Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/0/323830343a386134383a3a2f33322d313238203d3e20323733363539.roa
File:                     323830343a386134383a3a2f33322d313238203d3e20323733363539.roa (raw, json)
Hash identifier:          BHMJJReyqT2hYOViCWYxGK4rmMS5/AljvbWHZiftdC8=
Subject key identifier:   68:34:A9:BA:20:80:8A:5A:FA:D7:AE:07:D4:E0:CA:E6:ED:4B:07:44
Certificate issuer:       /CN=25C45D74DF1239BC71DFAED0BF4DFFA192E38C2F
Certificate serial:       3890CC86B4C49FD6D95A7E2A51A55BA38F892E77
Authority key identifier: 25:C4:5D:74:DF:12:39:BC:71:DF:AE:D0:BF:4D:FF:A1:92:E3:8C:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/25C45D74DF1239BC71DFAED0BF4DFFA192E38C2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/0/323830343a386134383a3a2f33322d313238203d3e20323733363539.roa
Signing time:             Fri 27 Jan 2023 02:41:48 +0000
ROA not before:           Fri 27 Jan 2023 02:36:48 +0000
ROA not after:            Fri 26 Jan 2024 02:41:48 +0000
asID:                     273659
IP address blocks:        2804:8a48::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:90:cc:86:b4:c4:9f:d6:d9:5a:7e:2a:51:a5:5b:a3:8f:89:2e:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25C45D74DF1239BC71DFAED0BF4DFFA192E38C2F
        Validity
            Not Before: Jan 27 02:36:48 2023 GMT
            Not After : Jan 26 02:41:48 2024 GMT
        Subject: CN=6834A9BA20808A5AFAD7AE07D4E0CAE6ED4B0744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c8:be:2f:7d:97:46:4a:dc:d7:fe:75:68:20:
                    e2:63:c2:a9:61:11:ad:f2:90:be:dc:f3:96:80:4e:
                    4a:6e:f3:64:bb:d9:e0:e6:7e:d7:53:1c:ee:62:4f:
                    78:e0:cb:c8:da:fb:f4:fd:9a:c4:7c:15:c9:b2:be:
                    15:18:3b:ed:26:4d:26:a2:8e:94:ac:9a:12:3a:9e:
                    f7:75:09:0c:aa:86:b0:b6:f5:5f:d9:63:34:ca:df:
                    a7:e8:af:72:4b:fe:85:e7:9b:56:f1:61:89:24:eb:
                    c6:f8:8a:87:7a:1d:87:ec:1f:bb:85:a9:a3:95:35:
                    fb:ff:fa:c8:1e:29:b1:e5:97:02:87:e2:15:4d:03:
                    46:34:92:24:0f:a6:b2:86:ef:2b:ef:a6:04:e8:56:
                    b7:09:38:ed:ee:4c:86:c1:15:4a:42:93:f0:84:92:
                    e7:6f:f0:77:c7:62:21:ff:52:92:39:5c:e4:6a:37:
                    f6:b7:e4:bd:2a:e3:dc:5d:d6:fd:de:af:9b:7f:57:
                    00:ae:0a:60:b3:0c:82:0b:49:67:2d:61:d6:10:d8:
                    f9:08:3b:67:ba:e2:d3:27:d1:18:cc:3c:fc:a3:24:
                    3b:18:c4:ee:6b:a2:d0:7b:46:b9:a8:10:80:97:5b:
                    b8:83:7d:49:bd:3a:c8:23:80:04:75:e1:bd:45:22:
                    be:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:34:A9:BA:20:80:8A:5A:FA:D7:AE:07:D4:E0:CA:E6:ED:4B:07:44
            X509v3 Authority Key Identifier:
                keyid:25:C4:5D:74:DF:12:39:BC:71:DF:AE:D0:BF:4D:FF:A1:92:E3:8C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/0/25C45D74DF1239BC71DFAED0BF4DFFA192E38C2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/25C45D74DF1239BC71DFAED0BF4DFFA192E38C2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/0/323830343a386134383a3a2f33322d313238203d3e20323733363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a48::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:ad:a6:bd:bb:60:e0:31:8b:0c:54:f9:70:0e:07:1f:fb:1c:
         69:38:fc:4a:df:4c:d4:bb:15:64:6d:e6:6d:2e:1a:73:a8:d9:
         42:5e:3f:f3:16:ee:ac:a0:a6:54:e9:4e:b7:ee:fa:8a:74:91:
         5a:fd:d3:06:80:2a:f2:3a:94:eb:2a:e5:86:39:64:34:41:11:
         3a:77:92:5a:1a:09:42:54:7b:1a:0d:3b:ef:60:5d:04:b0:7d:
         fb:76:5d:bc:cf:d6:57:71:54:86:ec:15:94:5e:cd:db:1c:db:
         05:a8:5a:ac:36:ef:98:f4:85:91:2b:ab:dc:68:17:b7:a2:f4:
         0f:64:1b:53:c2:7c:e2:9f:3f:70:43:0d:c4:98:2a:60:f6:a5:
         a2:97:4f:2b:a4:28:93:73:bc:91:32:31:e3:95:96:37:c6:fe:
         59:d6:a1:4e:b0:e9:1f:e1:1d:84:8a:f8:03:fb:89:1d:b2:5e:
         e8:dd:02:b0:8c:7c:fb:e9:d1:1d:19:ad:71:2b:32:da:c0:8a:
         18:1c:7b:04:7a:22:d1:4a:a1:95:e0:48:ac:c3:1f:c5:a6:fa:
         72:f1:18:b0:65:e8:7c:90:37:3b:d2:53:f1:75:3d:b7:93:9e:
         71:ba:71:f4:10:f9:21:4b:bb:4b:ba:59:a1:3e:f1:ef:d7:dc:
         8a:9f:ab:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----