Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/0/323830343a323866343a383030303a3a2f33332d3333203d3e20323633393839.roa
File:                     323830343a323866343a383030303a3a2f33332d3333203d3e20323633393839.roa (raw, json)
Hash identifier:          yEcv1P/VaFSUj2XLZ5rksDdh8cVVGukm1rpsxh1NRFk=
Subject key identifier:   B3:C0:42:3B:1C:CE:33:15:EA:84:07:BC:8E:7B:39:3D:1C:C0:44:5E
Certificate issuer:       /CN=75AFE6C31884960EEC2F047B34E904416ED711ED
Certificate serial:       63A617E62FF0FC9115B0050B0DFCE4CEC2E4EA58
Authority key identifier: 75:AF:E6:C3:18:84:96:0E:EC:2F:04:7B:34:E9:04:41:6E:D7:11:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75AFE6C31884960EEC2F047B34E904416ED711ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/0/323830343a323866343a383030303a3a2f33332d3333203d3e20323633393839.roa
Signing time:             Wed 20 Mar 2024 18:57:19 +0000
ROA not before:           Wed 20 Mar 2024 18:52:19 +0000
ROA not after:            Wed 19 Mar 2025 18:57:19 +0000
asID:                     263989
IP address blocks:        2804:28f4:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:a6:17:e6:2f:f0:fc:91:15:b0:05:0b:0d:fc:e4:ce:c2:e4:ea:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75AFE6C31884960EEC2F047B34E904416ED711ED
        Validity
            Not Before: Mar 20 18:52:19 2024 GMT
            Not After : Mar 19 18:57:19 2025 GMT
        Subject: CN=B3C0423B1CCE3315EA8407BC8E7B393D1CC0445E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:aa:50:de:e4:99:12:4f:73:b7:9a:0d:55:65:
                    10:b7:9b:c8:aa:dd:53:14:e2:d9:02:84:2d:8e:71:
                    8c:26:1b:d8:5d:10:d6:76:0f:50:f4:94:1f:b7:f6:
                    cf:09:ea:86:89:a1:ee:5f:54:34:34:98:99:54:3d:
                    7b:69:2f:87:c9:e1:6a:0a:ba:4f:2b:1f:99:b0:23:
                    4b:cf:27:ff:f5:d6:de:df:c5:5f:bc:8d:6d:59:19:
                    01:5c:d3:e7:cf:6b:94:01:4d:ff:be:58:bc:45:d6:
                    43:e2:91:c1:cb:2f:1a:21:b4:5f:11:02:56:57:20:
                    e5:b0:7d:72:03:1c:b7:ed:1b:27:7c:a3:22:7d:ea:
                    f3:42:ba:2f:ad:be:66:0e:9d:5b:28:6a:74:9f:70:
                    d9:60:85:6d:b4:b0:b4:61:fb:b5:b7:e7:54:cb:ff:
                    62:dd:27:81:3c:bb:7d:b5:9a:76:ce:bb:fe:c6:c5:
                    68:95:06:d3:52:d0:03:2f:56:92:ca:10:c0:40:07:
                    50:4b:01:d5:6e:1d:91:6d:21:41:8c:8b:d9:18:2b:
                    69:9e:00:60:7d:01:29:3d:25:77:24:87:9b:71:c4:
                    5d:ad:8e:d3:99:9e:dc:f1:d6:03:a6:34:ae:99:da:
                    b5:10:60:38:2d:66:50:09:af:50:65:69:ff:9f:f1:
                    d4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C0:42:3B:1C:CE:33:15:EA:84:07:BC:8E:7B:39:3D:1C:C0:44:5E
            X509v3 Authority Key Identifier:
                keyid:75:AF:E6:C3:18:84:96:0E:EC:2F:04:7B:34:E9:04:41:6E:D7:11:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/0/75AFE6C31884960EEC2F047B34E904416ED711ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75AFE6C31884960EEC2F047B34E904416ED711ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/0/323830343a323866343a383030303a3a2f33332d3333203d3e20323633393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28f4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         79:62:c5:14:33:74:82:0a:81:1b:f9:a5:f5:ef:47:4c:d2:82:
         7f:a0:7c:89:01:18:96:b5:51:27:4e:e6:56:84:ba:5b:1d:db:
         1f:d9:52:3c:ee:af:39:fc:ac:f9:9d:93:79:8c:e4:14:3a:07:
         67:30:51:1e:e3:fa:07:54:9f:94:af:72:3e:44:73:4b:bc:56:
         31:a3:e6:6e:df:c0:4d:93:d5:61:47:0b:d9:33:0e:ea:f0:a5:
         13:55:fd:76:49:54:1a:1f:d4:20:0e:60:da:37:1c:7f:c8:ed:
         05:c7:f1:1b:af:79:54:d3:78:ad:8d:43:41:f0:b1:b4:ab:df:
         a8:ff:2e:39:d5:31:b4:df:b6:43:ee:86:ac:da:2a:72:3b:6d:
         03:ea:ea:bb:49:ef:2b:b2:23:29:78:94:20:89:c6:ee:ef:24:
         9c:2e:5c:40:95:a2:9c:e1:58:fa:73:47:8d:77:b4:34:1e:35:
         9f:72:cf:75:f3:ab:f1:f1:a1:2d:49:e8:fa:3f:9b:6c:c8:8b:
         00:31:ab:54:d7:cb:fb:5d:ab:0b:75:3e:b3:08:cf:81:8c:14:
         22:c0:1b:e3:6c:bf:78:da:68:6a:21:ad:4b:8a:fa:e3:b2:e7:
         e9:d9:6a:73:2c:29:d7:11:a9:4e:eb:90:ac:a5:b1:bd:6c:68:
         ae:59:eb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----