Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/323830343a346530383a3a2f33322d3332203d3e20323638323335.roa
File:                     323830343a346530383a3a2f33322d3332203d3e20323638323335.roa (raw, json)
Hash identifier:          rnrdl/fBCWV7KQWe0O7/EGodW/T2iAU1ipl+wV4UYbI=
Subject key identifier:   CB:1D:4C:96:FF:E2:EA:DC:D9:06:62:BB:7A:F2:B1:BC:EF:E2:0A:74
Certificate issuer:       /CN=5AB9CDBE226CB666D8272B3C166713B1F10A56C5
Certificate serial:       671DE06214649E0AD4E3189A6F64953D0E2CEADD
Authority key identifier: 5A:B9:CD:BE:22:6C:B6:66:D8:27:2B:3C:16:67:13:B1:F1:0A:56:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/323830343a346530383a3a2f33322d3332203d3e20323638323335.roa
Signing time:             Thu 25 Jul 2024 13:59:47 +0000
ROA not before:           Thu 25 Jul 2024 13:54:47 +0000
ROA not after:            Fri 25 Jul 2025 13:59:47 +0000
asID:                     268235
IP address blocks:        2804:4e08::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:1d:e0:62:14:64:9e:0a:d4:e3:18:9a:6f:64:95:3d:0e:2c:ea:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AB9CDBE226CB666D8272B3C166713B1F10A56C5
        Validity
            Not Before: Jul 25 13:54:47 2024 GMT
            Not After : Jul 25 13:59:47 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:04:75:34:a7:da:82:db:2a:93:7f:40:54:58:
                    28:e1:35:23:96:46:fa:86:04:86:60:15:6f:b0:d7:
                    b5:aa:fe:7a:4f:4e:ff:71:14:81:04:e5:16:7d:fb:
                    cb:51:68:41:6a:3b:c2:58:6b:fe:59:27:e6:4b:ec:
                    22:22:45:01:c0:01:48:26:95:8d:46:8e:45:fd:98:
                    e5:78:fd:f6:43:3a:81:cb:58:5d:14:e0:a0:7b:21:
                    f7:2b:ea:48:68:0e:87:a9:00:f6:d5:17:ce:73:c3:
                    45:48:1f:d4:fa:b5:22:5e:ed:d6:00:a4:89:09:22:
                    85:98:c8:2d:09:ab:77:40:8d:60:8d:f3:05:80:41:
                    11:f7:fd:8d:84:f7:4e:f5:81:2a:4a:41:0d:5e:4d:
                    0f:38:8a:a0:aa:d5:99:8b:c2:88:fd:4b:b3:c5:6a:
                    67:5d:67:98:ca:83:9c:e7:79:71:84:92:f6:95:ea:
                    b2:95:d7:66:d5:f2:b4:e2:33:6a:5e:45:8c:4f:75:
                    8b:d6:c0:34:30:5e:ed:ea:66:c5:4d:a1:dd:20:4e:
                    a3:bb:71:68:ba:b7:93:70:11:aa:3c:c2:a1:5d:97:
                    09:5e:df:70:e6:d8:ae:9c:14:7f:1b:45:93:d3:13:
                    5d:8d:cd:ca:e0:a9:e7:2f:5e:ca:bb:79:53:69:20:
                    98:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1D:4C:96:FF:E2:EA:DC:D9:06:62:BB:7A:F2:B1:BC:EF:E2:0A:74
            X509v3 Authority Key Identifier:
                keyid:5A:B9:CD:BE:22:6C:B6:66:D8:27:2B:3C:16:67:13:B1:F1:0A:56:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/323830343a346530383a3a2f33322d3332203d3e20323638323335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e08::/32

    Signature Algorithm: sha256WithRSAEncryption
         b7:b9:09:6f:9d:4f:77:31:3d:52:78:f3:f8:92:6b:c9:4d:57:
         75:70:3a:4b:74:3b:08:64:2f:b0:dc:4f:f5:06:6c:20:0d:50:
         41:6b:31:b8:04:49:b0:4e:3d:77:b1:08:d6:3b:94:f5:5d:93:
         ef:1e:3d:90:07:56:a1:17:80:2d:96:9e:fe:a0:98:93:4f:26:
         64:24:cc:12:2d:95:e6:87:e1:6c:a6:65:23:52:42:e3:ae:74:
         c2:90:c9:5a:19:3e:ac:a3:5f:65:21:40:5a:75:43:c3:5c:10:
         77:a6:8b:36:a2:9a:b6:fe:69:6e:4a:f1:29:14:74:7c:86:9f:
         40:45:b1:c2:58:48:7d:75:8e:e7:ad:e9:0e:a7:d4:3b:a3:7d:
         15:b3:fc:01:0b:0f:60:26:6d:2c:fd:60:69:9f:2b:81:db:26:
         6b:ba:81:1f:6f:28:5a:a6:1c:e8:c8:19:2d:34:f5:fc:90:fa:
         e9:93:7c:e1:fa:25:5c:f0:8a:7e:73:e6:fd:a2:85:8f:fd:b5:
         86:47:ad:91:0f:1b:a0:e7:40:8b:e0:8c:81:7c:39:a2:e2:01:
         ce:1b:fe:c1:66:15:b4:8b:14:ae:d2:ca:26:52:e1:0f:1c:f8:
         62:3e:a1:d8:43:74:f8:6c:eb:99:d9:26:3c:1b:d7:ce:0b:7c:
         4c:84:29:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----