Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/1/323830343a363164633a3a2f33322d3332203d3e20323639323631.roa
File:                     323830343a363164633a3a2f33322d3332203d3e20323639323631.roa (raw, json)
Hash identifier:          eAcyuzaim3bUOhH0bh9+hZvu9ju5ZMt6svdSoUQ2DOw=
Subject key identifier:   17:43:90:C2:90:13:66:2E:EC:69:71:36:C9:10:D2:54:E4:A0:53:75
Certificate issuer:       /CN=D6839DD8077CBDD2274A32A4537520F8C2C957C6
Certificate serial:       27EFE8282022875F38412F4C8A47389F9807AFED
Authority key identifier: D6:83:9D:D8:07:7C:BD:D2:27:4A:32:A4:53:75:20:F8:C2:C9:57:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D6839DD8077CBDD2274A32A4537520F8C2C957C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/1/323830343a363164633a3a2f33322d3332203d3e20323639323631.roa
Signing time:             Thu 09 Mar 2023 19:09:03 +0000
ROA not before:           Thu 09 Mar 2023 19:04:03 +0000
ROA not after:            Thu 07 Mar 2024 19:09:03 +0000
asID:                     269261
IP address blocks:        2804:61dc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ef:e8:28:20:22:87:5f:38:41:2f:4c:8a:47:38:9f:98:07:af:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6839DD8077CBDD2274A32A4537520F8C2C957C6
        Validity
            Not Before: Mar  9 19:04:03 2023 GMT
            Not After : Mar  7 19:09:03 2024 GMT
        Subject: CN=174390C29013662EEC697136C910D254E4A05375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ff:42:8c:82:47:92:17:8d:30:ec:19:f7:25:
                    de:0d:10:7d:3e:fe:e2:08:c9:b1:e5:d0:f9:15:af:
                    d7:7b:83:5e:0b:ba:39:8b:74:af:9b:43:96:f1:6b:
                    70:be:54:84:e3:d4:92:07:99:4d:1a:b2:42:55:66:
                    4d:28:01:19:f1:42:05:59:5a:4e:a7:0e:49:ca:b1:
                    c3:0a:29:e4:cb:3e:58:75:3d:c6:13:b6:aa:c8:5e:
                    fe:bb:0f:dc:bf:1f:77:43:eb:2a:8b:f5:cd:4e:6f:
                    ad:66:da:84:93:1c:50:fd:f3:98:83:96:0f:32:ed:
                    2c:0e:ab:58:41:68:e6:00:2a:94:b1:7c:0f:97:f6:
                    fa:49:69:e4:fe:0c:2e:1d:e0:f7:99:92:c8:1a:c2:
                    e4:35:e9:c3:af:3c:19:2d:36:7d:0c:d2:38:27:d0:
                    63:24:a0:ed:99:9e:b7:22:b3:d1:c7:ba:48:fe:dd:
                    d7:be:6f:ca:5f:cc:d1:a6:14:48:ff:1c:24:54:da:
                    16:3b:a2:de:4b:b7:be:59:ec:c5:4b:35:cd:ea:d4:
                    df:82:4c:ff:01:c6:89:64:50:ec:db:90:d5:33:a6:
                    80:f3:45:0e:ae:be:73:ef:b1:64:15:a4:cb:62:01:
                    6d:c0:45:d5:dc:df:00:6e:ae:09:45:33:8f:2d:c7:
                    51:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:43:90:C2:90:13:66:2E:EC:69:71:36:C9:10:D2:54:E4:A0:53:75
            X509v3 Authority Key Identifier:
                keyid:D6:83:9D:D8:07:7C:BD:D2:27:4A:32:A4:53:75:20:F8:C2:C9:57:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/1/D6839DD8077CBDD2274A32A4537520F8C2C957C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D6839DD8077CBDD2274A32A4537520F8C2C957C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/1/323830343a363164633a3a2f33322d3332203d3e20323639323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:61dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:97:82:8c:9a:4e:2d:b4:2a:20:5c:51:86:92:b7:e7:1e:ac:
         8b:c5:34:d9:71:7c:a5:a1:9d:d1:56:58:b7:3a:6a:52:11:59:
         fe:22:b0:2a:23:b8:cf:cc:f4:d0:ac:11:ed:e2:bb:dc:fc:04:
         af:c6:17:7a:d5:32:94:33:42:d5:fd:89:65:53:9f:00:2e:d4:
         e0:8a:40:a3:24:d3:87:a8:a9:41:15:9d:ce:25:56:e4:34:05:
         7d:44:13:62:f7:0d:bc:f9:4c:2b:a0:aa:1e:9a:aa:c1:4b:8c:
         c2:4a:dd:07:c0:17:58:61:fb:61:c5:0f:84:69:32:0d:11:e0:
         8c:9c:c9:11:2e:ba:f3:9d:de:71:e7:a2:92:b3:ad:24:3b:23:
         66:0b:66:1b:10:30:bd:b8:0d:f2:25:64:85:9d:e7:9c:57:a4:
         20:f1:e7:bc:85:f9:45:11:31:7b:09:23:75:56:aa:87:12:d8:
         96:b5:f4:0e:da:a2:9a:73:a5:d7:e0:1d:99:8d:81:1b:75:f4:
         39:90:dd:78:8d:17:c1:47:70:38:6a:e4:d7:8c:63:df:7c:22:
         64:47:d7:bf:70:07:df:2c:9c:62:13:df:80:07:8a:bd:7b:df:
         1a:c9:f2:cf:d0:ef:00:18:d1:f1:81:03:67:d1:eb:17:2f:32:
         e3:6a:18:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----