Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8NAsWhpYGFucK1pecAewNFhq89Nh33GnjABbQsC7kAA/0/323830343a373361633a3a2f33322d3438203d3e20323730393330.roa
File:                     323830343a373361633a3a2f33322d3438203d3e20323730393330.roa (raw, json)
Hash identifier:          +yg7HtBeUHftq2G1MYQ2IJnESRfwmFQFH5CXq02jS10=
Subject key identifier:   23:E0:32:79:C8:66:B9:7F:73:10:94:2D:4B:90:0E:3B:3E:E5:95:ED
Certificate issuer:       /CN=69BAEDBA4E49257B951660C842A16EF5C736B492
Certificate serial:       72FD366B0C33FC62689A6737A55B009A5BCBA12F
Authority key identifier: 69:BA:ED:BA:4E:49:25:7B:95:16:60:C8:42:A1:6E:F5:C7:36:B4:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69BAEDBA4E49257B951660C842A16EF5C736B492.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8NAsWhpYGFucK1pecAewNFhq89Nh33GnjABbQsC7kAA/0/323830343a373361633a3a2f33322d3438203d3e20323730393330.roa
Signing time:             Mon 22 Jul 2024 12:50:51 +0000
ROA not before:           Mon 22 Jul 2024 12:45:51 +0000
ROA not after:            Mon 21 Jul 2025 12:50:51 +0000
asID:                     270930
IP address blocks:        2804:73ac::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:fd:36:6b:0c:33:fc:62:68:9a:67:37:a5:5b:00:9a:5b:cb:a1:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69BAEDBA4E49257B951660C842A16EF5C736B492
        Validity
            Not Before: Jul 22 12:45:51 2024 GMT
            Not After : Jul 21 12:50:51 2025 GMT
        Subject: CN=23E03279C866B97F7310942D4B900E3B3EE595ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a7:9e:28:94:37:ce:6f:d6:c2:d7:47:ad:f2:
                    c6:14:17:8d:96:1a:37:8d:1b:59:69:bb:d1:5f:9e:
                    ba:c5:76:26:4c:96:c9:82:fb:e4:95:72:ef:67:50:
                    68:94:74:ca:74:22:50:c9:b2:a6:86:d8:5b:ea:db:
                    48:e3:e7:aa:20:f8:6e:61:c5:4d:e4:1f:6f:12:59:
                    d3:b9:d2:41:73:04:b6:f7:ca:75:67:63:a5:1e:7b:
                    00:21:09:eb:3b:a1:48:6e:62:f8:3a:81:e9:d7:ba:
                    aa:b1:f8:e1:a4:d6:cb:67:d4:02:44:14:95:4c:56:
                    79:ca:5e:6a:b0:7e:3b:01:66:76:02:47:73:b5:d8:
                    0c:a7:e0:b4:3c:d3:c6:db:05:e0:ea:11:35:0f:78:
                    8c:4c:7a:a7:f8:65:92:68:de:9f:70:fb:84:d2:7c:
                    c3:ff:55:50:bb:40:d1:34:7a:0d:9e:ad:e5:54:94:
                    e6:f0:0a:1e:51:8e:4a:81:b9:6b:2a:a7:cb:ae:a8:
                    37:47:54:f8:a5:15:cd:83:47:e7:8d:91:43:55:a8:
                    c6:3e:2f:1c:04:00:55:c0:1f:c8:ac:f9:ae:11:e3:
                    a0:35:d2:85:c0:59:6e:22:fd:c2:f6:0d:b7:59:ce:
                    2b:26:cd:00:79:2e:bc:97:2d:0b:39:01:86:19:59:
                    2f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E0:32:79:C8:66:B9:7F:73:10:94:2D:4B:90:0E:3B:3E:E5:95:ED
            X509v3 Authority Key Identifier:
                keyid:69:BA:ED:BA:4E:49:25:7B:95:16:60:C8:42:A1:6E:F5:C7:36:B4:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8NAsWhpYGFucK1pecAewNFhq89Nh33GnjABbQsC7kAA/0/69BAEDBA4E49257B951660C842A16EF5C736B492.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69BAEDBA4E49257B951660C842A16EF5C736B492.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8NAsWhpYGFucK1pecAewNFhq89Nh33GnjABbQsC7kAA/0/323830343a373361633a3a2f33322d3438203d3e20323730393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:73ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:dd:63:c2:6c:d4:40:b8:5a:0a:67:07:5f:ed:e6:64:37:9e:
         bf:2c:af:02:f4:6e:83:a5:32:3a:b6:a3:67:be:26:2f:b4:03:
         fc:f1:94:20:27:2e:7b:59:77:83:6a:9d:a6:2d:25:af:dc:3e:
         68:eb:50:f7:bd:91:db:64:aa:d8:2a:96:2a:23:0a:9a:5d:79:
         7f:fc:cc:60:f3:0c:65:13:78:b1:da:34:58:d7:4c:62:c4:e3:
         f7:8a:90:49:6d:b2:2d:2a:01:db:44:75:2a:79:01:65:a6:a4:
         b7:3f:d8:b7:61:f3:91:df:fd:00:9b:5e:20:69:57:16:fe:1a:
         03:5f:95:d5:ce:d2:df:a3:7c:90:5b:4a:df:99:cf:a6:b8:23:
         ea:27:41:39:3f:3b:9f:2c:a6:dd:d9:a7:61:7a:b4:dc:87:14:
         28:c2:d2:41:35:39:95:43:34:ef:43:f8:1f:e0:cc:7d:29:95:
         ff:8e:b0:f2:dd:51:53:09:08:03:1b:ec:c9:70:45:a5:b9:c0:
         7e:f2:28:93:61:dd:ec:cd:d9:67:f2:ee:c0:95:b5:14:4c:3b:
         01:0d:54:93:06:2a:f5:20:01:8f:19:75:40:a5:d8:b2:65:e5:
         94:fb:56:a5:cd:5c:5b:2e:e6:7e:6f:91:19:05:38:91:c4:a2:
         f3:6d:cb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----