Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/323830343a316364343a316330313a3a2f34382d3438203d3e203631363738.roa
File:                     323830343a316364343a316330313a3a2f34382d3438203d3e203631363738.roa (raw, json)
Hash identifier:          mqANF+/ZPHFbeaKcjSL20UDP5Gm3xsBRbjjG9dX8fMo=
Subject key identifier:   B1:43:24:7D:BF:B4:54:8A:DA:25:D9:9F:21:5D:4C:AB:97:9C:64:33
Certificate issuer:       /CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
Certificate serial:       0FC56C29C0F71DEC58690BD2859CA3D61631ADBB
Authority key identifier: 5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/323830343a316364343a316330313a3a2f34382d3438203d3e203631363738.roa
Signing time:             Tue 24 Oct 2023 12:43:18 +0000
ROA not before:           Tue 24 Oct 2023 12:38:18 +0000
ROA not after:            Tue 22 Oct 2024 12:43:18 +0000
asID:                     61678
IP address blocks:        2804:1cd4:1c01::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:c5:6c:29:c0:f7:1d:ec:58:69:0b:d2:85:9c:a3:d6:16:31:ad:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
        Validity
            Not Before: Oct 24 12:38:18 2023 GMT
            Not After : Oct 22 12:43:18 2024 GMT
        Subject: CN=B143247DBFB4548ADA25D99F215D4CAB979C6433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:60:67:93:b5:ff:c0:c3:4e:bd:92:c6:1b:be:
                    30:ca:f3:03:89:16:d9:44:df:b7:5d:bf:c2:82:c6:
                    2d:4a:e7:3a:c5:27:f5:67:aa:26:f5:fc:f6:5f:0e:
                    f0:b8:e6:e6:bd:57:ed:3f:9e:0d:8c:31:53:b4:21:
                    c9:83:a3:9c:80:26:6c:89:f1:3f:91:10:51:8a:60:
                    14:bb:39:0b:e9:d6:86:14:5c:e7:51:80:57:75:5d:
                    42:0c:24:61:21:7b:74:54:f4:18:15:d0:cc:fe:25:
                    96:30:9c:b5:e0:56:0b:8f:61:c3:f4:43:0a:3f:ae:
                    92:48:2f:e4:bc:cc:87:8f:d6:60:e3:42:26:6b:92:
                    ce:a5:04:99:ac:50:fc:75:b2:6c:d1:42:cf:f9:db:
                    ee:08:57:b5:84:cf:db:ed:b2:d8:3e:fe:66:89:30:
                    1a:e1:dc:78:cf:48:62:60:e1:f5:ca:21:67:e9:00:
                    fd:c6:55:f7:0c:3e:df:7a:34:f9:a4:f0:80:1e:2a:
                    a4:9f:e5:59:6f:9c:28:03:52:58:95:31:f9:61:67:
                    74:fe:11:ef:76:35:95:59:53:b3:bd:8c:29:fe:c7:
                    44:82:7e:85:da:2b:2b:90:41:49:b5:74:f7:88:ff:
                    27:47:e3:23:52:4c:81:b6:c1:56:13:80:d8:ef:46:
                    88:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:43:24:7D:BF:B4:54:8A:DA:25:D9:9F:21:5D:4C:AB:97:9C:64:33
            X509v3 Authority Key Identifier:
                keyid:5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/323830343a316364343a316330313a3a2f34382d3438203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cd4:1c01::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:1a:43:93:9b:bc:f3:3a:3c:60:b3:8d:bc:a2:69:55:b1:9c:
         d7:6f:be:0d:c8:6e:ec:ea:2a:02:4a:a8:a0:e9:aa:06:05:e0:
         51:dd:e2:b0:34:92:f7:7c:19:d6:1c:1f:50:b2:01:24:15:da:
         68:ee:56:68:6f:f9:0a:98:b5:73:21:4d:02:90:f8:69:fc:c9:
         a9:9f:72:51:93:e4:32:ff:78:05:fb:74:06:ed:42:18:62:20:
         4b:8e:77:57:a8:26:1f:15:71:e8:88:de:1e:22:77:dc:0a:ca:
         e2:c6:1c:5d:49:38:ef:3d:b2:4d:4d:b9:5c:50:15:fc:c1:1b:
         01:29:b9:92:67:65:16:d0:67:38:23:26:12:72:57:b9:40:de:
         0c:f9:75:ef:8a:1b:5f:ea:64:70:61:16:68:2e:2b:3f:54:d9:
         2c:ca:be:4e:dc:fb:46:0c:fd:b6:6a:db:46:1b:93:32:9b:52:
         5d:08:66:65:1f:f2:3c:c5:36:96:96:35:41:2a:6e:81:06:d7:
         8d:c4:4e:65:bc:e1:64:06:b9:60:07:eb:33:b1:e3:77:73:fb:
         41:71:81:83:18:63:ec:60:99:55:19:bb:3c:a5:0a:fa:21:4b:
         99:83:03:a6:84:b5:21:ab:57:8b:50:4c:f9:8d:0a:c2:ee:f6:
         82:93:6b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----