Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/323830343a6233303a633030303a3a2f33342d3334203d3e203532373438.roa
File:                     323830343a6233303a633030303a3a2f33342d3334203d3e203532373438.roa (raw, json)
Hash identifier:          jsQ3PRWcsKdzx/zYjRNomSe0LrtgE5S40HiF0IcRllY=
Subject key identifier:   1F:25:13:04:F4:F1:FC:4F:44:A7:25:39:52:54:DA:B4:46:27:D9:2D
Certificate issuer:       /CN=C6E8488A12408906FF49F33C9767BBEFC817D996
Certificate serial:       55B8958677F60A438BE002F9513989AAC75D3F9D
Authority key identifier: C6:E8:48:8A:12:40:89:06:FF:49:F3:3C:97:67:BB:EF:C8:17:D9:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6E8488A12408906FF49F33C9767BBEFC817D996.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/323830343a6233303a633030303a3a2f33342d3334203d3e203532373438.roa
Signing time:             Mon 24 Apr 2023 19:09:49 +0000
ROA not before:           Mon 24 Apr 2023 19:04:49 +0000
ROA not after:            Mon 22 Apr 2024 19:09:49 +0000
asID:                     52748
IP address blocks:        2804:b30:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:b8:95:86:77:f6:0a:43:8b:e0:02:f9:51:39:89:aa:c7:5d:3f:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6E8488A12408906FF49F33C9767BBEFC817D996
        Validity
            Not Before: Apr 24 19:04:49 2023 GMT
            Not After : Apr 22 19:09:49 2024 GMT
        Subject: CN=1F251304F4F1FC4F44A725395254DAB44627D92D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0a:c1:60:ce:53:1c:bd:83:5c:ea:41:e2:f3:
                    89:27:c3:32:2d:2e:24:74:6b:62:31:4e:3e:45:2e:
                    f3:ef:ee:9c:0b:d1:a3:63:ff:60:8e:07:f3:65:a6:
                    c7:e8:df:00:aa:d5:98:05:91:11:c6:e8:16:28:08:
                    32:e4:49:ff:16:2d:ca:d8:81:bb:8d:9f:69:87:17:
                    c1:3e:e9:15:7e:50:41:45:00:33:fc:38:2d:84:d7:
                    a8:51:44:52:4a:b1:0a:34:d3:5a:5d:4a:84:99:86:
                    48:44:6a:6f:32:40:e4:eb:26:2c:1c:4a:57:fb:10:
                    5b:ba:ad:c7:86:60:83:ed:6f:7b:92:8e:c9:54:2e:
                    e1:0f:fa:d2:92:ce:e4:fa:7b:7b:33:fa:ca:c7:07:
                    ff:4b:4c:5d:fe:34:60:00:ae:41:a2:43:ac:30:51:
                    a1:b7:0b:d7:68:64:a5:7e:54:40:4f:29:59:49:38:
                    cf:35:a3:ba:83:34:ec:58:da:d8:47:56:e6:cd:43:
                    97:0d:81:c0:28:76:94:7d:66:02:0a:ef:2b:7d:28:
                    ba:02:9d:17:f5:16:8c:a3:45:38:1c:e1:7e:48:42:
                    d4:d7:51:fa:45:e4:c1:b7:9c:87:a1:47:63:70:a9:
                    fd:c1:4b:84:67:a2:19:44:05:7b:2b:75:e3:eb:3a:
                    1e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:25:13:04:F4:F1:FC:4F:44:A7:25:39:52:54:DA:B4:46:27:D9:2D
            X509v3 Authority Key Identifier:
                keyid:C6:E8:48:8A:12:40:89:06:FF:49:F3:3C:97:67:BB:EF:C8:17:D9:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/C6E8488A12408906FF49F33C9767BBEFC817D996.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6E8488A12408906FF49F33C9767BBEFC817D996.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/323830343a6233303a633030303a3a2f33342d3334203d3e203532373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b30:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3d:6c:b2:ac:fc:06:61:a5:d6:9f:4d:e6:8b:9f:f0:ee:40:f4:
         ec:fb:6a:0d:2e:cf:cb:21:af:25:d5:27:56:50:cb:4c:c9:65:
         d0:6d:49:42:fc:8f:dd:42:27:3c:be:3f:bd:5d:24:ae:39:22:
         1b:6b:9c:69:02:d6:26:9c:b4:66:d1:30:29:68:1a:2a:6c:d8:
         2a:1a:5c:b9:b5:63:80:29:92:a6:71:c6:be:f2:34:0e:1c:43:
         02:16:a4:94:f9:78:a7:cb:72:b1:f7:eb:1b:b3:74:35:33:94:
         e7:56:0b:96:90:14:e5:e5:e4:2d:98:36:b3:7a:7e:dc:65:32:
         ab:c2:dd:39:0f:e4:3e:ba:39:a4:42:da:de:84:a8:64:cb:0f:
         37:b8:c2:36:9b:86:f8:c1:3c:9d:c7:e1:1f:a6:ba:f8:ce:c4:
         37:b3:11:21:35:91:8e:1e:d1:53:5f:75:c3:ff:09:6a:c6:f3:
         8d:90:a1:ff:2b:07:43:e7:91:50:97:b1:68:90:f4:51:86:7f:
         3b:d4:f5:df:7f:17:16:d5:b3:df:77:18:0d:b3:77:80:93:02:
         20:c3:82:df:0e:68:ed:bd:e7:44:eb:bb:b3:e4:5e:e8:15:3e:
         fe:ad:f8:9e:e1:47:89:b9:22:43:96:72:dc:59:3c:c3:ae:e0:
         06:90:3e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----