Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/323830343a323934383a343030303a3a2f33362d3336203d3e20323634303031.roa
File:                     323830343a323934383a343030303a3a2f33362d3336203d3e20323634303031.roa (raw, json)
Hash identifier:          RXnLlknA3dTPr2Pr+R5g/1YgExsI/+fJ8eJOW2ka4Tk=
Subject key identifier:   EA:0B:C2:68:F3:5A:56:1E:AB:D4:96:92:AA:1D:7C:60:73:EE:7B:5A
Certificate issuer:       /CN=5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1
Certificate serial:       6E597521F3825D82DBF7A7E66B524C2008588124
Authority key identifier: 5B:D9:C3:7F:56:17:60:31:7D:A7:70:DA:6B:6E:5E:3C:C7:2A:9F:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/323830343a323934383a343030303a3a2f33362d3336203d3e20323634303031.roa
Signing time:             Thu 18 May 2023 17:18:52 +0000
ROA not before:           Thu 18 May 2023 17:13:52 +0000
ROA not after:            Thu 16 May 2024 17:18:52 +0000
asID:                     264001
IP address blocks:        2804:2948:4000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:59:75:21:f3:82:5d:82:db:f7:a7:e6:6b:52:4c:20:08:58:81:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1
        Validity
            Not Before: May 18 17:13:52 2023 GMT
            Not After : May 16 17:18:52 2024 GMT
        Subject: CN=EA0BC268F35A561EABD49692AA1D7C6073EE7B5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ef:2a:f5:e6:34:e5:54:83:35:5c:cb:95:69:
                    f1:7a:4b:73:e7:ce:c5:d6:4f:96:52:d1:26:91:36:
                    17:b0:b4:82:44:09:52:ee:34:36:dc:d9:c3:cc:21:
                    4b:41:92:46:3c:bc:db:db:6c:3f:2d:53:6e:4a:7e:
                    10:dc:c4:97:8d:c6:90:b5:20:8a:a8:6b:b6:0a:8f:
                    f9:36:f8:74:d1:60:08:38:0e:fa:5e:43:8c:ce:ae:
                    58:e2:f1:c6:0c:92:c6:3d:84:2a:50:d7:cc:70:23:
                    49:6e:69:4b:9d:cf:6a:a1:1c:ce:44:1c:86:07:50:
                    91:b4:7f:88:ec:60:52:dd:aa:66:36:47:e5:40:b4:
                    fb:e0:18:53:74:0f:cb:3d:ec:50:6e:54:d3:0a:d7:
                    ae:f5:73:a5:0b:de:3e:f4:20:3b:99:70:37:3e:e6:
                    2d:33:28:0b:91:f3:a4:09:ef:93:ea:2f:03:c4:b7:
                    32:5d:96:e2:1b:79:56:cb:56:d6:8d:e7:e2:a4:71:
                    f3:b5:fc:1f:da:64:ff:b7:d5:82:b0:07:55:49:a1:
                    53:21:40:38:df:06:10:91:09:a6:d3:e1:f3:a7:fe:
                    92:bc:67:c7:1c:38:20:50:b9:1a:e1:49:ee:32:31:
                    38:b9:cf:49:b2:36:ba:80:0d:eb:b3:7b:81:ce:91:
                    95:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:0B:C2:68:F3:5A:56:1E:AB:D4:96:92:AA:1D:7C:60:73:EE:7B:5A
            X509v3 Authority Key Identifier:
                keyid:5B:D9:C3:7F:56:17:60:31:7D:A7:70:DA:6B:6E:5E:3C:C7:2A:9F:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/323830343a323934383a343030303a3a2f33362d3336203d3e20323634303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2948:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7d:1f:b2:c2:c8:6b:f1:fb:42:58:b0:4d:47:f7:85:ad:16:a8:
         4d:c4:fd:12:f9:8c:df:d7:ea:6c:6b:76:24:7f:67:de:a8:68:
         3b:0f:b6:c6:6f:e1:38:b5:f5:cc:1e:8b:c5:f8:ec:f0:c9:47:
         f2:0b:be:f6:99:4f:d4:9f:ab:82:13:7f:45:5f:9e:86:66:2b:
         5f:e1:0e:be:60:71:f3:18:a9:ee:4f:bf:b7:1c:47:81:b7:11:
         05:6c:f1:14:d6:de:70:2d:f3:63:d7:c1:3e:eb:aa:7f:1f:1d:
         36:a6:3c:80:93:b1:bc:14:73:17:00:10:0a:40:d4:e4:f2:90:
         97:f6:4a:95:49:8d:ed:f7:0d:92:5f:07:6e:91:c9:9e:1d:5e:
         f0:e8:07:f4:40:5f:2d:08:ee:a0:b8:57:b7:63:75:b9:8d:7e:
         97:52:85:d6:19:8c:d9:b7:6a:9a:e8:5d:74:1e:19:17:13:65:
         1f:51:b5:f2:96:e3:a9:d4:10:0f:08:d4:5f:1d:f2:36:8b:bc:
         ed:e6:a7:d0:09:8e:5c:d0:df:8a:9e:76:fd:96:75:0e:05:a2:
         f8:f6:f7:c8:3d:6b:41:a7:1c:73:53:a2:e1:84:e4:3c:a5:55:
         ea:d9:22:e2:56:ce:f8:c7:9c:2a:41:ef:ee:d3:21:61:71:59:
         b0:b4:cf:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----