90:8E:E5:77:C3:C3:75:2F:E0:8A:F3:EC:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/323830343a3538303a3a2f33322d3332203d3e20323632353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:580::/32

    Signature Algorithm: sha256WithRSAEncryption
         ce:8f:c9:67:d3:de:50:66:4a:d7:14:0b:c0:91:1c:17:af:39:
         b1:8b:f4:14:33:2f:a7:7c:03:61:54:85:54:76:49:17:59:61:
         61:1f:b6:d3:69:2f:c6:5a:54:38:e7:1a:f2:95:9c:78:c9:c6:
         e5:38:af:e8:8c:01:d8:2c:09:5d:2e:1f:ed:99:6d:88:28:23:
         98:f2:89:80:38:4e:2f:dd:08:b8:8c:cd:bd:cb:d7:48:7f:a4:
         ec:d9:fe:10:16:a6:66:78:a8:5a:ad:f4:1a:34:3a:1e:e7:f2:
         4a:f8:7f:40:23:da:da:8b:05:3c:60:fa:39:89:97:06:e2:e2:
         3d:45:ff:04:c1:e2:0d:02:5a:e7:79:84:9b:a6:ef:f5:2a:fc:
         f0:ba:7e:f8:4a:7d:77:11:ab:89:4f:42:99:28:26:3d:3c:20:
         4b:f3:db:8b:e1:26:fe:e8:98:b8:74:74:5b:6c:43:0a:af:37:
         b5:c4:2f:c6:98:af:9a:44:51:cc:63:bb:af:18:56:64:3b:4c:
         93:d2:7c:d8:ea:03:d8:ec:1c:63:5c:30:34:69:b3:f1:9d:88:
         a3:7e:b4:fc:3f:d1:bb:1e:f7:02:10:ac:80:d3:23:b5:c6:bb:
         78:8c:bf:1e:0d:08:da:bd:f4:e0:06:e5:19:56:2f:1e:6d:94:
         02:0d:3d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----