Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/323830343a313333383a343a3a2f34382d3438203d3e20323633353232.roa
File:                     323830343a313333383a343a3a2f34382d3438203d3e20323633353232.roa (raw, json)
Hash identifier:          wr4os8Fv4lEWBqci4fD1f5NbgN2u0bn/ZVaYP94L7i0=
Subject key identifier:   AD:4D:61:19:8D:F6:AD:1C:98:52:2B:23:36:2F:89:DD:B5:E5:38:D7
Certificate issuer:       /CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
Certificate serial:       272E0D60282F5CCCE65AD6C4C28E9C3A3B5799B1
Authority key identifier: 6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/323830343a313333383a343a3a2f34382d3438203d3e20323633353232.roa
Signing time:             Thu 28 Dec 2023 17:09:57 +0000
ROA not before:           Thu 28 Dec 2023 17:04:57 +0000
ROA not after:            Thu 26 Dec 2024 17:09:57 +0000
asID:                     263522
IP address blocks:        2804:1338:4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:2e:0d:60:28:2f:5c:cc:e6:5a:d6:c4:c2:8e:9c:3a:3b:57:99:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
        Validity
            Not Before: Dec 28 17:04:57 2023 GMT
            Not After : Dec 26 17:09:57 2024 GMT
        Subject: CN=AD4D61198DF6AD1C98522B23362F89DDB5E538D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:05:0d:67:b9:20:52:90:06:6d:11:8b:62:93:
                    57:2c:39:78:9b:03:4c:92:88:e5:f9:f0:37:46:ad:
                    81:a7:62:91:fb:c2:84:1e:46:2f:54:de:76:b4:7f:
                    2c:02:f2:77:09:29:be:ae:61:ef:c2:65:8b:9b:e0:
                    87:83:ba:e3:6c:83:c2:df:92:ac:8d:17:79:47:bf:
                    db:ba:a5:7c:76:81:0d:0e:ce:9a:ca:cc:f7:17:34:
                    1c:13:de:36:0c:9e:79:f6:e5:7b:be:07:75:4f:47:
                    ab:69:06:af:40:20:a0:84:25:84:3e:d9:bd:68:37:
                    19:bd:90:66:b7:9c:07:b9:f9:7d:f5:68:12:a5:7f:
                    fc:c3:c2:ea:5e:9a:18:67:de:0b:ae:35:7d:e4:99:
                    23:96:43:58:83:00:18:ec:1b:16:60:ef:90:de:5f:
                    2e:9e:d6:70:d2:a1:51:4b:4b:14:6a:4e:95:a2:d1:
                    68:e4:c3:40:f5:cc:1b:74:52:72:71:6b:9e:d3:a7:
                    5c:86:8b:3e:df:f5:81:06:86:5f:5a:78:29:58:83:
                    c5:22:46:6e:97:c4:e8:31:f9:6e:8e:55:b7:0c:73:
                    15:a8:b6:73:48:75:52:9c:22:31:33:09:5b:f2:6b:
                    de:1b:27:ec:30:8f:58:1c:45:8a:08:5c:96:ca:05:
                    c5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:4D:61:19:8D:F6:AD:1C:98:52:2B:23:36:2F:89:DD:B5:E5:38:D7
            X509v3 Authority Key Identifier:
                keyid:6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/323830343a313333383a343a3a2f34382d3438203d3e20323633353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1338:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:b1:b8:cd:bc:74:b1:e9:0f:8b:eb:04:59:ce:76:09:52:66:
         e9:d3:78:bc:a2:fb:ce:fe:ec:17:85:59:a2:1e:15:2e:fc:26:
         ff:02:a9:2b:c3:8a:21:a2:38:b4:6e:6d:8c:75:c8:ea:b1:c8:
         65:0d:da:38:1f:6a:ff:f8:b1:0d:cf:3a:53:2f:a7:c5:88:58:
         28:26:25:03:b2:74:79:3c:5c:d7:0d:86:e4:9c:15:8d:e2:6e:
         a3:e4:f4:b5:79:6c:d3:70:04:aa:95:a9:1b:7c:a8:cc:55:51:
         f8:c1:65:7c:9f:27:60:ce:77:f0:d0:c6:b0:a2:fe:7f:a0:53:
         08:c4:d5:c6:8b:36:1b:1d:84:0a:c9:d4:ae:2a:79:b5:ff:f1:
         d6:04:2d:a2:04:1a:b6:b0:f5:8d:81:13:48:66:94:68:e7:82:
         50:83:76:6e:4e:56:3a:e5:94:79:39:9b:42:9d:3d:30:bb:8e:
         96:65:74:c4:1c:8f:f0:1a:7c:44:c2:d7:5a:a3:e0:67:be:20:
         e1:51:d0:c8:0e:18:6a:fa:4d:9c:ac:91:45:e3:08:a4:92:fc:
         22:bb:a2:97:8d:ad:48:6a:54:d4:e9:7a:3c:c2:ce:cc:0d:a7:
         a6:4f:4c:f8:a8:84:3a:58:40:ef:16:c3:b0:32:23:5e:0f:ad:
         79:78:08:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----