Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/0/3137392e34322e362e302f32332d3233203d3e20323731313034.roa
File:                     3137392e34322e362e302f32332d3233203d3e20323731313034.roa (raw, json)
Hash identifier:          B2vkhnGhZr27X0JM0SX/r/bVQ891Xd6PCHaoY+lo3Yk=
Subject key identifier:   9C:C0:31:FA:87:95:CC:B1:92:E8:9D:92:C4:9A:09:B8:DC:ED:B4:3C
Certificate issuer:       /CN=696EBF66C996090BCB0C788A9A0A4BFCD2E1B31C
Certificate serial:       672D90EA0C186879B886E399BECDC603FD3F91C7
Authority key identifier: 69:6E:BF:66:C9:96:09:0B:CB:0C:78:8A:9A:0A:4B:FC:D2:E1:B3:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/696EBF66C996090BCB0C788A9A0A4BFCD2E1B31C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/0/3137392e34322e362e302f32332d3233203d3e20323731313034.roa
Signing time:             Tue 18 Apr 2023 23:42:15 +0000
ROA not before:           Tue 18 Apr 2023 23:37:15 +0000
ROA not after:            Tue 16 Apr 2024 23:42:15 +0000
asID:                     271104
IP address blocks:        179.42.6.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:2d:90:ea:0c:18:68:79:b8:86:e3:99:be:cd:c6:03:fd:3f:91:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=696EBF66C996090BCB0C788A9A0A4BFCD2E1B31C
        Validity
            Not Before: Apr 18 23:37:15 2023 GMT
            Not After : Apr 16 23:42:15 2024 GMT
        Subject: CN=9CC031FA8795CCB192E89D92C49A09B8DCEDB43C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:22:ce:3c:2e:c3:15:5b:6d:3a:3a:0f:2c:19:
                    f5:46:a8:04:c9:46:93:3a:2f:38:26:7d:12:05:02:
                    73:af:ed:a9:4e:64:b2:3c:4c:b9:b1:ed:e0:2b:4c:
                    28:4a:05:d7:7f:12:0d:66:5a:bd:5e:7e:91:2e:34:
                    ef:79:d1:80:c1:cd:16:46:9d:ce:a2:37:c9:fd:d6:
                    4c:82:27:cf:bc:5e:65:d4:ea:e9:40:82:0b:b8:dd:
                    1a:18:ff:5a:c8:6a:82:39:8a:62:fb:4d:2a:c5:89:
                    6e:9a:1c:47:b2:99:ee:17:b1:ef:be:5c:0c:a2:66:
                    04:96:29:ae:4b:77:a9:b4:7a:78:a9:19:42:62:90:
                    1e:8a:20:a3:92:8b:9b:b4:3a:89:f4:c6:53:b1:b7:
                    08:ef:d8:74:41:5c:6c:3e:41:87:4e:c0:b9:21:29:
                    dd:8a:5a:e1:23:55:46:2f:17:8b:dd:19:65:48:45:
                    b2:c9:72:92:da:f3:a3:8f:a8:cb:99:b6:a4:5e:d5:
                    c0:26:bd:55:23:16:d3:a7:83:b0:88:47:e3:57:49:
                    9d:24:17:95:b1:4d:ce:d1:62:a2:bf:72:a0:76:2d:
                    69:9b:d9:63:60:d3:b6:c6:07:0c:92:94:dc:3f:71:
                    d6:e7:e9:59:00:66:e0:0f:ab:3c:9e:8d:a4:90:eb:
                    91:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C0:31:FA:87:95:CC:B1:92:E8:9D:92:C4:9A:09:B8:DC:ED:B4:3C
            X509v3 Authority Key Identifier:
                keyid:69:6E:BF:66:C9:96:09:0B:CB:0C:78:8A:9A:0A:4B:FC:D2:E1:B3:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/0/696EBF66C996090BCB0C788A9A0A4BFCD2E1B31C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/696EBF66C996090BCB0C788A9A0A4BFCD2E1B31C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/0/3137392e34322e362e302f32332d3233203d3e20323731313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:b9:24:d8:50:49:ae:ce:5f:e2:0a:fa:2e:d4:70:f9:ab:cd:
         2b:82:bb:2d:dd:75:30:06:bb:5a:b0:9f:d1:09:e7:09:c9:ff:
         4d:eb:60:6e:e9:9e:57:89:5e:ad:ab:c2:7b:af:87:74:96:16:
         b1:c5:74:90:e4:6b:36:e0:a4:b9:ff:22:b9:0c:76:2e:f5:cf:
         93:90:69:88:9f:2a:63:c4:fa:6c:19:7d:1a:e0:bc:85:17:3f:
         73:d5:47:ac:c2:2e:5d:ec:77:33:98:0e:7e:29:9d:c1:92:ab:
         fb:b9:38:f7:7a:e6:10:03:10:36:46:1a:82:64:ca:ee:c1:55:
         72:25:c1:f2:b5:e2:7c:c3:53:95:c8:6f:4a:a6:86:ed:bf:b9:
         c7:ac:a7:ac:43:4f:d5:5d:3b:e0:50:bf:19:17:0f:74:3e:0c:
         d4:8d:b4:26:63:82:a1:4e:c3:06:2c:1e:18:59:0f:a0:c8:da:
         8d:a4:4e:0c:e4:f3:c6:5e:3f:6c:db:d5:29:c1:69:46:46:df:
         cd:bd:35:35:79:35:b1:93:f3:31:ac:fd:8f:0d:05:e1:25:27:
         58:31:3c:0e:8e:1d:42:15:7c:c1:7f:bc:e9:0c:12:b5:02:26:
         d8:a2:1a:79:f2:e2:48:b2:81:bb:b0:3c:d8:3a:f0:91:14:99:
         5e:4e:87:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----