Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/323830343a326236383a3a2f33322d3333203d3e20323635313532.roa
File:                     323830343a326236383a3a2f33322d3333203d3e20323635313532.roa (raw, json)
Hash identifier:          w2Xt42L7WzoSHYhp/8EKwJ+JvgofdZ+vq4WHsu9bGvA=
Subject key identifier:   29:12:5A:8F:AE:FB:25:D6:C6:97:E3:5D:CD:9D:C6:0A:AE:2B:5B:E1
Certificate issuer:       /CN=81322C566E24B41E61B4AD67166BF432862840AC
Certificate serial:       6FE84AA9BBDF2D5FAECC81236A69C4D3BE5449E7
Authority key identifier: 81:32:2C:56:6E:24:B4:1E:61:B4:AD:67:16:6B:F4:32:86:28:40:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81322C566E24B41E61B4AD67166BF432862840AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/323830343a326236383a3a2f33322d3333203d3e20323635313532.roa
Signing time:             Sat 24 Feb 2024 11:35:49 +0000
ROA not before:           Sat 24 Feb 2024 11:30:49 +0000
ROA not after:            Sat 22 Feb 2025 11:35:49 +0000
asID:                     265152
IP address blocks:        2804:2b68::/32 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e8:4a:a9:bb:df:2d:5f:ae:cc:81:23:6a:69:c4:d3:be:54:49:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81322C566E24B41E61B4AD67166BF432862840AC
        Validity
            Not Before: Feb 24 11:30:49 2024 GMT
            Not After : Feb 22 11:35:49 2025 GMT
        Subject: CN=29125A8FAEFB25D6C697E35DCD9DC60AAE2B5BE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:72:4e:05:c6:7b:3e:6f:34:74:0c:ab:13:56:
                    16:14:e0:4b:30:21:97:fe:d6:44:f4:b5:28:57:3a:
                    cc:f7:8f:d3:d1:98:c2:92:86:a9:06:96:5f:1e:62:
                    ac:44:92:55:96:94:d6:6f:d9:64:0b:7b:10:4e:47:
                    4c:b8:95:28:70:9e:91:21:86:70:35:f3:7d:19:ea:
                    e0:2f:c2:d2:1e:0d:b4:4b:c9:78:68:e3:34:80:33:
                    18:ca:d1:de:0d:a3:cd:88:24:98:cc:d4:56:ef:9f:
                    fb:89:28:1b:8e:d4:3f:77:0b:2c:6a:0e:7f:3b:8a:
                    05:b4:3d:45:e4:32:a5:9c:a5:bf:de:d5:39:8a:d3:
                    b4:af:1d:e3:44:8b:34:2a:d8:b7:ec:05:3c:b7:ef:
                    76:e0:42:26:0b:7f:91:40:a2:ca:86:6c:bb:67:4d:
                    d7:17:ae:d8:c0:5d:6d:fa:79:30:7f:f8:e8:82:d8:
                    a8:19:c2:56:04:5f:d8:43:9b:f8:e0:9a:ab:0b:58:
                    a8:55:f0:b3:f7:7e:d0:2f:50:f0:af:ec:ff:45:c9:
                    98:b3:c7:a7:1e:e0:72:f7:9d:79:c4:d2:39:00:59:
                    7b:14:76:0b:c7:73:97:27:2e:23:d6:47:9a:9b:36:
                    90:51:dc:3b:b1:9e:c7:6b:6c:8d:27:30:6a:f6:2d:
                    61:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:12:5A:8F:AE:FB:25:D6:C6:97:E3:5D:CD:9D:C6:0A:AE:2B:5B:E1
            X509v3 Authority Key Identifier:
                keyid:81:32:2C:56:6E:24:B4:1E:61:B4:AD:67:16:6B:F4:32:86:28:40:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/81322C566E24B41E61B4AD67166BF432862840AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81322C566E24B41E61B4AD67166BF432862840AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/323830343a326236383a3a2f33322d3333203d3e20323635313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b68::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:9d:69:e5:ac:a5:25:62:1b:1e:41:8c:1f:5b:a9:26:d9:88:
         3b:7a:22:42:39:a9:30:77:20:6f:73:7d:07:26:1f:8f:56:62:
         90:8e:98:61:d5:4b:6e:0f:6e:5a:24:96:68:08:66:d8:c6:11:
         c2:44:cb:77:7d:6d:b6:6d:df:45:cf:70:76:ce:d2:45:34:f8:
         48:bc:d8:39:21:2a:a1:0e:4d:73:3b:29:dd:1e:2b:0a:22:c3:
         65:b2:39:e2:8d:c2:ca:f9:6a:4d:3d:59:29:4c:62:b4:e6:39:
         ec:6d:77:c2:d5:e9:a7:c0:d4:a3:e5:e1:96:9f:3b:4f:13:eb:
         dd:6d:9d:02:b4:03:b2:ea:f2:5f:d8:aa:1b:01:82:3d:08:41:
         8c:c4:a2:05:59:fd:38:c4:b4:69:bb:44:bb:fa:dc:af:b8:71:
         67:10:dd:99:22:19:a0:85:94:44:95:cb:3a:12:b2:66:63:bc:
         be:46:1a:24:ee:12:e5:c1:d3:77:a2:2d:1a:cc:45:6b:6b:1d:
         29:49:67:ec:8c:bd:0d:6d:86:15:76:07:8e:77:0b:ce:7f:3b:
         07:d3:64:94:00:4f:fb:92:36:2d:2d:82:39:88:69:6e:b0:04:
         dc:de:f6:93:da:c8:5c:3e:91:88:51:a6:d0:67:d5:21:8b:df:
         32:ad:bf:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----