Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/323830343a383461633a3a2f33322d3438203d3e203238323233.roa
File:                     323830343a383461633a3a2f33322d3438203d3e203238323233.roa (raw, json)
Hash identifier:          XqDdueMvwjHwo/OJE8HPf7bUUc3NQfGC9gLLL8sur3I=
Subject key identifier:   BA:C2:53:5E:0C:7E:2A:4D:15:A6:D1:57:2B:6B:65:D9:69:69:8A:B4
Certificate issuer:       /CN=3D9D3ED68CC624CD26DC2CCE2512A5ADAF1DAA55
Certificate serial:       1508E78A6FCADC441855A65D80A6DF8C83BC416C
Authority key identifier: 3D:9D:3E:D6:8C:C6:24:CD:26:DC:2C:CE:25:12:A5:AD:AF:1D:AA:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D9D3ED68CC624CD26DC2CCE2512A5ADAF1DAA55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/323830343a383461633a3a2f33322d3438203d3e203238323233.roa
Signing time:             Mon 25 Sep 2023 20:11:21 +0000
ROA not before:           Mon 25 Sep 2023 20:06:21 +0000
ROA not after:            Mon 23 Sep 2024 20:11:21 +0000
asID:                     28223
IP address blocks:        2804:84ac::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:08:e7:8a:6f:ca:dc:44:18:55:a6:5d:80:a6:df:8c:83:bc:41:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D9D3ED68CC624CD26DC2CCE2512A5ADAF1DAA55
        Validity
            Not Before: Sep 25 20:06:21 2023 GMT
            Not After : Sep 23 20:11:21 2024 GMT
        Subject: CN=BAC2535E0C7E2A4D15A6D1572B6B65D969698AB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:13:63:9e:de:28:01:28:32:a3:d8:2e:67:f3:
                    b9:fb:4c:56:9a:96:ea:9d:7a:1d:02:47:e6:95:b6:
                    72:50:48:b0:65:02:5e:96:7b:f5:32:d5:e0:06:53:
                    63:a4:55:e1:a0:97:4d:44:84:55:57:3f:dc:74:8f:
                    ba:4b:01:fc:f9:5f:a0:77:f6:ed:71:e0:c6:96:00:
                    ba:0c:ef:68:18:c5:4a:88:c2:0b:2f:37:23:7a:92:
                    bb:f3:05:d4:4b:3e:a5:97:f1:87:6b:87:ba:39:21:
                    06:61:f9:04:a7:06:9f:ee:d4:e9:97:46:89:5c:17:
                    15:f5:d9:45:8f:96:2d:07:b1:ba:af:7f:60:6c:12:
                    fd:91:91:0f:17:53:94:13:8f:be:e6:77:0e:3d:59:
                    27:11:22:c5:5a:d4:ca:2d:4f:2e:1e:b8:a9:cc:6f:
                    a2:7e:74:f4:3b:8c:04:ec:00:7e:ad:61:44:71:9e:
                    af:d0:d4:fa:16:05:23:6e:32:e8:2c:5b:00:66:89:
                    b0:34:3d:ec:15:c2:c7:a9:f4:e9:4d:1b:af:0f:34:
                    61:ff:5b:92:92:35:0a:d3:1c:e8:33:c0:e8:59:98:
                    1c:58:06:57:13:d2:e6:bc:c4:33:ee:7b:29:ad:7b:
                    6d:31:43:e6:72:15:f8:56:ef:a2:5b:e1:3a:0b:44:
                    58:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C2:53:5E:0C:7E:2A:4D:15:A6:D1:57:2B:6B:65:D9:69:69:8A:B4
            X509v3 Authority Key Identifier:
                keyid:3D:9D:3E:D6:8C:C6:24:CD:26:DC:2C:CE:25:12:A5:AD:AF:1D:AA:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/3D9D3ED68CC624CD26DC2CCE2512A5ADAF1DAA55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D9D3ED68CC624CD26DC2CCE2512A5ADAF1DAA55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/323830343a383461633a3a2f33322d3438203d3e203238323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:84ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:37:a7:9a:be:f4:7e:d2:9c:d3:51:e5:c0:14:86:d5:4f:05:
         7e:8b:73:f8:f8:c4:ea:d3:60:ca:9d:99:0a:ba:96:7e:ba:aa:
         5d:e9:93:1f:ce:a4:fa:1b:62:a3:7f:3e:9b:30:0d:2d:ff:e3:
         9b:bf:7e:8b:9d:f8:05:c9:c9:7f:50:fa:eb:dc:b0:0f:6a:2b:
         84:4b:d3:e6:bc:2f:42:9e:8e:c0:d6:67:e7:51:2c:32:62:4b:
         c2:21:8e:98:e0:34:34:57:52:17:d6:5d:3b:e0:f3:60:bb:35:
         63:0b:df:15:aa:65:78:c2:a4:14:33:81:61:00:0c:26:62:b9:
         72:f2:7a:a4:f2:57:53:2f:81:69:c0:ab:7b:95:33:8c:a1:c3:
         44:a7:4e:4f:9e:33:c5:6d:f9:f7:e8:2d:27:43:1f:04:3f:e0:
         ac:ef:05:70:03:d9:b5:b0:ee:cf:63:66:55:59:1a:33:11:37:
         92:0c:1a:65:5f:2b:0a:b5:c3:11:41:ef:8b:34:68:20:82:26:
         8d:05:b5:20:30:d3:8a:14:dd:82:da:e5:a1:84:3b:c3:c2:f3:
         85:51:d9:a4:cc:97:52:10:67:e3:72:1f:c5:ff:ab:ec:cb:e2:
         b6:18:1c:57:b7:89:17:a1:35:e1:6e:39:c7:c2:73:eb:99:ae:
         6d:18:3c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----