Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3caMr6Qf5sYrtQni7JhC913G1ZPcVwywnBTiXwC4VAkH/0/323830343a333633303a3a2f33322d3438203d3e20323636333332.roa
File:                     323830343a333633303a3a2f33322d3438203d3e20323636333332.roa (raw, json)
Hash identifier:          t4Ubvy5fYB0okMVgF87pHF/jkni0rBsdO8KmUhvOZ0I=
Subject key identifier:   3E:48:9C:2A:AF:DC:70:A2:F2:7B:33:D9:DF:62:B6:C8:6F:44:65:03
Certificate issuer:       /CN=32FE1CE8CBD1103FB4A7A3C7C4C58358512AB304
Certificate serial:       52100CC49A504BDF59BB4DBAD8B3EE4F1DFC073B
Authority key identifier: 32:FE:1C:E8:CB:D1:10:3F:B4:A7:A3:C7:C4:C5:83:58:51:2A:B3:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32FE1CE8CBD1103FB4A7A3C7C4C58358512AB304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3caMr6Qf5sYrtQni7JhC913G1ZPcVwywnBTiXwC4VAkH/0/323830343a333633303a3a2f33322d3438203d3e20323636333332.roa
Signing time:             Thu 14 Sep 2023 20:52:21 +0000
ROA not before:           Thu 14 Sep 2023 20:47:21 +0000
ROA not after:            Thu 12 Sep 2024 20:52:21 +0000
asID:                     266332
IP address blocks:        2804:3630::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:10:0c:c4:9a:50:4b:df:59:bb:4d:ba:d8:b3:ee:4f:1d:fc:07:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32FE1CE8CBD1103FB4A7A3C7C4C58358512AB304
        Validity
            Not Before: Sep 14 20:47:21 2023 GMT
            Not After : Sep 12 20:52:21 2024 GMT
        Subject: CN=3E489C2AAFDC70A2F27B33D9DF62B6C86F446503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ff:5b:e5:3d:0a:fe:56:59:82:30:b7:bc:a7:
                    04:7f:24:01:45:63:82:02:26:ab:d7:e6:4e:70:cc:
                    e7:ed:78:89:0e:74:79:ba:da:44:3a:eb:3f:f5:cf:
                    68:f5:8c:8b:6f:34:30:d4:bf:a5:35:40:28:bf:10:
                    de:33:a2:11:5e:8e:b7:cb:6f:4b:ee:db:96:2d:f5:
                    14:1d:77:1c:c6:de:74:d9:fb:4a:35:d7:6b:63:bc:
                    2f:b2:f2:60:d1:f5:06:35:60:6c:22:5d:3e:72:22:
                    9f:10:91:ea:cd:87:b3:f6:29:1e:77:a7:83:8f:40:
                    d5:ff:b2:06:ec:11:3f:35:8d:96:0a:4a:69:11:08:
                    9b:e7:b2:2a:f0:df:d4:d3:e9:e1:6d:62:c1:d2:a4:
                    d8:d8:9f:59:44:9a:66:cb:ee:e9:ee:ff:4d:56:43:
                    6f:1e:d5:e0:e0:51:b9:d3:7a:a1:48:b0:fb:54:ac:
                    2e:61:8c:26:8a:5f:bd:cd:0a:1d:50:f3:db:d4:4f:
                    bb:a5:71:f0:03:0a:b2:ef:a4:c8:8d:56:50:e8:4e:
                    b4:3e:28:0d:a7:10:8c:c8:2a:5d:17:87:fd:dc:b2:
                    40:12:bc:75:28:82:f8:a7:34:b7:f5:38:f0:ac:c1:
                    6d:9e:01:ee:1f:9f:ff:01:f0:05:80:4c:11:0c:65:
                    9c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:48:9C:2A:AF:DC:70:A2:F2:7B:33:D9:DF:62:B6:C8:6F:44:65:03
            X509v3 Authority Key Identifier:
                keyid:32:FE:1C:E8:CB:D1:10:3F:B4:A7:A3:C7:C4:C5:83:58:51:2A:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3caMr6Qf5sYrtQni7JhC913G1ZPcVwywnBTiXwC4VAkH/0/32FE1CE8CBD1103FB4A7A3C7C4C58358512AB304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32FE1CE8CBD1103FB4A7A3C7C4C58358512AB304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3caMr6Qf5sYrtQni7JhC913G1ZPcVwywnBTiXwC4VAkH/0/323830343a333633303a3a2f33322d3438203d3e20323636333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3630::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:a8:8a:67:74:42:85:b4:7f:e3:ac:91:62:36:87:45:ec:f2:
         d9:39:9e:73:cf:9a:47:5e:65:09:5d:23:fc:2f:5d:36:b2:38:
         fd:7b:20:bd:e0:c0:b9:4f:9f:41:c7:a5:cb:8e:ba:96:5d:ec:
         42:c2:f6:31:83:8d:31:83:84:44:b0:8a:b1:cd:57:83:ec:34:
         58:6a:3c:de:dc:a8:75:c1:97:6c:d1:00:47:46:ef:08:62:d0:
         92:b9:b9:47:49:99:44:9a:31:3d:08:05:bd:eb:2d:2b:4e:48:
         0f:1e:57:11:fc:e6:79:b3:a2:83:af:ab:9d:68:cc:38:fe:51:
         93:a3:3b:37:f2:17:3b:c6:66:7b:de:5d:2a:4c:36:d2:6f:71:
         6d:91:e2:96:82:99:a7:7b:c0:13:69:f3:ec:6a:7b:be:86:8b:
         4c:9d:23:21:62:57:9e:a7:3e:b4:10:21:e2:1b:33:4b:67:08:
         5c:6c:ec:69:d4:1a:aa:4c:ce:ff:a7:f6:e1:c4:3e:99:26:82:
         57:66:cb:04:90:00:c5:ca:3d:55:f0:09:34:7c:67:eb:df:32:
         99:8b:78:18:37:e4:83:7c:e8:0d:be:6d:b6:30:c4:b5:fa:59:
         17:86:d0:6e:1d:ac:27:aa:6f:a6:d0:1b:a9:b7:f1:67:92:fd:
         c7:03:5d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----