Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/0/323830343a336630383a633030303a3a2f33342d3334203d3e20323636363335.roa
File:                     323830343a336630383a633030303a3a2f33342d3334203d3e20323636363335.roa (raw, json)
Hash identifier:          pcJAzK9B2ZImaZY8pKOP8DBfGvWu6uXBkLxoe5qBowE=
Subject key identifier:   70:50:73:20:A7:1F:7D:4F:A8:E4:1B:48:32:86:39:EF:73:76:47:FC
Certificate issuer:       /CN=BCBE7BC3A7506B733BF9EF192E7ECF334970777B
Certificate serial:       737D62AF1768F7CC43512F0804C48EDD8C00197E
Authority key identifier: BC:BE:7B:C3:A7:50:6B:73:3B:F9:EF:19:2E:7E:CF:33:49:70:77:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCBE7BC3A7506B733BF9EF192E7ECF334970777B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/0/323830343a336630383a633030303a3a2f33342d3334203d3e20323636363335.roa
Signing time:             Mon 30 Oct 2023 19:41:22 +0000
ROA not before:           Mon 30 Oct 2023 19:36:22 +0000
ROA not after:            Mon 28 Oct 2024 19:41:22 +0000
asID:                     266635
IP address blocks:        2804:3f08:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:7d:62:af:17:68:f7:cc:43:51:2f:08:04:c4:8e:dd:8c:00:19:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCBE7BC3A7506B733BF9EF192E7ECF334970777B
        Validity
            Not Before: Oct 30 19:36:22 2023 GMT
            Not After : Oct 28 19:41:22 2024 GMT
        Subject: CN=70507320A71F7D4FA8E41B48328639EF737647FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a5:50:7c:f6:93:fc:e9:0f:79:1d:8d:fc:7c:
                    a5:42:8e:86:18:d2:b5:f4:4a:43:d4:d6:78:17:89:
                    b9:eb:0d:30:5d:3e:a1:39:cd:95:78:59:94:b8:10:
                    12:80:b4:ac:8c:1b:b7:a1:cc:0a:c7:2d:39:ae:d3:
                    4a:3b:7b:75:a9:4e:20:fc:c6:e4:27:3c:a1:83:13:
                    b1:50:98:e6:8a:27:15:44:3f:e2:79:70:70:ca:c1:
                    81:57:1b:b7:2b:8a:28:4a:f6:57:b1:dc:5a:28:53:
                    0d:74:70:20:7e:5a:87:76:aa:98:c8:a1:09:e1:df:
                    0d:19:df:a4:f3:4c:94:d7:b3:75:47:87:79:b6:5a:
                    37:a8:bb:ba:39:69:d9:74:0e:08:b1:62:e7:68:43:
                    e2:9a:03:20:fe:b5:8f:28:82:52:f6:a4:de:64:ac:
                    39:d8:b2:c0:92:35:77:b4:48:54:ff:0e:59:ab:e2:
                    3a:90:81:5b:d5:55:31:7a:6e:57:cd:43:82:7c:e6:
                    34:c4:2e:2f:ce:30:1a:76:30:0f:54:f5:57:c3:c3:
                    01:cf:21:38:f4:6a:b8:f2:9d:77:52:6e:29:3f:f3:
                    1c:31:9b:eb:dc:53:99:7b:7a:4d:b4:4d:1f:5e:28:
                    6f:44:9e:c9:5a:c9:2c:fc:7a:0a:e7:31:7f:2e:f4:
                    e8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:50:73:20:A7:1F:7D:4F:A8:E4:1B:48:32:86:39:EF:73:76:47:FC
            X509v3 Authority Key Identifier:
                keyid:BC:BE:7B:C3:A7:50:6B:73:3B:F9:EF:19:2E:7E:CF:33:49:70:77:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/0/BCBE7BC3A7506B733BF9EF192E7ECF334970777B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCBE7BC3A7506B733BF9EF192E7ECF334970777B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/0/323830343a336630383a633030303a3a2f33342d3334203d3e20323636363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f08:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         21:6b:d3:21:e3:db:5c:16:e7:53:8f:70:df:12:5f:37:f4:2f:
         95:cd:db:52:d6:4a:41:ec:dc:ab:ed:f7:b7:84:95:1c:dc:dd:
         ad:79:c9:c3:e8:8b:e3:54:44:2b:a7:c9:cf:fb:b6:ed:71:5a:
         0e:e1:e9:bd:65:30:3f:d0:2f:d5:f7:03:e3:b1:a8:44:fa:cc:
         a7:21:ae:23:c9:eb:67:57:e0:b2:11:83:58:f5:fe:70:37:e2:
         e4:cc:27:d1:69:91:e2:25:2b:3a:33:46:e7:29:b4:e4:9b:b4:
         f2:3e:7d:19:af:d2:e5:73:ff:05:a7:4e:4c:44:dc:74:b0:8a:
         8f:cf:f0:16:89:70:c6:e8:37:44:c2:8e:fc:3f:ff:d5:1b:c2:
         1f:05:68:54:b4:0a:3d:5c:fa:ee:95:17:71:63:19:56:b1:7f:
         06:64:cf:af:bd:d0:2b:b5:01:69:5b:44:d4:a1:7a:6b:73:46:
         83:8d:d4:7a:d9:50:c8:9f:e9:27:5a:13:4a:11:ce:40:6a:d0:
         c5:1f:9b:4b:c2:d6:8f:66:50:02:04:ae:99:ee:d2:d8:e3:37:
         1c:3b:a2:03:a7:eb:77:40:ce:95:44:a0:81:d5:31:84:0d:16:
         7c:a6:a6:fd:32:33:29:f6:ae:16:3e:8a:75:a2:26:00:0a:56:
         bb:11:9a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----