Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/323830343a313937383a3a2f33322d3332203d3e203631373936.roa
File:                     323830343a313937383a3a2f33322d3332203d3e203631373936.roa (raw, json)
Hash identifier:          jlJG58b/UZStOqpLIGaC0mMstcfgM5NM+kbLu8E17tg=
Subject key identifier:   85:20:F6:45:29:2F:64:D7:E5:54:05:F5:C5:3E:01:8B:9B:53:53:04
Certificate issuer:       /CN=B7004D27A6B66FBF932F73DA991E7900ED6732FC
Certificate serial:       F2D7765DE8D2320DBA07ADF63C89C5602DFCFB
Authority key identifier: B7:00:4D:27:A6:B6:6F:BF:93:2F:73:DA:99:1E:79:00:ED:67:32:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7004D27A6B66FBF932F73DA991E7900ED6732FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/323830343a313937383a3a2f33322d3332203d3e203631373936.roa
Signing time:             Fri 13 Oct 2023 14:44:10 +0000
ROA not before:           Fri 13 Oct 2023 14:39:10 +0000
ROA not after:            Fri 11 Oct 2024 14:44:10 +0000
asID:                     61796
IP address blocks:        2804:1978::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f2:d7:76:5d:e8:d2:32:0d:ba:07:ad:f6:3c:89:c5:60:2d:fc:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7004D27A6B66FBF932F73DA991E7900ED6732FC
        Validity
            Not Before: Oct 13 14:39:10 2023 GMT
            Not After : Oct 11 14:44:10 2024 GMT
        Subject: CN=8520F645292F64D7E55405F5C53E018B9B535304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:65:26:f6:fe:70:6b:a1:39:00:d0:c7:bf:7d:
                    05:42:f7:4c:2b:e2:7c:be:aa:d1:50:b5:21:27:43:
                    c0:7c:e9:fe:9b:23:a5:51:68:a9:f8:14:c1:b3:19:
                    0a:e1:de:67:af:00:12:28:34:8b:a0:46:92:77:45:
                    0b:ef:b3:dd:da:01:26:1e:0e:1e:e2:e1:d7:5c:ba:
                    e4:56:51:dc:26:0a:de:4b:c6:71:4a:2c:05:b4:a0:
                    31:2e:9d:0e:be:7e:52:8b:70:73:6f:ae:5d:4e:51:
                    1e:22:5e:f3:29:3a:8d:e8:b8:98:05:68:83:11:62:
                    0c:2a:b2:f8:dc:a9:2d:74:41:b7:9d:9e:6b:d8:a1:
                    c6:50:84:4f:ee:b9:6b:8c:7f:07:f5:01:fe:fc:51:
                    a7:1f:82:56:00:1c:b1:62:a6:3a:a8:d3:1f:d9:8c:
                    b4:c4:f7:ce:ec:c4:86:82:9c:d7:da:e1:66:c6:ce:
                    bb:04:0f:7e:ac:2b:7e:1e:30:ad:90:52:cf:13:29:
                    bd:4a:1b:12:1f:19:d4:8e:24:d2:9b:93:30:5c:89:
                    d3:dd:95:4e:15:53:1d:f0:2f:d4:3a:57:87:13:fa:
                    c0:29:27:af:22:b8:75:4a:7b:fe:68:7b:7d:83:f3:
                    e3:f3:99:73:c0:de:fb:05:d9:59:8c:a8:e9:74:bc:
                    7c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:20:F6:45:29:2F:64:D7:E5:54:05:F5:C5:3E:01:8B:9B:53:53:04
            X509v3 Authority Key Identifier:
                keyid:B7:00:4D:27:A6:B6:6F:BF:93:2F:73:DA:99:1E:79:00:ED:67:32:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/B7004D27A6B66FBF932F73DA991E7900ED6732FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7004D27A6B66FBF932F73DA991E7900ED6732FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/323830343a313937383a3a2f33322d3332203d3e203631373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1978::/32

    Signature Algorithm: sha256WithRSAEncryption
         bb:e4:97:47:b6:bb:a1:b7:f8:98:a8:ae:ff:d8:d8:aa:82:f0:
         5b:d6:db:ca:b4:c3:cd:03:4e:bc:b9:c3:78:d9:58:e2:30:25:
         1c:f0:5e:81:0d:ba:ae:7a:6b:38:84:01:9f:f2:0f:61:d4:85:
         2e:30:54:aa:f9:41:72:48:dc:cf:ce:74:ce:fd:4b:1b:b1:3a:
         17:9f:68:ea:21:0b:a8:04:75:67:a6:81:82:cd:85:88:38:28:
         e3:a8:40:aa:e8:cd:b1:c7:23:3a:b2:90:9b:3c:63:a4:16:0b:
         78:1e:c0:d9:70:c0:38:51:57:11:1a:f3:56:98:99:0f:92:f6:
         12:d9:22:d6:f9:f5:fc:be:90:72:b7:01:41:f5:0e:6d:d2:f4:
         3d:5b:97:5f:93:6b:79:e1:02:26:c9:bd:03:e7:34:6d:44:b9:
         b1:d4:bc:bd:a0:2b:c8:35:48:62:00:cb:0a:a9:c0:75:a7:db:
         fd:b1:87:e4:c1:77:3e:80:f8:fa:cb:9c:9e:43:3c:e3:3e:a9:
         3b:03:7b:02:12:ed:80:25:9b:c4:c8:10:9d:07:f6:55:46:3a:
         79:20:e1:e2:9c:9b:d2:3a:1a:d7:47:82:87:38:72:36:51:83:
         b9:db:5f:62:88:c0:a8:3d:21:8c:75:24:f7:3a:19:95:aa:88:
         49:d6:1f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----