Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/323830343a346531383a3a2f33322d3438203d3e20323638323339.roa
File:                     323830343a346531383a3a2f33322d3438203d3e20323638323339.roa (raw, json)
Hash identifier:          eQ62XF/Aacb03F5FgBEBPz1yoU7hgJWPO15k8dXMJgU=
Subject key identifier:   A4:6E:A1:9D:BD:50:43:34:61:90:FD:B0:F2:59:CD:E7:B5:3F:2D:1A
Certificate issuer:       /CN=9184FB2E872C3EA8E80D8A101E98FBE8C5E96DEF
Certificate serial:       651A218EDAFA066F55B095D389B5B471512428AF
Authority key identifier: 91:84:FB:2E:87:2C:3E:A8:E8:0D:8A:10:1E:98:FB:E8:C5:E9:6D:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9184FB2E872C3EA8E80D8A101E98FBE8C5E96DEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/323830343a346531383a3a2f33322d3438203d3e20323638323339.roa
Signing time:             Thu 14 Sep 2023 20:30:38 +0000
ROA not before:           Thu 14 Sep 2023 20:25:38 +0000
ROA not after:            Thu 12 Sep 2024 20:30:38 +0000
asID:                     268239
IP address blocks:        2804:4e18::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:1a:21:8e:da:fa:06:6f:55:b0:95:d3:89:b5:b4:71:51:24:28:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9184FB2E872C3EA8E80D8A101E98FBE8C5E96DEF
        Validity
            Not Before: Sep 14 20:25:38 2023 GMT
            Not After : Sep 12 20:30:38 2024 GMT
        Subject: CN=A46EA19DBD5043346190FDB0F259CDE7B53F2D1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a9:05:8b:07:b6:9e:60:5a:97:2b:79:54:8b:
                    0f:65:f4:40:ea:f2:a8:b2:1d:b8:c6:2a:ec:75:e5:
                    d0:c4:86:73:0b:0e:66:5f:c3:f8:26:23:65:fc:bb:
                    7c:f3:d7:ae:39:d2:0a:a1:61:c9:65:18:c3:36:b6:
                    8e:f2:ee:70:af:aa:ec:ab:bb:30:eb:7b:95:41:3f:
                    0d:da:98:75:91:ba:a6:5d:3a:a4:2a:d6:e7:ee:62:
                    32:f3:5d:5c:f6:8a:16:de:35:74:86:81:f5:3a:a2:
                    72:5d:74:b1:72:f0:c4:43:27:da:2e:44:0b:fc:e6:
                    7d:17:26:4c:d9:af:f0:dc:12:50:af:b1:64:f7:67:
                    3c:52:4e:0d:04:64:a7:fe:c1:17:80:df:5d:36:ef:
                    3b:0e:42:e6:9f:06:c0:18:c6:40:15:90:3a:a6:13:
                    d6:0f:9e:c4:19:68:e3:e2:99:8a:6f:66:57:cb:83:
                    3e:de:51:2b:2c:c6:83:f5:37:af:9b:33:24:35:bb:
                    07:75:51:4c:60:0f:28:57:96:74:f8:4e:d3:57:93:
                    1c:76:47:2f:05:91:f5:f5:e6:27:59:3a:92:80:78:
                    b6:c9:52:28:2b:c8:30:68:88:14:7a:47:8b:8c:ab:
                    31:82:25:78:b5:6f:0d:d2:18:03:c2:f2:e1:56:69:
                    cf:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:6E:A1:9D:BD:50:43:34:61:90:FD:B0:F2:59:CD:E7:B5:3F:2D:1A
            X509v3 Authority Key Identifier:
                keyid:91:84:FB:2E:87:2C:3E:A8:E8:0D:8A:10:1E:98:FB:E8:C5:E9:6D:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/9184FB2E872C3EA8E80D8A101E98FBE8C5E96DEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9184FB2E872C3EA8E80D8A101E98FBE8C5E96DEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/323830343a346531383a3a2f33322d3438203d3e20323638323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e18::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:86:1c:2c:5d:90:e6:12:3b:a5:ec:f3:32:be:7e:18:bd:c0:
         13:76:2b:41:ef:03:06:1f:3a:1a:5c:22:92:b3:88:39:a8:88:
         94:26:d5:d4:62:c0:3a:69:83:19:b9:0b:30:a1:7c:ac:6e:a9:
         a9:ee:c9:3b:48:c4:46:a6:23:dc:46:22:2e:12:15:93:42:84:
         ce:a9:0e:81:04:d8:e6:dc:36:0b:17:a6:4a:c0:66:68:f3:78:
         e9:05:ed:55:23:2d:e5:e9:67:dd:6c:ac:ae:15:58:4e:1e:50:
         65:8b:09:8b:7f:aa:78:b1:a2:bc:59:87:c4:8f:0f:d3:ff:60:
         35:83:3f:59:93:1a:fc:ff:c3:95:36:70:33:03:16:60:74:3f:
         af:e4:1f:5b:e7:03:c5:38:97:19:4a:c3:95:f4:a4:36:85:a9:
         f5:d2:68:8c:8b:3d:3a:ae:5c:d6:ac:59:f4:25:70:e5:9b:c7:
         a0:6a:18:a0:78:09:e4:c7:cd:82:8e:b2:d7:42:87:c1:de:0f:
         94:e8:d9:5d:ce:ef:87:f9:88:37:19:7b:67:27:60:62:9e:96:
         4b:df:cb:bb:bd:a2:a9:b2:6d:8e:8e:bf:cd:c8:11:11:39:77:
         57:52:c6:8d:74:b9:0d:cc:ab:89:37:9b:a9:b2:9d:2b:74:7f:
         aa:4a:60:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----