Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/0/323830343a386361633a323130303a3a2f34302d3430203d3e20323733383134.roa
File:                     323830343a386361633a323130303a3a2f34302d3430203d3e20323733383134.roa (raw, json)
Hash identifier:          gcVnd+/M2wvvUB7z5IsNX8PChut7wcjpKUV7Uk1bUm0=
Subject key identifier:   9D:4F:7F:FC:BB:06:C2:39:4E:0D:C2:E1:B9:9A:AE:FD:16:74:50:C2
Certificate issuer:       /CN=6C20D6D1C3A83815C34AD48BB58CDE7175526D06
Certificate serial:       4D6BAED93AB6199C687A31DB93D03AA0A48895ED
Authority key identifier: 6C:20:D6:D1:C3:A8:38:15:C3:4A:D4:8B:B5:8C:DE:71:75:52:6D:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6C20D6D1C3A83815C34AD48BB58CDE7175526D06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/0/323830343a386361633a323130303a3a2f34302d3430203d3e20323733383134.roa
Signing time:             Thu 25 Jan 2024 19:23:35 +0000
ROA not before:           Thu 25 Jan 2024 19:18:35 +0000
ROA not after:            Thu 23 Jan 2025 19:23:35 +0000
asID:                     273814
IP address blocks:        2804:8cac:2100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:6b:ae:d9:3a:b6:19:9c:68:7a:31:db:93:d0:3a:a0:a4:88:95:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C20D6D1C3A83815C34AD48BB58CDE7175526D06
        Validity
            Not Before: Jan 25 19:18:35 2024 GMT
            Not After : Jan 23 19:23:35 2025 GMT
        Subject: CN=9D4F7FFCBB06C2394E0DC2E1B99AAEFD167450C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9b:0b:6a:ea:20:72:b2:2f:da:da:8c:f8:77:
                    e4:f8:3d:bf:77:6f:25:05:10:96:f3:c2:4a:d7:90:
                    48:84:69:01:f0:8b:d2:ab:d9:a7:bd:39:26:47:2f:
                    0e:a3:48:c1:b9:b6:ac:15:fa:f4:3c:47:55:35:bd:
                    60:2d:e9:59:d6:7f:5d:bf:04:3b:16:24:cc:11:af:
                    c4:10:b5:b1:b3:19:20:2e:4f:ea:ff:a7:9b:10:ba:
                    0c:c1:d7:52:b6:d1:78:a4:81:fd:34:c5:cf:2a:3c:
                    bf:de:ec:5d:7b:71:ef:50:0a:c6:c7:e5:08:9b:56:
                    42:82:bb:f3:30:dc:71:e7:ea:e5:74:a4:4a:26:b9:
                    6a:4f:df:29:11:0c:25:e9:46:ce:7d:9f:49:95:b5:
                    cf:06:5a:4d:b5:14:0b:fe:92:7c:6c:71:e4:d7:69:
                    c9:cc:23:ec:93:11:82:0a:25:8d:5f:b9:f9:ad:4d:
                    7d:ae:90:45:7d:a3:b4:88:28:01:1b:52:38:68:d5:
                    71:5f:3c:7a:ab:43:51:b2:f0:89:da:68:67:1a:d3:
                    f8:16:c0:5d:88:49:2a:93:3b:7b:e2:e8:75:6b:43:
                    6a:88:8a:be:db:f8:a2:92:c0:98:0d:5b:e2:ac:69:
                    42:f4:b1:3d:ff:0d:f1:3b:b1:1d:0a:6f:49:04:45:
                    f1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:4F:7F:FC:BB:06:C2:39:4E:0D:C2:E1:B9:9A:AE:FD:16:74:50:C2
            X509v3 Authority Key Identifier:
                keyid:6C:20:D6:D1:C3:A8:38:15:C3:4A:D4:8B:B5:8C:DE:71:75:52:6D:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/0/6C20D6D1C3A83815C34AD48BB58CDE7175526D06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6C20D6D1C3A83815C34AD48BB58CDE7175526D06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/0/323830343a386361633a323130303a3a2f34302d3430203d3e20323733383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8cac:2100::/40

    Signature Algorithm: sha256WithRSAEncryption
         6f:01:a3:56:47:f2:81:f2:08:9a:8d:c8:97:41:d7:b5:a3:5d:
         4a:f5:df:fd:6d:11:c0:b2:54:31:e7:0c:7b:ec:44:1e:8f:18:
         c0:95:d1:c8:29:c1:83:9f:d2:2a:c2:85:94:18:f4:1f:82:43:
         2a:86:bd:80:3b:70:79:db:4f:bf:c3:31:9b:97:52:b5:6d:34:
         e6:11:33:1c:a2:85:8f:6b:6a:71:3a:12:bb:18:e3:3a:3b:e2:
         57:71:29:9b:75:68:25:2c:9d:37:1f:79:9c:84:63:f1:e7:79:
         59:92:f2:bf:b0:b5:42:c6:85:23:f5:7c:e6:b0:7f:b8:ab:c6:
         b6:7d:19:b9:89:14:d3:f2:7b:d1:d7:3b:b1:f4:40:31:5c:08:
         7a:9e:84:7f:41:b0:82:ef:41:cb:37:83:a9:70:5b:95:85:e2:
         5d:37:4a:12:81:b9:88:62:16:05:1f:8d:a2:6a:dd:30:a9:7c:
         7b:a4:13:a8:29:0e:27:7a:c4:81:33:72:7c:00:7f:ed:7e:bb:
         57:92:d5:52:89:55:48:b7:cb:a0:c8:c2:2f:93:aa:5b:6f:aa:
         5c:22:65:e6:f5:3b:ae:b6:49:69:fc:61:6a:75:a7:4a:0b:c0:
         c4:65:4e:ba:a9:7f:fb:30:b7:15:cb:18:c5:6c:16:d7:67:a8:
         3f:f1:2d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----