Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/323830343a3362383a343a31363a3a3634342f3132362d313236203d3e203532393635.roa
File:                     323830343a3362383a343a31363a3a3634342f3132362d313236203d3e203532393635.roa (raw, json)
Hash identifier:          OZN07a9panwUG59q0uc84Slle6nphCCnXPccO+otJyE=
Subject key identifier:   E6:D0:6C:1F:6B:3E:E0:30:05:B7:2E:CB:03:DE:E7:76:31:EC:1E:D0
Certificate issuer:       /CN=143582F75704EEF8880AF5E444EE85042913D47D
Certificate serial:       614604ED124500B1F9F991EAA0944E8547C90E1B
Authority key identifier: 14:35:82:F7:57:04:EE:F8:88:0A:F5:E4:44:EE:85:04:29:13:D4:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/143582F75704EEF8880AF5E444EE85042913D47D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/323830343a3362383a343a31363a3a3634342f3132362d313236203d3e203532393635.roa
Signing time:             Tue 17 Oct 2023 15:50:51 +0000
ROA not before:           Tue 17 Oct 2023 15:45:51 +0000
ROA not after:            Tue 15 Oct 2024 15:50:51 +0000
asID:                     52965
IP address blocks:        2804:3b8:4:16::644/126 maxlen: 126

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:46:04:ed:12:45:00:b1:f9:f9:91:ea:a0:94:4e:85:47:c9:0e:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143582F75704EEF8880AF5E444EE85042913D47D
        Validity
            Not Before: Oct 17 15:45:51 2023 GMT
            Not After : Oct 15 15:50:51 2024 GMT
        Subject: CN=E6D06C1F6B3EE03005B72ECB03DEE77631EC1ED0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:92:90:90:ad:52:8d:89:6e:fb:d6:01:75:e5:
                    bd:f7:23:14:c3:de:6e:65:13:46:66:e2:f8:94:d3:
                    72:7d:c6:d6:3f:62:3b:94:97:6f:7e:3e:36:e7:cd:
                    80:e9:54:71:4e:4c:d5:5e:01:a9:e8:ef:3a:da:e7:
                    11:62:e7:96:5f:11:1b:ec:5a:cf:31:21:cc:6b:0c:
                    ad:17:dd:56:09:25:3e:5c:f8:65:67:e4:e4:5f:4c:
                    d2:b9:6a:e1:9e:62:96:88:6b:72:f9:d0:57:41:09:
                    cc:5f:60:a0:3d:14:7a:0e:79:28:be:6e:5a:46:9b:
                    d7:4b:fd:4f:14:b4:74:65:a9:f4:07:b5:a2:9b:07:
                    5f:27:77:96:c1:62:36:a5:0b:83:47:a3:c0:e3:1c:
                    62:22:6c:ea:0a:79:8a:6c:96:01:2c:d8:de:aa:95:
                    97:b4:a2:6b:1a:cc:3c:d0:2b:33:35:0b:8e:5e:45:
                    e5:81:13:42:71:ef:dc:50:01:c9:d5:36:8c:68:d2:
                    dd:0a:e5:97:38:ab:ae:fb:60:6a:6b:46:59:56:94:
                    94:f1:0a:1a:fc:30:d0:6c:c8:f7:b6:b7:64:dd:99:
                    d9:cc:7a:8e:a0:1b:4a:f2:3c:e6:ae:84:7a:40:41:
                    3d:6c:b0:ac:95:91:ea:71:8c:96:60:ba:68:39:e3:
                    88:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D0:6C:1F:6B:3E:E0:30:05:B7:2E:CB:03:DE:E7:76:31:EC:1E:D0
            X509v3 Authority Key Identifier:
                keyid:14:35:82:F7:57:04:EE:F8:88:0A:F5:E4:44:EE:85:04:29:13:D4:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/143582F75704EEF8880AF5E444EE85042913D47D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/143582F75704EEF8880AF5E444EE85042913D47D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/323830343a3362383a343a31363a3a3634342f3132362d313236203d3e203532393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b8:4:16:0:0:0:644/126

    Signature Algorithm: sha256WithRSAEncryption
         b6:35:6a:fb:59:af:cd:bc:e4:8d:a9:e2:ec:6d:7e:33:be:40:
         74:51:50:74:0d:93:47:a5:c1:89:f0:e6:5b:76:83:fe:bc:ca:
         af:62:69:b0:24:4a:10:25:74:fb:9c:7b:d7:5f:12:6a:1f:81:
         c7:5c:4d:a3:6e:14:07:03:c2:fe:a2:58:58:c5:1b:4d:4e:0d:
         61:df:fc:cc:f2:b8:1b:83:0c:3a:2e:05:6c:16:02:c8:02:56:
         14:d7:82:7f:02:7d:51:38:8b:9d:a0:4d:50:41:07:46:fe:c5:
         dd:38:2d:ae:06:91:34:12:15:d9:58:a0:3e:b3:0f:1f:4e:c2:
         bb:dc:7f:3e:cd:73:83:3c:56:25:16:c9:6c:ee:9b:47:1b:de:
         39:6d:bc:bc:7a:0f:46:e9:6a:3d:3a:fd:ec:c4:9a:e6:fe:8d:
         cb:81:61:b3:73:98:0a:ed:0c:04:bd:ca:12:61:d7:95:f1:22:
         b7:55:2f:cb:23:4a:89:86:78:47:15:3a:31:d9:98:4f:bc:78:
         b0:1f:67:22:62:ed:c4:d7:58:67:a6:6f:07:f8:66:9e:8d:5d:
         0d:33:71:d2:cc:2d:c7:8e:a8:38:55:f0:c4:d8:90:dc:d9:ef:
         bd:7e:c6:87:e8:6b:72:22:de:9f:0c:19:0b:d8:f8:f4:af:11:
         e0:d5:56:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----