Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G4UU4xTfxfsq4xfs9dCN8o2kSQwY6RZGhd65bTmc8rgm/0/323830343a356432303a3a2f33322d3335203d3e20323638393532.roa
File:                     323830343a356432303a3a2f33322d3335203d3e20323638393532.roa (raw, json)
Hash identifier:          9clic7hPDz/NFC++u+xu0nrlRYoeUN45Y4oXR5AEj/Q=
Subject key identifier:   B0:AC:D7:2E:9F:0A:12:68:C5:9C:E2:3E:72:EB:67:4A:8E:B8:96:D0
Certificate issuer:       /CN=255391F2D481A010D34E04F0C63EC1E283BD7B55
Certificate serial:       493A33CF8D36B542D6AB65180E601DF395C8A9C1
Authority key identifier: 25:53:91:F2:D4:81:A0:10:D3:4E:04:F0:C6:3E:C1:E2:83:BD:7B:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/255391F2D481A010D34E04F0C63EC1E283BD7B55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4UU4xTfxfsq4xfs9dCN8o2kSQwY6RZGhd65bTmc8rgm/0/323830343a356432303a3a2f33322d3335203d3e20323638393532.roa
Signing time:             Thu 15 Jun 2023 04:00:00 +0000
ROA not before:           Thu 15 Jun 2023 03:55:00 +0000
ROA not after:            Sat 15 Jun 2024 04:00:00 +0000
asID:                     268952
IP address blocks:        2804:5d20::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:3a:33:cf:8d:36:b5:42:d6:ab:65:18:0e:60:1d:f3:95:c8:a9:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=255391F2D481A010D34E04F0C63EC1E283BD7B55
        Validity
            Not Before: Jun 15 03:55:00 2023 GMT
            Not After : Jun 15 04:00:00 2024 GMT
        Subject: CN=3082010A0282010100D0BE64FAB34FBBD81A66F74242F6475D9D4A174163B1BB2EE783A0B5C5B46B73EB82997EC263291C9E43CD01D856B8F6AAACC7D40DD7CAD2EE660C869FCE387A07A8976A1EBA6354C9692036AE6C6BFB31D1AFBE5837C634E99DE326B0D5A628313FA2C9E801DF584C82600956980871BB2A5D10AE66023692AB1D64320B92D65B14F0A9C6FE22F58000354ED4FC6A55519E656728F4B5C03C4DA6F5DC5D1E8AC5FEEE0E1C919F9468D071A6D7C69A8D03C7AB721E0D8FA579EE014DB06336CA47F23A734F920FF8B03F945D2B5989074054CC8ED938FCAC5A1FCE8D95B238CB0BDC560AC518F24DF5B086823657283FE8A3C73FF85E5DC3AE4989D64804C5D30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:be:64:fa:b3:4f:bb:d8:1a:66:f7:42:42:f6:
                    47:5d:9d:4a:17:41:63:b1:bb:2e:e7:83:a0:b5:c5:
                    b4:6b:73:eb:82:99:7e:c2:63:29:1c:9e:43:cd:01:
                    d8:56:b8:f6:aa:ac:c7:d4:0d:d7:ca:d2:ee:66:0c:
                    86:9f:ce:38:7a:07:a8:97:6a:1e:ba:63:54:c9:69:
                    20:36:ae:6c:6b:fb:31:d1:af:be:58:37:c6:34:e9:
                    9d:e3:26:b0:d5:a6:28:31:3f:a2:c9:e8:01:df:58:
                    4c:82:60:09:56:98:08:71:bb:2a:5d:10:ae:66:02:
                    36:92:ab:1d:64:32:0b:92:d6:5b:14:f0:a9:c6:fe:
                    22:f5:80:00:35:4e:d4:fc:6a:55:51:9e:65:67:28:
                    f4:b5:c0:3c:4d:a6:f5:dc:5d:1e:8a:c5:fe:ee:0e:
                    1c:91:9f:94:68:d0:71:a6:d7:c6:9a:8d:03:c7:ab:
                    72:1e:0d:8f:a5:79:ee:01:4d:b0:63:36:ca:47:f2:
                    3a:73:4f:92:0f:f8:b0:3f:94:5d:2b:59:89:07:40:
                    54:cc:8e:d9:38:fc:ac:5a:1f:ce:8d:95:b2:38:cb:
                    0b:dc:56:0a:c5:18:f2:4d:f5:b0:86:82:36:57:28:
                    3f:e8:a3:c7:3f:f8:5e:5d:c3:ae:49:89:d6:48:04:
                    c5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:AC:D7:2E:9F:0A:12:68:C5:9C:E2:3E:72:EB:67:4A:8E:B8:96:D0
            X509v3 Authority Key Identifier:
                keyid:25:53:91:F2:D4:81:A0:10:D3:4E:04:F0:C6:3E:C1:E2:83:BD:7B:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4UU4xTfxfsq4xfs9dCN8o2kSQwY6RZGhd65bTmc8rgm/0/255391F2D481A010D34E04F0C63EC1E283BD7B55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/255391F2D481A010D34E04F0C63EC1E283BD7B55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4UU4xTfxfsq4xfs9dCN8o2kSQwY6RZGhd65bTmc8rgm/0/323830343a356432303a3a2f33322d3335203d3e20323638393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5d20::/32

    Signature Algorithm: sha256WithRSAEncryption
         c9:ae:b2:b5:7b:90:42:ea:22:60:59:fe:61:67:ba:0a:a7:4a:
         4e:2b:c2:44:9d:e2:46:ec:54:97:55:e6:1d:32:48:d7:ad:c1:
         44:ec:cd:e6:84:a0:e4:35:9c:dd:1d:75:25:e1:6e:b0:76:41:
         0d:4f:34:ca:e5:b1:44:75:d3:4c:8a:7f:aa:dd:76:69:fe:10:
         00:8c:b4:62:00:45:89:70:5f:66:db:dd:c8:99:15:83:fd:7a:
         2e:a7:b9:5a:a8:a6:d0:22:65:71:34:a3:8b:a2:7b:d0:5e:9b:
         2b:bb:6b:7b:0a:ef:40:cb:16:00:de:9b:f1:81:d3:ff:24:dd:
         7b:ee:17:54:3d:92:87:e6:22:81:22:5c:07:c9:f3:0f:01:9f:
         f3:9d:c3:15:e4:c8:17:be:47:1d:a2:2e:10:4a:ed:ac:a9:5e:
         6b:99:66:fa:6a:80:40:ed:25:31:f1:15:e0:1b:4c:e2:ac:88:
         88:d2:85:ab:cf:17:4f:dd:34:9b:97:3d:89:9c:47:fd:20:7a:
         26:ac:e9:b9:5a:2e:fb:f7:45:d0:fb:bd:aa:f2:b3:74:ec:1d:
         71:c9:ed:a7:26:12:45:79:35:56:96:b8:f9:22:0a:e8:81:22:
         46:a9:9d:41:e3:5b:76:48:ea:ff:1c:5d:b6:88:79:79:23:ff:
         29:c1:60:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----