Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/0/323830343a336630383a383030303a3a2f33342d3334203d3e20323636363335.roa
File:                     323830343a336630383a383030303a3a2f33342d3334203d3e20323636363335.roa (raw, json)
Hash identifier:          t0mYTAdWcjtVZLPAzPAbvG2ea6K8ji3Hn+QIYWHYab0=
Subject key identifier:   F8:0D:E9:0A:12:3F:C3:27:95:A5:93:8B:1D:0B:26:59:2B:84:B9:7D
Certificate issuer:       /CN=BCBE7BC3A7506B733BF9EF192E7ECF334970777B
Certificate serial:       1AAFF1339A0C0C1DD36A80F11B85E5CA5A03C932
Authority key identifier: BC:BE:7B:C3:A7:50:6B:73:3B:F9:EF:19:2E:7E:CF:33:49:70:77:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCBE7BC3A7506B733BF9EF192E7ECF334970777B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/0/323830343a336630383a383030303a3a2f33342d3334203d3e20323636363335.roa
Signing time:             Mon 30 Oct 2023 19:40:26 +0000
ROA not before:           Mon 30 Oct 2023 19:35:26 +0000
ROA not after:            Mon 28 Oct 2024 19:40:26 +0000
asID:                     266635
IP address blocks:        2804:3f08:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:af:f1:33:9a:0c:0c:1d:d3:6a:80:f1:1b:85:e5:ca:5a:03:c9:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCBE7BC3A7506B733BF9EF192E7ECF334970777B
        Validity
            Not Before: Oct 30 19:35:26 2023 GMT
            Not After : Oct 28 19:40:26 2024 GMT
        Subject: CN=F80DE90A123FC32795A5938B1D0B26592B84B97D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:10:20:f8:b0:7a:90:67:aa:cc:1c:05:6d:95:
                    72:09:a0:1c:bc:8d:c3:d4:fa:74:db:42:62:52:71:
                    99:c7:41:e6:50:e7:76:8f:48:5b:ef:96:92:41:8c:
                    45:99:53:b4:6f:44:a3:4d:50:7c:ab:bf:95:1a:b4:
                    ef:0a:26:95:8f:56:9e:b3:9d:5d:cc:b1:2e:0a:e3:
                    f3:5a:a6:c6:93:33:98:64:76:f7:87:df:b6:f9:97:
                    b4:da:38:44:5a:1d:37:c2:e2:e0:d2:aa:01:40:00:
                    b4:25:2b:f3:a8:77:d5:47:57:1b:df:ea:87:ad:d0:
                    f2:38:1c:97:1d:c9:77:4d:3b:fc:5e:93:16:35:76:
                    a1:82:a3:e8:e3:66:57:87:23:c7:17:4a:cb:0b:08:
                    4f:3d:47:94:88:ff:56:88:b1:cf:b7:e2:61:54:10:
                    a9:2e:bb:31:dd:5c:9e:17:b8:a1:7b:55:f0:62:ab:
                    91:b1:b1:49:c3:59:19:d4:5e:62:8e:e1:f2:cf:98:
                    ae:af:e5:d6:87:cc:fa:e6:97:ac:9c:cd:92:ca:86:
                    ad:23:f4:30:b2:86:44:b7:12:28:1f:0c:a8:21:f7:
                    15:f6:b2:7c:52:b9:b3:b7:26:af:4c:79:3e:8d:5f:
                    37:a3:58:4b:d6:ed:cb:05:b6:b4:85:b9:a2:b4:a7:
                    35:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:0D:E9:0A:12:3F:C3:27:95:A5:93:8B:1D:0B:26:59:2B:84:B9:7D
            X509v3 Authority Key Identifier:
                keyid:BC:BE:7B:C3:A7:50:6B:73:3B:F9:EF:19:2E:7E:CF:33:49:70:77:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/0/BCBE7BC3A7506B733BF9EF192E7ECF334970777B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCBE7BC3A7506B733BF9EF192E7ECF334970777B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/0/323830343a336630383a383030303a3a2f33342d3334203d3e20323636363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f08:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3e:01:a8:1b:16:45:12:07:89:29:e9:98:30:c4:9d:a4:c7:4e:
         52:83:b1:80:7b:1c:2f:d9:31:80:86:1e:e5:c9:cb:6f:32:b1:
         32:63:03:48:df:86:42:73:c7:32:ef:17:ae:bd:9b:75:00:84:
         42:62:e1:13:c9:24:e5:ec:a0:2d:f7:2c:28:10:ba:e8:c2:fb:
         08:44:86:17:92:90:43:9d:ed:e1:66:e0:27:ba:02:a3:1e:4f:
         e5:d5:ed:f6:5d:b3:f7:47:1c:10:18:2c:3a:c2:3b:6b:82:a9:
         78:67:3a:80:1f:88:c0:78:1a:fe:17:c0:47:33:9a:49:0f:4f:
         28:57:c5:11:aa:56:97:f5:01:7f:28:60:4a:2c:22:52:91:b5:
         6f:f2:0a:8e:38:f9:7f:31:11:12:bf:97:00:5b:9c:48:43:8a:
         a2:49:73:0a:d0:c7:35:2d:4b:67:9a:af:59:49:c8:79:36:3f:
         e0:ed:51:8f:aa:58:71:27:15:a8:32:1d:ae:0d:80:8e:7d:f2:
         cb:84:18:4b:cc:04:fc:16:71:05:b6:6c:bb:60:87:37:39:fb:
         c9:30:10:75:68:fb:a5:28:30:87:ea:ae:01:cc:fc:79:d7:8f:
         4a:5f:78:88:82:28:1c:6d:04:47:ea:55:78:29:99:d3:71:54:
         fa:97:b8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----