Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0/323830343a336564343a313030323a3a2f34382d3438203d3e20323636363233.roa
File:                     323830343a336564343a313030323a3a2f34382d3438203d3e20323636363233.roa (raw, json)
Hash identifier:          WxwAg1WbvS4NF/tWPbVYdblACA1cNzwzGuPXbyJniwg=
Subject key identifier:   C5:CB:2E:10:3C:FD:A1:27:8C:B6:45:76:6E:86:25:93:FC:5A:D7:C0
Certificate issuer:       /CN=3D4374364DEF0A3AD31C3F4544E415B9EC6C7083
Certificate serial:       5A7DF177D5A232878E7545886B7677614A6763C6
Authority key identifier: 3D:43:74:36:4D:EF:0A:3A:D3:1C:3F:45:44:E4:15:B9:EC:6C:70:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D4374364DEF0A3AD31C3F4544E415B9EC6C7083.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0/323830343a336564343a313030323a3a2f34382d3438203d3e20323636363233.roa
Signing time:             Thu 14 Mar 2024 02:18:30 +0000
ROA not before:           Thu 14 Mar 2024 02:13:30 +0000
ROA not after:            Thu 13 Mar 2025 02:18:30 +0000
asID:                     266623
IP address blocks:        2804:3ed4:1002::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:7d:f1:77:d5:a2:32:87:8e:75:45:88:6b:76:77:61:4a:67:63:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D4374364DEF0A3AD31C3F4544E415B9EC6C7083
        Validity
            Not Before: Mar 14 02:13:30 2024 GMT
            Not After : Mar 13 02:18:30 2025 GMT
        Subject: CN=C5CB2E103CFDA1278CB645766E862593FC5AD7C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:77:6c:15:38:4f:e2:34:2d:e0:43:14:d2:83:
                    55:eb:6b:5b:74:91:90:27:75:8a:91:95:4a:8c:8a:
                    e3:77:a2:25:70:f2:06:a7:31:24:80:80:99:c3:68:
                    d1:06:23:75:9f:09:4c:70:76:3f:e2:28:c4:06:30:
                    d6:1d:0f:88:68:f1:d6:cb:e4:3a:99:8f:f6:4d:01:
                    cd:5f:6c:2d:fd:5a:75:89:b6:79:10:b7:33:79:23:
                    5d:aa:5a:1c:68:56:67:cd:4d:c7:92:60:da:2d:50:
                    52:22:6a:a9:85:f2:89:01:be:70:ea:1b:82:d9:ed:
                    37:7d:9d:c6:9b:ee:69:c3:07:c9:80:bc:4b:6a:e5:
                    e2:94:e7:66:84:40:9a:77:ce:1d:15:1b:f0:18:13:
                    8e:29:4f:67:65:f0:99:d3:46:12:bb:a4:7f:ba:0a:
                    f3:91:24:b9:69:70:a7:42:b5:ba:b0:11:6a:84:16:
                    d7:d5:f0:37:c8:2a:f5:95:6d:43:90:50:79:08:9b:
                    de:59:fe:ac:3f:a6:c1:a9:0b:23:ba:c5:98:3a:c7:
                    ed:b8:61:39:05:0d:50:7f:1d:8d:d2:07:21:d2:93:
                    14:f9:40:9d:f3:88:cc:7f:63:24:ee:02:4c:89:05:
                    46:f1:bf:23:36:8e:8a:03:18:5b:14:af:63:71:78:
                    2c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:CB:2E:10:3C:FD:A1:27:8C:B6:45:76:6E:86:25:93:FC:5A:D7:C0
            X509v3 Authority Key Identifier:
                keyid:3D:43:74:36:4D:EF:0A:3A:D3:1C:3F:45:44:E4:15:B9:EC:6C:70:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0/3D4374364DEF0A3AD31C3F4544E415B9EC6C7083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D4374364DEF0A3AD31C3F4544E415B9EC6C7083.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0/323830343a336564343a313030323a3a2f34382d3438203d3e20323636363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ed4:1002::/48

    Signature Algorithm: sha256WithRSAEncryption
         b2:17:ef:89:c9:93:aa:86:f4:86:f5:3f:d3:73:f3:a3:cb:a3:
         93:71:e0:1a:21:3d:fa:b3:5b:f9:48:45:b4:19:2b:8c:c0:d9:
         c1:44:fb:9d:d5:df:58:e1:ef:99:9f:1a:16:46:64:4f:a3:1e:
         1d:bb:dc:b5:f1:9f:d7:81:b8:f1:a4:0e:ff:dc:2e:94:f7:b3:
         ae:fd:4d:d2:bb:bc:f0:e8:88:b9:89:d3:41:fa:78:eb:3a:89:
         28:15:f0:d0:c3:d4:b8:5a:3b:5b:09:73:26:87:75:99:0d:3c:
         90:7a:ce:4c:6e:a4:1d:06:c1:51:59:91:a7:63:c0:c4:da:9a:
         c9:02:21:a8:1d:d4:e1:3c:4d:ea:bb:1b:d7:26:19:f7:a9:56:
         e7:0f:53:ec:da:52:8b:78:24:39:d1:63:59:d8:28:02:1a:c6:
         40:98:2a:2f:c8:f7:19:9d:66:6c:ef:65:e6:2f:60:d1:d2:3a:
         5a:e9:fd:55:39:58:49:76:f3:96:88:83:af:6e:3d:eb:91:b2:
         0e:5e:91:78:9c:99:aa:52:03:e8:c4:6a:65:f6:ce:c3:77:67:
         7d:ec:42:9e:bd:25:56:49:82:32:e1:69:62:41:c6:12:bc:d4:
         5a:7e:43:8f:b7:32:cc:db:2d:75:9a:db:d4:f3:2e:55:ed:f1:
         ff:14:6e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----