Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MyEAtdchq7NhmA2aFU5HknuybBVEddATCfEYNe7NCtQ/0/323830343a323432633a3a2f33322d3332203d3e20323634323036.roa
File:                     323830343a323432633a3a2f33322d3332203d3e20323634323036.roa (raw, json)
Hash identifier:          ylE2qxjBevGriZNKiAPrfq5byb2DzFHXi/IvZirW+xs=
Subject key identifier:   7C:80:C5:34:C6:9A:25:1D:C9:06:6B:BF:5A:5D:69:21:70:FA:1D:EC
Certificate issuer:       /CN=B4DF8A1E33CBE9E988418B2FDBBC3EA73C9FDEB8
Certificate serial:       7EDFF64EF773CAE7B3509CB5B70DA221DB2231
Authority key identifier: B4:DF:8A:1E:33:CB:E9:E9:88:41:8B:2F:DB:BC:3E:A7:3C:9F:DE:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4DF8A1E33CBE9E988418B2FDBBC3EA73C9FDEB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MyEAtdchq7NhmA2aFU5HknuybBVEddATCfEYNe7NCtQ/0/323830343a323432633a3a2f33322d3332203d3e20323634323036.roa
Signing time:             Fri 30 Jun 2023 00:00:00 +0000
ROA not before:           Thu 29 Jun 2023 23:55:00 +0000
ROA not after:            Fri 28 Jun 2024 00:00:00 +0000
asID:                     264206
IP address blocks:        2804:242c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:df:f6:4e:f7:73:ca:e7:b3:50:9c:b5:b7:0d:a2:21:db:22:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4DF8A1E33CBE9E988418B2FDBBC3EA73C9FDEB8
        Validity
            Not Before: Jun 29 23:55:00 2023 GMT
            Not After : Jun 28 00:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:4a:c7:4a:3d:32:ba:ae:d9:3e:cf:57:6d:73:
                    4e:7a:96:72:fc:d4:34:ca:f7:54:b1:4c:52:6c:49:
                    a1:04:9d:84:a7:dc:60:c8:e7:1e:0c:6f:95:f4:f3:
                    65:d0:3c:25:dd:55:47:f1:ce:11:53:9f:f3:89:c7:
                    45:b5:7e:45:e8:9f:4d:2a:f6:d9:49:b6:0d:3b:f0:
                    61:bc:15:04:26:cf:3a:f8:f8:ef:c1:81:40:a3:60:
                    75:85:4c:ed:0b:b6:d4:e4:0e:bd:95:69:53:04:49:
                    6b:ea:bd:e3:61:3d:f6:56:c7:f5:78:ce:09:df:d7:
                    85:71:5b:09:82:97:bf:8e:c3:3b:0e:43:37:fe:89:
                    00:77:b1:2a:6e:16:30:e8:f8:b7:87:92:fc:04:dd:
                    5a:ee:0f:80:2a:68:f4:61:18:63:cc:c8:12:e1:c9:
                    19:d0:ee:8a:c6:2c:32:d3:4b:5a:16:67:16:b6:9c:
                    ce:86:de:27:7b:b3:a4:8b:66:e3:89:62:2e:58:d4:
                    60:bc:e9:40:78:21:71:33:ae:0a:e0:8a:7c:ad:04:
                    cd:09:c5:71:31:28:10:b1:6c:97:0d:1d:e2:54:aa:
                    b0:96:69:55:ce:fe:6e:cf:1c:2e:42:b3:8f:05:ae:
                    4b:fa:b9:39:27:83:3a:82:4c:69:3f:c0:18:eb:72:
                    2a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:80:C5:34:C6:9A:25:1D:C9:06:6B:BF:5A:5D:69:21:70:FA:1D:EC
            X509v3 Authority Key Identifier:
                keyid:B4:DF:8A:1E:33:CB:E9:E9:88:41:8B:2F:DB:BC:3E:A7:3C:9F:DE:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MyEAtdchq7NhmA2aFU5HknuybBVEddATCfEYNe7NCtQ/0/B4DF8A1E33CBE9E988418B2FDBBC3EA73C9FDEB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4DF8A1E33CBE9E988418B2FDBBC3EA73C9FDEB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MyEAtdchq7NhmA2aFU5HknuybBVEddATCfEYNe7NCtQ/0/323830343a323432633a3a2f33322d3332203d3e20323634323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:242c::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:9c:4e:d7:b1:3d:68:56:4a:11:1b:96:96:89:ae:22:04:3f:
         b6:66:a8:27:08:12:23:94:8b:87:f4:07:3b:fa:f8:53:c3:a3:
         35:0f:f7:b5:52:43:23:1f:eb:25:45:9b:12:6e:7b:69:0b:a2:
         0c:ea:6d:d8:e8:a8:47:3d:bf:e0:ae:77:e0:77:e5:5f:7b:bc:
         cf:dd:0c:9f:aa:cf:94:8b:ed:8f:78:de:67:d6:79:02:5c:76:
         bf:c1:f6:fc:d4:53:a5:32:7e:eb:d2:32:6c:84:82:50:d9:3d:
         94:9e:06:85:06:c0:84:ad:56:c6:d5:e1:cc:65:21:1f:77:0e:
         0b:69:69:4a:58:5e:c9:09:a1:e6:01:81:ce:b7:3d:4f:4d:69:
         6c:93:78:de:9c:89:30:51:1c:a2:a3:9d:7b:0f:18:02:c4:76:
         2b:0e:d0:f1:88:50:ce:d9:38:0d:e7:94:0f:55:0c:16:89:3c:
         9e:2c:65:86:46:cb:0d:f6:7b:93:fa:08:60:37:ab:12:31:39:
         db:25:f3:b5:f2:3b:1c:69:02:44:30:dc:36:64:f1:2b:e6:2d:
         9c:18:cc:2a:27:bb:7f:70:3e:e2:0e:bc:f9:2f:67:c3:d9:04:
         db:73:e1:f9:92:b1:85:51:06:dd:08:2e:c9:3b:6a:fe:e2:d1:
         15:b8:fd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----