Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/323830343a326330383a3a2f33322d3438203d3e20323635313839.roa
File:                     323830343a326330383a3a2f33322d3438203d3e20323635313839.roa (raw, json)
Hash identifier:          21a2LsQ8CkYqZuIxYWzGsd/PQu56gcIXredAvIQheVQ=
Subject key identifier:   C5:2F:B9:39:4A:CF:8A:BA:92:76:47:14:FD:89:67:D7:D1:AB:57:F1
Certificate issuer:       /CN=37F55E9132B65DF93AC7E8F542B2A3115CFE1A79
Certificate serial:       6263E088F48C55C282C2B22ED7F48BA1D5A07C3E
Authority key identifier: 37:F5:5E:91:32:B6:5D:F9:3A:C7:E8:F5:42:B2:A3:11:5C:FE:1A:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/323830343a326330383a3a2f33322d3438203d3e20323635313839.roa
Signing time:             Wed 12 Jun 2024 15:43:33 +0000
ROA not before:           Wed 12 Jun 2024 15:38:33 +0000
ROA not after:            Wed 11 Jun 2025 15:43:33 +0000
asID:                     265189
IP address blocks:        2804:2c08::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:63:e0:88:f4:8c:55:c2:82:c2:b2:2e:d7:f4:8b:a1:d5:a0:7c:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37F55E9132B65DF93AC7E8F542B2A3115CFE1A79
        Validity
            Not Before: Jun 12 15:38:33 2024 GMT
            Not After : Jun 11 15:43:33 2025 GMT
        Subject: CN=C52FB9394ACF8ABA92764714FD8967D7D1AB57F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e4:b5:61:b5:dd:c3:77:66:87:03:c3:fe:55:
                    d3:d9:3b:09:a8:51:82:10:13:6e:9a:1d:db:06:86:
                    ff:31:22:c6:25:69:4c:fb:6f:71:de:76:49:7d:12:
                    53:33:90:14:59:2a:f6:1d:24:38:ea:b5:e0:4d:68:
                    b6:8c:b1:1f:43:c6:fb:ad:6f:1b:af:a6:ad:17:5d:
                    5a:d7:e2:a3:fa:4c:45:94:67:47:56:37:a0:51:4f:
                    17:2a:15:e3:9e:7a:e6:fe:0a:f2:05:39:5a:f9:f3:
                    f8:ef:7c:50:c0:3a:9c:1c:42:c2:33:eb:31:d2:9e:
                    7b:b3:f1:a3:f2:3d:eb:71:6d:5b:ed:e7:46:70:b8:
                    69:a8:fc:76:ec:65:9c:78:4f:eb:9f:39:0b:da:43:
                    46:a4:43:a7:fe:06:36:68:0c:1d:32:84:16:a0:40:
                    6a:a4:88:3f:9f:5b:00:ea:6a:72:4f:71:23:66:a9:
                    89:b7:14:8e:aa:19:5f:9e:0b:81:1d:d4:4f:57:4a:
                    d3:1c:c4:a1:4b:47:0d:76:e2:db:74:a9:1d:d9:01:
                    d4:a9:30:10:50:b6:fa:0d:a3:95:36:eb:f8:ce:b9:
                    0e:00:63:d7:28:e2:17:19:7b:dc:47:30:e8:28:0c:
                    64:99:39:03:7e:ba:c6:e2:29:85:1d:e1:2a:e8:95:
                    f5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:2F:B9:39:4A:CF:8A:BA:92:76:47:14:FD:89:67:D7:D1:AB:57:F1
            X509v3 Authority Key Identifier:
                keyid:37:F5:5E:91:32:B6:5D:F9:3A:C7:E8:F5:42:B2:A3:11:5C:FE:1A:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/323830343a326330383a3a2f33322d3438203d3e20323635313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c08::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:bc:e4:6a:e3:9b:56:f7:30:72:61:8d:45:63:dd:d0:67:d5:
         1e:9f:67:26:90:f1:8e:01:d6:f9:ed:f2:2f:50:97:8e:f5:d7:
         da:b8:60:a8:2f:53:74:f2:9e:30:ea:53:97:de:15:4f:96:3e:
         91:df:d0:ec:dc:dd:3e:0f:77:71:96:ed:ef:43:8e:51:d8:8f:
         8e:59:e1:b8:87:43:5d:b6:52:66:a8:55:e8:b9:67:ab:53:2a:
         d2:38:aa:c3:e6:7c:19:48:53:e8:81:0e:4f:ca:4e:ae:07:d3:
         84:23:6f:35:6e:45:92:b5:99:ed:62:58:27:ff:1b:3d:2b:13:
         5e:cb:99:83:c3:39:15:f4:20:48:06:ac:e0:2b:ec:93:77:be:
         27:fa:2e:bd:75:76:5b:ba:a0:53:36:fd:e7:93:64:fc:4b:c5:
         01:cf:bf:f5:52:5e:c3:c4:b3:4a:9f:d8:94:0d:7d:8f:85:ba:
         5d:a2:bf:74:b5:bb:3d:bf:28:98:d6:16:09:2e:de:3e:69:cf:
         ef:a8:92:20:36:e0:ac:e7:76:e1:69:40:cf:1c:5a:12:30:0b:
         7a:15:e3:2e:40:47:88:99:4b:3a:87:25:dc:ca:2b:34:48:2d:
         ba:35:1f:03:0d:7b:a2:b2:b9:61:ed:cc:68:eb:26:8d:65:41:
         a9:be:99:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----