Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/323830343a333933633a373730303a3a2f3430203d3e20323636303230.roa
File:                     323830343a333933633a373730303a3a2f3430203d3e20323636303230.roa (raw, json)
Hash identifier:          bUqTEEBXWp9CRgdR/wTmStEFxX6W1BfxWUiUM5r2xoc=
Subject key identifier:   15:2E:B4:5A:77:50:08:4A:10:5E:14:A0:17:8F:D6:67:77:3B:41:E3
Certificate issuer:       /CN=9B82367026AF19E52BC80C942DEF8DA09D76AEF3
Certificate serial:       46B14611AC4EC24390B4969CF1AE63AA85E32354
Authority key identifier: 9B:82:36:70:26:AF:19:E5:2B:C8:0C:94:2D:EF:8D:A0:9D:76:AE:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B82367026AF19E52BC80C942DEF8DA09D76AEF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/323830343a333933633a373730303a3a2f3430203d3e20323636303230.roa
Signing time:             Fri 08 Mar 2024 02:00:00 +0000
ROA not before:           Fri 08 Mar 2024 01:55:00 +0000
ROA not after:            Sat 08 Mar 2025 02:00:00 +0000
asID:                     266020
IP address blocks:        2804:393c:7700::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:b1:46:11:ac:4e:c2:43:90:b4:96:9c:f1:ae:63:aa:85:e3:23:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B82367026AF19E52BC80C942DEF8DA09D76AEF3
        Validity
            Not Before: Mar  8 01:55:00 2024 GMT
            Not After : Mar  8 02:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bb:67:a8:3d:8d:3a:cb:0f:3d:cd:a3:6c:f5:
                    36:a8:14:05:e1:02:49:b8:aa:f4:10:83:2f:66:27:
                    31:28:56:42:d2:5d:94:e3:e9:ca:36:e4:92:92:00:
                    bd:b8:b4:a7:c4:ae:73:db:53:05:c3:1c:ca:b1:17:
                    0c:c2:45:77:e8:e9:5e:fb:1d:c1:c4:91:0b:c0:2a:
                    2b:93:7a:a8:6f:4e:5d:8a:93:9d:25:f6:b8:5a:ba:
                    e0:78:f9:31:43:13:36:da:2a:36:93:75:f7:33:3a:
                    c6:68:2e:2b:af:98:6b:05:cd:9d:1e:fa:3f:41:c6:
                    f9:73:0c:fd:74:1b:79:a3:90:f0:32:64:66:c5:7b:
                    99:0d:96:fc:af:42:ba:8a:ba:b9:74:c1:2f:67:0b:
                    e2:20:90:de:49:54:21:a8:e3:df:a5:dc:42:ad:ba:
                    e7:46:41:a9:55:b7:af:41:3a:4f:64:87:41:21:f3:
                    d1:ba:0b:4b:41:04:9e:87:b9:f0:5e:af:ce:7e:46:
                    af:c6:b1:7a:3a:7e:9d:5b:3d:aa:d9:c9:ae:51:0d:
                    07:95:3d:ad:bc:24:e3:d3:a8:b4:bb:45:91:a2:4a:
                    e1:81:71:a1:d2:97:26:44:f4:6c:b5:8f:50:14:ff:
                    9e:6f:a7:6d:82:89:93:b3:04:8e:03:34:bb:0a:f5:
                    70:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:2E:B4:5A:77:50:08:4A:10:5E:14:A0:17:8F:D6:67:77:3B:41:E3
            X509v3 Authority Key Identifier:
                keyid:9B:82:36:70:26:AF:19:E5:2B:C8:0C:94:2D:EF:8D:A0:9D:76:AE:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/9B82367026AF19E52BC80C942DEF8DA09D76AEF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B82367026AF19E52BC80C942DEF8DA09D76AEF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/323830343a333933633a373730303a3a2f3430203d3e20323636303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:393c:7700::/40

    Signature Algorithm: sha256WithRSAEncryption
         4d:88:e8:57:03:39:66:81:ae:5f:16:94:85:27:90:96:a0:2a:
         0f:8b:18:52:50:56:d5:b0:4a:a8:f1:ae:cc:91:7f:93:d0:31:
         11:31:a8:fd:d0:9a:06:d8:68:f6:b1:20:cb:49:63:22:3b:29:
         49:0d:4a:18:a3:69:f6:28:49:f9:10:c1:73:31:5f:28:98:ba:
         8c:24:e5:fc:af:1b:89:b4:8b:17:0c:aa:95:fb:20:25:a7:30:
         af:e0:01:c4:00:eb:8a:c3:1c:d4:e6:76:22:8c:3f:f7:3a:10:
         ea:62:3f:60:cc:d1:70:22:4f:f1:5b:c9:75:87:8b:5c:19:72:
         89:b8:5a:60:99:ce:05:61:7b:f1:f1:58:3f:e1:12:f1:25:15:
         84:e1:e9:bf:47:47:41:36:64:94:9f:25:c7:92:31:2a:ff:9f:
         5e:00:0d:01:f4:ec:cc:c9:78:b5:0a:b0:6d:fe:53:0c:c4:c9:
         af:04:e9:42:2b:25:01:4e:8e:e2:67:3e:84:74:be:59:4f:24:
         c0:81:c1:b0:a6:f3:ef:55:9b:59:36:26:13:95:16:c0:22:c5:
         a6:44:3e:ee:87:c5:ae:46:24:6a:7a:b1:ae:46:9e:e6:6e:1a:
         5d:7b:bd:01:50:7d:e4:d5:cb:99:29:6e:46:e2:7e:6a:63:85:
         c3:9c:39:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----