Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HjS4ggRdfLCMXuhMQgB5Uua24pwDHxhQTC9VChJGGv31/0/323830343a6131343a3a2f33322d3438203d3e20323632333432.roa
File:                     323830343a6131343a3a2f33322d3438203d3e20323632333432.roa (raw, json)
Hash identifier:          GYKuSY0v8Y1uLesTn3PcqeYAm81WRHPyLZtrdiHI57I=
Subject key identifier:   1B:DD:BF:54:D5:61:75:CD:DD:CD:3E:2A:F9:5C:50:BB:16:F6:23:4F
Certificate issuer:       /CN=9616A96823A2E00E4A5E1F65F4EE1D3391FC6D03
Certificate serial:       79EFFDA26EB2D4E671975572A0E621C3E9D37B59
Authority key identifier: 96:16:A9:68:23:A2:E0:0E:4A:5E:1F:65:F4:EE:1D:33:91:FC:6D:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9616A96823A2E00E4A5E1F65F4EE1D3391FC6D03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HjS4ggRdfLCMXuhMQgB5Uua24pwDHxhQTC9VChJGGv31/0/323830343a6131343a3a2f33322d3438203d3e20323632333432.roa
Signing time:             Tue 10 Oct 2023 03:30:15 +0000
ROA not before:           Tue 10 Oct 2023 03:25:15 +0000
ROA not after:            Tue 08 Oct 2024 03:30:15 +0000
asID:                     262342
IP address blocks:        2804:a14::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:ef:fd:a2:6e:b2:d4:e6:71:97:55:72:a0:e6:21:c3:e9:d3:7b:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9616A96823A2E00E4A5E1F65F4EE1D3391FC6D03
        Validity
            Not Before: Oct 10 03:25:15 2023 GMT
            Not After : Oct  8 03:30:15 2024 GMT
        Subject: CN=1BDDBF54D56175CDDDCD3E2AF95C50BB16F6234F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:64:46:72:f2:da:98:51:8b:18:29:13:b7:97:
                    57:86:e5:7f:6e:1e:c8:73:70:c0:ed:d7:91:95:13:
                    af:3e:a0:35:8e:3b:c7:32:17:36:da:40:6c:fd:38:
                    3a:8e:01:8f:13:b2:05:66:78:27:5d:04:1f:3f:00:
                    13:72:87:70:f0:77:11:d7:5d:5a:88:57:11:a0:f3:
                    fd:34:d1:3b:e2:28:8e:64:53:c4:28:8f:44:69:19:
                    c5:84:6d:e3:1d:20:de:83:0d:d3:e9:78:9d:78:49:
                    40:c1:9d:63:f3:b4:b7:64:a1:02:2b:f6:08:29:58:
                    25:2b:d7:ba:c0:33:c6:a6:8c:95:bc:39:ad:17:9a:
                    68:64:97:eb:49:36:09:94:33:a0:eb:2c:9e:65:26:
                    eb:c1:dd:5a:19:c8:d3:6b:c8:fa:fb:ec:96:da:f3:
                    56:3c:39:ae:9b:15:92:52:f5:5d:14:4c:98:44:42:
                    9b:c5:ad:8e:b8:98:9c:db:40:5c:36:92:19:24:a9:
                    62:7c:84:60:58:96:cc:0f:2b:a4:2b:7c:6c:02:24:
                    0e:dc:b2:a7:27:d8:f6:28:e3:07:aa:14:ea:58:38:
                    53:d8:5b:61:8a:9c:99:35:81:d0:48:51:aa:4d:00:
                    ac:93:3d:01:b4:ba:1c:ae:95:81:01:d1:6f:8d:42:
                    5d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:DD:BF:54:D5:61:75:CD:DD:CD:3E:2A:F9:5C:50:BB:16:F6:23:4F
            X509v3 Authority Key Identifier:
                keyid:96:16:A9:68:23:A2:E0:0E:4A:5E:1F:65:F4:EE:1D:33:91:FC:6D:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HjS4ggRdfLCMXuhMQgB5Uua24pwDHxhQTC9VChJGGv31/0/9616A96823A2E00E4A5E1F65F4EE1D3391FC6D03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9616A96823A2E00E4A5E1F65F4EE1D3391FC6D03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HjS4ggRdfLCMXuhMQgB5Uua24pwDHxhQTC9VChJGGv31/0/323830343a6131343a3a2f33322d3438203d3e20323632333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a14::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:b8:f4:81:cd:6a:77:58:06:6e:c3:4b:bb:56:50:85:ae:1a:
         99:44:57:50:94:8f:54:1e:48:e1:b7:44:0c:5f:ee:21:0d:69:
         28:18:3d:d1:b0:f5:d5:32:72:a2:7a:02:08:e3:88:75:22:88:
         c6:44:df:c7:0b:e3:dd:80:23:31:89:33:66:32:70:0b:ba:cf:
         35:85:6f:1b:f4:e9:a1:6e:70:64:59:af:fa:e6:23:20:0e:08:
         bd:f4:20:a3:3e:77:de:ef:85:92:ed:45:e7:61:d5:0e:4e:55:
         0c:b8:6c:fd:da:4a:60:84:4c:1f:22:55:76:90:3e:13:16:90:
         2a:36:36:97:ee:fa:ed:a4:76:0f:f9:ec:62:c5:70:a4:0c:55:
         93:7e:dd:93:b1:9a:c1:18:7e:14:95:bb:e0:09:a9:02:01:a6:
         8d:86:69:17:08:4a:6a:f8:e7:27:b5:24:2d:3d:d4:01:39:74:
         aa:b6:f0:c4:d7:27:97:5a:a1:e1:5a:11:f7:ba:8e:91:ac:61:
         3b:b5:d1:dc:a9:10:06:75:4b:e1:a9:ac:91:68:ab:61:c6:77:
         ce:c3:4c:cb:e1:71:ef:7f:0a:d8:ce:ef:6f:c4:58:9b:d0:aa:
         c0:96:95:6c:7e:f8:1a:7f:3e:05:b6:5c:8b:e0:bc:77:0d:a7:
         26:af:87:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----