Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/323830343a363539383a3a2f33322d3430203d3e20323639353032.roa
File:                     323830343a363539383a3a2f33322d3430203d3e20323639353032.roa (raw, json)
Hash identifier:          sYPfQOyWCT/xYoHQ0IlLrbrx4YJL49Rq0+SE8ynBtTM=
Subject key identifier:   EF:1F:98:D5:BD:1D:B1:73:B3:31:04:16:E9:28:B4:1E:EE:22:32:C2
Certificate issuer:       /CN=BB141441D22A497A1BF5ADB580A218637930FA95
Certificate serial:       54A5D47B0C0196AA33749AE7DAE1367A2D9B1585
Authority key identifier: BB:14:14:41:D2:2A:49:7A:1B:F5:AD:B5:80:A2:18:63:79:30:FA:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB141441D22A497A1BF5ADB580A218637930FA95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/323830343a363539383a3a2f33322d3430203d3e20323639353032.roa
Signing time:             Tue 26 Nov 2024 19:11:01 +0000
ROA not before:           Tue 26 Nov 2024 19:06:01 +0000
ROA not after:            Tue 25 Nov 2025 19:11:01 +0000
asID:                     269502
IP address blocks:        2804:6598::/32 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:a5:d4:7b:0c:01:96:aa:33:74:9a:e7:da:e1:36:7a:2d:9b:15:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB141441D22A497A1BF5ADB580A218637930FA95
        Validity
            Not Before: Nov 26 19:06:01 2024 GMT
            Not After : Nov 25 19:11:01 2025 GMT
        Subject: CN=3082010A0282010100DCAF6AFAB988B878EB0C59378DBE20211D35D32105663D03A4CEAC3FFCCFA9284CB95FFCD7E1718C5752D48481A89F1671FA3A7D0C5D1EEECA80A99E4AEDEF015F216B17D43470933029014A20D8C76AEB4D718411EC4040B1AE4ACC4758D22B77A277D39AD896C6B0EC3A2EB7AB12E2D1B6980A36B3A3B69837672AEA2AB176FD12276DB9DB590C2308B1F84B706D59DAF92AFC74EC9DFDE96A2FDB305F026B5F2901FB18BE11C1073D80403AD88E6F7D39B4CA124C7748E51F6A740EF1AB60BA6D68EF82D9406FB28CA286EC07B94D19478B3D226B47EE16CE28F7561AA1C5EFACD53706FCE625B31D9F2925008EA0B0B363AA8F35DE03905E4D6573C9F5090203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:af:6a:fa:b9:88:b8:78:eb:0c:59:37:8d:be:
                    20:21:1d:35:d3:21:05:66:3d:03:a4:ce:ac:3f:fc:
                    cf:a9:28:4c:b9:5f:fc:d7:e1:71:8c:57:52:d4:84:
                    81:a8:9f:16:71:fa:3a:7d:0c:5d:1e:ee:ca:80:a9:
                    9e:4a:ed:ef:01:5f:21:6b:17:d4:34:70:93:30:29:
                    01:4a:20:d8:c7:6a:eb:4d:71:84:11:ec:40:40:b1:
                    ae:4a:cc:47:58:d2:2b:77:a2:77:d3:9a:d8:96:c6:
                    b0:ec:3a:2e:b7:ab:12:e2:d1:b6:98:0a:36:b3:a3:
                    b6:98:37:67:2a:ea:2a:b1:76:fd:12:27:6d:b9:db:
                    59:0c:23:08:b1:f8:4b:70:6d:59:da:f9:2a:fc:74:
                    ec:9d:fd:e9:6a:2f:db:30:5f:02:6b:5f:29:01:fb:
                    18:be:11:c1:07:3d:80:40:3a:d8:8e:6f:7d:39:b4:
                    ca:12:4c:77:48:e5:1f:6a:74:0e:f1:ab:60:ba:6d:
                    68:ef:82:d9:40:6f:b2:8c:a2:86:ec:07:b9:4d:19:
                    47:8b:3d:22:6b:47:ee:16:ce:28:f7:56:1a:a1:c5:
                    ef:ac:d5:37:06:fc:e6:25:b3:1d:9f:29:25:00:8e:
                    a0:b0:b3:63:aa:8f:35:de:03:90:5e:4d:65:73:c9:
                    f5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:1F:98:D5:BD:1D:B1:73:B3:31:04:16:E9:28:B4:1E:EE:22:32:C2
            X509v3 Authority Key Identifier:
                keyid:BB:14:14:41:D2:2A:49:7A:1B:F5:AD:B5:80:A2:18:63:79:30:FA:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/BB141441D22A497A1BF5ADB580A218637930FA95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB141441D22A497A1BF5ADB580A218637930FA95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/323830343a363539383a3a2f33322d3430203d3e20323639353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6598::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:5c:8f:36:0e:d8:f9:9e:2f:01:75:33:a9:6d:90:b3:e9:46:
         b4:f0:0f:57:96:17:27:b1:71:2c:40:67:7c:9b:e3:aa:39:a5:
         09:5a:8a:5a:53:00:44:71:6c:41:80:4d:3c:66:55:b1:03:67:
         08:f3:65:15:7c:6e:ed:89:cd:d7:53:bd:3f:86:5c:dd:fe:cc:
         f9:5c:2d:87:9d:14:1b:0c:d0:3d:84:e0:1b:83:74:ba:9c:61:
         65:60:b4:0c:96:41:e4:d8:2e:f4:39:2f:8d:18:48:d6:59:6f:
         07:84:b9:d1:15:5a:4d:6c:68:a4:92:27:44:5f:f2:13:d1:70:
         ee:6f:c5:1b:3f:46:db:9e:1a:4c:ee:31:30:97:8b:48:c6:73:
         3e:23:b9:70:a2:8a:c0:ae:cb:29:35:ea:64:78:06:64:dd:c4:
         f8:bb:09:a8:87:e4:06:aa:da:77:25:6e:6b:1d:3f:07:36:34:
         55:e2:f1:f4:ca:70:81:b6:5a:ec:15:ad:5e:67:76:d9:71:d4:
         88:f0:92:d6:34:06:5f:34:fb:9a:f0:db:fb:f6:83:51:e2:3c:
         42:76:ff:57:55:db:45:f2:cc:a2:50:e1:b6:ba:40:45:3e:c0:
         a8:6b:ce:c2:9e:e6:35:33:2c:63:75:7a:e6:9e:fb:1b:50:36:
         ca:d7:a9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----