Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/323830343a316239633a3a2f33322d3438203d3e203631373337.roa
File:                     323830343a316239633a3a2f33322d3438203d3e203631373337.roa (raw, json)
Hash identifier:          xLqrrvTWLpfAqXIQ0YzcKamUbUuqG9ixIH1huElmG1o=
Subject key identifier:   FC:63:8E:39:AD:82:0C:59:FB:57:67:EA:B9:12:1A:C9:1F:5B:0C:E8
Certificate issuer:       /CN=377C3BB25A5927BD1C32CCF11D872666A178D7B6
Certificate serial:       6856F6F8458456DCF41AF9184859A9DA1382CD61
Authority key identifier: 37:7C:3B:B2:5A:59:27:BD:1C:32:CC:F1:1D:87:26:66:A1:78:D7:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/377C3BB25A5927BD1C32CCF11D872666A178D7B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/323830343a316239633a3a2f33322d3438203d3e203631373337.roa
Signing time:             Wed 19 Jul 2023 17:52:00 +0000
ROA not before:           Wed 19 Jul 2023 17:47:00 +0000
ROA not after:            Wed 17 Jul 2024 17:52:00 +0000
asID:                     61737
IP address blocks:        2804:1b9c::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:56:f6:f8:45:84:56:dc:f4:1a:f9:18:48:59:a9:da:13:82:cd:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=377C3BB25A5927BD1C32CCF11D872666A178D7B6
        Validity
            Not Before: Jul 19 17:47:00 2023 GMT
            Not After : Jul 17 17:52:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e6:b7:40:95:8c:84:f2:cb:a7:2b:9f:20:52:
                    31:ca:f3:60:00:1e:d0:27:ed:17:6d:1a:0b:32:f5:
                    99:bf:de:da:26:de:e9:7c:da:a0:e5:17:16:6b:1c:
                    d3:ca:72:3d:ae:82:22:65:a6:c1:07:3f:58:d9:a8:
                    4c:27:a0:89:7b:14:da:ba:0d:78:54:fa:22:31:06:
                    7d:d1:9b:d1:cb:e1:1c:1f:0e:84:54:0d:10:36:ec:
                    a0:1a:22:a4:31:16:48:8c:25:e8:c0:e9:9a:47:d2:
                    b4:dc:43:89:b6:0b:2d:2b:23:52:4c:93:e2:81:79:
                    aa:f2:65:f9:5b:64:6f:49:ba:a6:af:84:b9:e3:f9:
                    64:b3:96:22:1c:f2:4a:34:08:3e:a4:1b:95:e7:ad:
                    9b:67:d9:97:da:27:5a:f6:29:3e:fb:25:aa:ec:4e:
                    ec:18:c8:74:62:ce:5c:d4:46:e4:88:68:32:83:c5:
                    cc:76:f8:d1:d1:9e:57:09:38:3a:91:36:f1:32:58:
                    19:0b:e2:90:42:02:20:df:eb:3e:79:58:8d:5b:97:
                    41:65:54:82:9d:96:a5:bf:f8:55:33:7c:21:f7:86:
                    a6:ae:3a:d3:11:6d:a3:22:7b:25:64:a8:9d:1c:e4:
                    4e:d0:fb:70:43:06:44:84:32:73:a1:de:19:bd:4e:
                    68:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:63:8E:39:AD:82:0C:59:FB:57:67:EA:B9:12:1A:C9:1F:5B:0C:E8
            X509v3 Authority Key Identifier:
                keyid:37:7C:3B:B2:5A:59:27:BD:1C:32:CC:F1:1D:87:26:66:A1:78:D7:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/377C3BB25A5927BD1C32CCF11D872666A178D7B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/377C3BB25A5927BD1C32CCF11D872666A178D7B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/323830343a316239633a3a2f33322d3438203d3e203631373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b9c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:cc:1c:24:76:06:2a:1a:46:d1:22:37:2f:f8:bd:cd:28:2f:
         58:4d:a7:9a:02:71:f5:5c:d5:a0:16:d6:d3:63:04:a4:72:07:
         0b:f8:32:8f:bd:0c:e6:b3:3e:ae:a3:eb:d9:4b:c9:ec:c0:96:
         99:6b:ff:89:f1:fb:94:14:d3:e3:ae:26:da:5e:8d:c9:93:66:
         b0:a3:29:64:4e:3e:4d:91:1d:67:07:15:04:bf:91:3d:5e:62:
         01:5f:17:2d:4f:29:62:31:94:c9:91:15:b5:a7:06:e0:80:39:
         05:57:19:ca:cc:bd:e3:99:96:87:e5:2e:60:6c:fe:95:9c:b6:
         86:02:8a:9c:fb:37:5d:f6:83:5d:b0:d0:88:0e:2d:91:ec:f3:
         ab:e4:68:83:ed:0a:01:5c:b1:4f:7d:58:da:01:5a:8f:bc:f8:
         6f:7f:b1:21:52:6a:76:67:74:d5:13:23:c6:9c:1d:ad:ef:67:
         6d:7f:72:f9:df:e6:56:d0:3b:4f:e9:b9:73:24:0a:4c:7e:b8:
         b9:f9:8b:85:4a:a0:dd:c8:41:e3:d1:f6:1d:dd:8d:5d:11:08:
         17:66:dd:c2:e9:d8:af:21:22:8d:df:53:be:46:08:ab:2e:47:
         df:38:0a:35:de:d6:07:9b:db:a2:95:fe:d9:a7:28:2e:f6:04:
         b5:31:55:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----