Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F3bwtpDxJGEpW1C8BYQd9RSxxyLqiU93YQd62zf3rgJ8/0/323830343a373963383a3a2f33322d3332203d3e20323731333237.roa
File:                     323830343a373963383a3a2f33322d3332203d3e20323731333237.roa (raw, json)
Hash identifier:          CjOS5XwQ1J/LeJvWxho9uvPCWmhEkLfLapTRTR03R0o=
Subject key identifier:   F0:D4:99:02:F9:BD:86:ED:72:AB:BC:DD:46:9B:9C:12:0A:C1:8B:EC
Certificate issuer:       /CN=E6ED52F9F0DCDFD84391E03FB3FEAF8A3EB74BB0
Certificate serial:       2AFE0F7FD124125074998CD3CA9C4E2CC350B61E
Authority key identifier: E6:ED:52:F9:F0:DC:DF:D8:43:91:E0:3F:B3:FE:AF:8A:3E:B7:4B:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6ED52F9F0DCDFD84391E03FB3FEAF8A3EB74BB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F3bwtpDxJGEpW1C8BYQd9RSxxyLqiU93YQd62zf3rgJ8/0/323830343a373963383a3a2f33322d3332203d3e20323731333237.roa
Signing time:             Tue 14 Nov 2023 17:12:59 +0000
ROA not before:           Tue 14 Nov 2023 17:07:59 +0000
ROA not after:            Tue 12 Nov 2024 17:12:59 +0000
asID:                     271327
IP address blocks:        2804:79c8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:fe:0f:7f:d1:24:12:50:74:99:8c:d3:ca:9c:4e:2c:c3:50:b6:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6ED52F9F0DCDFD84391E03FB3FEAF8A3EB74BB0
        Validity
            Not Before: Nov 14 17:07:59 2023 GMT
            Not After : Nov 12 17:12:59 2024 GMT
        Subject: CN=F0D49902F9BD86ED72ABBCDD469B9C120AC18BEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b1:2e:98:19:8a:98:b8:db:82:94:9d:37:02:
                    a8:19:8b:e0:1b:86:8e:b3:3e:25:7e:b3:0a:35:f1:
                    5c:bd:83:e9:70:d1:36:07:02:71:3c:d2:f2:d1:d5:
                    02:10:d7:4f:07:84:4c:f0:5e:21:15:59:d1:51:95:
                    ba:d2:af:12:b7:60:2b:48:e8:b0:b9:0e:30:96:7b:
                    91:83:9e:31:2d:dc:f0:29:d2:eb:fe:88:b7:54:ce:
                    d6:f5:4d:5b:e5:a8:c9:02:0f:2d:3c:27:15:58:6f:
                    69:ff:1e:0c:b9:a9:70:36:ca:f9:6c:7f:27:27:4d:
                    fa:75:a8:20:e6:7a:fe:c1:9c:e3:42:b5:dc:46:c1:
                    f5:70:da:15:c8:f1:3b:27:b2:36:b9:24:77:a7:d6:
                    9f:e5:5c:4a:e6:88:7a:76:a0:fe:a1:a2:1f:e2:86:
                    d6:06:b8:55:77:84:8b:76:31:6e:48:49:39:68:7e:
                    0b:a3:fd:12:90:01:d5:7f:7e:8d:25:9b:8c:5a:09:
                    15:02:61:76:6d:91:5c:d6:5f:57:b4:b8:bb:7c:b1:
                    50:73:48:c4:de:47:d6:6c:ed:47:3d:9c:0f:db:63:
                    b6:0f:4d:3d:2e:3f:52:67:4b:a0:ff:ca:c0:b6:ef:
                    51:35:f2:93:28:e0:bb:a3:c8:a3:f8:13:66:0d:ac:
                    ab:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D4:99:02:F9:BD:86:ED:72:AB:BC:DD:46:9B:9C:12:0A:C1:8B:EC
            X509v3 Authority Key Identifier:
                keyid:E6:ED:52:F9:F0:DC:DF:D8:43:91:E0:3F:B3:FE:AF:8A:3E:B7:4B:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F3bwtpDxJGEpW1C8BYQd9RSxxyLqiU93YQd62zf3rgJ8/0/E6ED52F9F0DCDFD84391E03FB3FEAF8A3EB74BB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6ED52F9F0DCDFD84391E03FB3FEAF8A3EB74BB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F3bwtpDxJGEpW1C8BYQd9RSxxyLqiU93YQd62zf3rgJ8/0/323830343a373963383a3a2f33322d3332203d3e20323731333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:79c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:1b:f4:31:e2:4b:3a:26:53:61:e2:da:f5:74:81:2b:4f:fe:
         f0:54:51:75:e8:d2:8c:a7:17:94:4f:d2:e7:49:ad:8e:58:c5:
         15:35:18:04:c3:2b:9b:fb:cc:62:90:34:e4:2b:09:f2:5d:6e:
         d5:c9:6d:90:af:44:0a:5c:bf:01:08:a3:82:b3:5d:28:eb:28:
         25:5d:60:0e:1f:bc:1d:78:5a:67:1b:d8:04:1c:ca:12:3e:2a:
         54:e8:25:bb:cb:6e:64:53:6a:26:b4:e4:25:f7:bc:c3:32:e8:
         cd:11:26:44:5e:5d:7a:d3:82:c5:72:df:d7:7c:c5:30:06:0b:
         b7:c4:12:82:84:eb:3a:e1:9f:c8:33:e2:21:a1:ba:14:c1:82:
         02:a5:c7:d7:da:24:91:e9:0f:98:98:66:15:46:71:09:7d:5d:
         53:ca:79:a1:86:28:84:24:e0:b2:97:a6:e8:c1:42:77:f5:9b:
         50:18:33:77:57:72:93:ec:12:d3:9a:5a:c2:ee:8f:2e:25:9b:
         27:cc:cf:05:aa:86:05:5e:d7:58:a7:9a:c4:c6:cf:64:e0:67:
         49:e1:3c:38:69:63:ff:54:43:0f:b7:bd:94:2e:4e:0e:4c:b0:
         6e:f8:c0:e0:24:52:df:a7:f3:42:f9:68:88:68:d5:c4:b3:35:
         f1:e6:8e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----