Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0/323830343a336564343a646430303a3a2f34362d3436203d3e20323636363233.roa
File:                     323830343a336564343a646430303a3a2f34362d3436203d3e20323636363233.roa (raw, json)
Hash identifier:          U1TqzxYXbNyrPOw//k/Kvfp/ECyJhkH4IejASCDpysw=
Subject key identifier:   D0:BB:61:41:BF:1B:DF:E2:26:06:C1:B9:AF:E8:FE:0C:F9:67:73:20
Certificate issuer:       /CN=3D4374364DEF0A3AD31C3F4544E415B9EC6C7083
Certificate serial:       79A3949BC8FE1266337303CAB09BF493A75D656B
Authority key identifier: 3D:43:74:36:4D:EF:0A:3A:D3:1C:3F:45:44:E4:15:B9:EC:6C:70:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D4374364DEF0A3AD31C3F4544E415B9EC6C7083.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0/323830343a336564343a646430303a3a2f34362d3436203d3e20323636363233.roa
Signing time:             Thu 14 Mar 2024 02:19:16 +0000
ROA not before:           Thu 14 Mar 2024 02:14:16 +0000
ROA not after:            Thu 13 Mar 2025 02:19:16 +0000
asID:                     266623
IP address blocks:        2804:3ed4:dd00::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:a3:94:9b:c8:fe:12:66:33:73:03:ca:b0:9b:f4:93:a7:5d:65:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D4374364DEF0A3AD31C3F4544E415B9EC6C7083
        Validity
            Not Before: Mar 14 02:14:16 2024 GMT
            Not After : Mar 13 02:19:16 2025 GMT
        Subject: CN=D0BB6141BF1BDFE22606C1B9AFE8FE0CF9677320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:a8:0c:74:9e:d0:b5:43:d7:38:42:69:ca:8e:
                    ee:dc:f1:4e:6a:1f:99:85:09:14:f2:1a:a1:1e:4e:
                    b9:bf:cf:9d:5b:aa:d0:e4:49:f2:ec:94:86:5c:fa:
                    3a:8f:12:4e:bf:5c:ad:29:ea:fa:be:b6:18:0a:0a:
                    66:50:36:5a:5b:33:f5:8b:65:25:ad:0e:c0:ee:15:
                    01:0f:0e:04:27:85:d7:ba:2f:0e:82:7e:67:5b:5c:
                    14:62:aa:fe:6e:ca:79:15:06:5b:04:88:d7:7b:ce:
                    8e:4c:35:5b:46:a8:24:6f:08:ad:a6:dc:d0:19:f9:
                    fd:6f:d7:81:21:fa:b8:4f:ff:39:88:87:2b:85:f0:
                    b6:db:6f:95:8e:d4:98:7b:25:67:6f:04:8f:00:a4:
                    f9:e6:0c:e5:8d:e0:55:2e:3f:30:e5:e2:d6:ac:a6:
                    27:3b:3c:b0:b9:48:5d:c0:d0:00:1b:0d:af:50:3b:
                    7a:a5:f9:ea:03:9e:43:a8:ee:ff:27:d8:8a:3c:7d:
                    c1:b4:6a:88:0b:54:e1:cc:92:7f:9f:3e:ad:63:a4:
                    49:40:04:3f:e3:17:d5:08:ec:6e:69:74:6c:b7:22:
                    1a:e7:b7:11:b3:13:97:dc:04:79:0c:2b:05:f6:4c:
                    89:ef:1e:36:0d:a7:fd:05:dc:1e:e0:a6:99:60:11:
                    e7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:BB:61:41:BF:1B:DF:E2:26:06:C1:B9:AF:E8:FE:0C:F9:67:73:20
            X509v3 Authority Key Identifier:
                keyid:3D:43:74:36:4D:EF:0A:3A:D3:1C:3F:45:44:E4:15:B9:EC:6C:70:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0/3D4374364DEF0A3AD31C3F4544E415B9EC6C7083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D4374364DEF0A3AD31C3F4544E415B9EC6C7083.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0/323830343a336564343a646430303a3a2f34362d3436203d3e20323636363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ed4:dd00::/46

    Signature Algorithm: sha256WithRSAEncryption
         aa:40:ed:7e:07:47:1c:59:16:98:68:13:f7:c5:d4:95:ee:71:
         3c:4d:de:6c:95:cf:12:de:cc:41:60:7d:ce:76:76:3a:83:73:
         e3:b1:98:74:2d:8d:ad:d9:93:a1:68:d4:db:9d:79:6c:ba:9d:
         11:0e:3e:66:74:14:9d:98:8e:5c:24:28:ab:8f:d4:70:13:4d:
         51:be:87:5a:a6:7a:e4:02:bd:b0:99:d0:cf:d4:14:45:4f:bf:
         3d:63:fb:13:8b:9b:1d:a1:2d:65:fc:6b:e8:ba:60:03:e6:8f:
         c2:6a:99:87:4c:18:08:63:54:2e:e4:27:8e:37:ae:61:14:74:
         c8:ab:cd:b2:d3:d7:e2:a1:e2:6c:2c:45:ea:4c:7f:e0:41:ac:
         01:5f:33:6b:38:95:ba:db:05:af:93:c8:48:1b:9c:2a:06:a5:
         a8:94:03:70:17:a8:aa:4a:ae:db:13:20:d3:55:c9:c0:4f:8c:
         80:f9:34:bb:02:4b:d8:23:c9:b5:41:78:2b:c5:95:c6:06:91:
         e4:4c:57:fe:86:8b:54:bb:7f:99:50:5e:a1:a6:ca:47:01:7f:
         c3:b3:bb:5d:c5:17:32:47:d9:59:28:dc:74:29:23:9a:b5:72:
         19:1e:28:80:83:9e:ed:dc:9b:8f:9c:63:4a:31:74:f9:5f:9d:
         ce:e9:1b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----