Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a323030303a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a323030303a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          +QJTPOQfTz4H0FrMybmXuLlhrZbRX3MG14bk6SfdXvI=
Subject key identifier:   77:E4:80:B7:FF:ED:89:06:BD:68:9C:23:A4:26:4F:D5:F3:27:78:49
Certificate issuer:       /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial:       2F76D2D7D689BB7E29F23E5745E7A9DFF23D19E6
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a323030303a3a2f34382d3438203d3e203532373036.roa
Signing time:             Thu 20 Jul 2023 14:32:17 +0000
ROA not before:           Thu 20 Jul 2023 14:27:17 +0000
ROA not after:            Thu 18 Jul 2024 14:32:17 +0000
asID:                     52706
IP address blocks:        2804:c70:2000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:76:d2:d7:d6:89:bb:7e:29:f2:3e:57:45:e7:a9:df:f2:3d:19:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
        Validity
            Not Before: Jul 20 14:27:17 2023 GMT
            Not After : Jul 18 14:32:17 2024 GMT
        Subject: CN=77E480B7FFED8906BD689C23A4264FD5F3277849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:70:92:44:82:5e:e5:b0:d7:8a:41:c4:e7:d3:
                    46:bf:9c:d8:bf:10:f6:26:a5:b1:d4:39:e7:ad:09:
                    42:f5:1f:46:bb:85:2a:85:94:82:a4:86:cf:26:33:
                    80:94:6d:86:56:22:96:50:7a:5f:ae:bc:30:d4:c4:
                    d0:f9:3a:2a:7c:7d:f6:68:f1:3f:01:a8:a1:55:1d:
                    6f:6b:3e:38:08:93:d7:48:2f:1a:4d:23:fa:16:7e:
                    02:f0:e9:fa:26:e5:dd:f9:99:a6:4e:39:04:04:d7:
                    8a:d5:bd:e6:aa:3a:fe:a6:0f:3c:e3:49:5e:c0:bf:
                    00:25:42:ca:96:39:e2:64:1c:18:4f:d9:55:57:ef:
                    a6:a1:d4:fe:8c:7b:7f:c3:74:d7:c0:d7:c2:d1:e8:
                    9f:3b:c7:38:99:7b:b4:c8:54:c2:7e:2d:a7:41:9d:
                    8d:80:40:05:6b:d2:24:ea:64:5a:97:a6:78:15:48:
                    19:c6:02:de:04:a8:4b:ae:a4:11:5a:e6:61:87:dd:
                    19:71:96:ca:7c:1c:85:70:b7:70:27:e8:79:6d:3e:
                    bb:2c:cb:d4:ac:6e:35:8f:12:a7:50:e0:d8:28:5a:
                    a1:32:a2:79:73:dc:4d:78:dc:2c:6f:0b:8f:2f:45:
                    5a:3b:ac:6d:9d:4c:17:78:ad:9b:f5:2d:49:18:bb:
                    92:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E4:80:B7:FF:ED:89:06:BD:68:9C:23:A4:26:4F:D5:F3:27:78:49
            X509v3 Authority Key Identifier:
                keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a323030303a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:b1:6e:5d:26:b6:63:be:4c:71:5d:ba:f2:73:8d:5f:0a:bd:
         1e:44:0d:ce:ea:6a:86:9c:c2:32:c9:38:9b:91:2c:bc:3e:47:
         3b:db:4b:7f:a0:fc:c8:5f:a8:6c:5f:2a:77:41:48:46:7e:ab:
         17:e2:9d:d9:b7:86:20:38:cf:76:75:aa:f3:d5:a4:4d:9d:08:
         51:b4:28:f7:72:ac:e8:3b:17:23:50:47:f3:1c:32:37:7f:46:
         6e:68:62:65:92:ec:b5:e7:f1:2e:4b:9d:a6:08:a1:c4:b9:92:
         52:9a:2a:30:ce:ec:49:47:a7:f8:47:4a:77:d4:44:93:25:60:
         bd:54:f2:53:96:dd:2b:64:14:be:47:8d:4a:1b:f6:1b:4a:ab:
         a3:7b:0d:f4:fe:0f:67:51:35:0c:79:1d:a1:9f:a5:74:6c:b9:
         71:f8:fd:07:89:93:e2:e5:58:11:a4:8f:87:46:48:f6:6c:5b:
         bf:cc:94:13:e4:c0:e4:b4:18:92:1e:de:7e:82:30:72:8a:0d:
         e7:d2:4e:e2:3f:15:a3:da:14:2c:b5:85:2e:95:fe:74:b0:28:
         c3:15:f9:22:a8:f3:a0:24:3a:93:94:4e:0b:c9:5b:f3:ae:e8:
         1c:3e:40:97:1d:6c:f5:6c:fb:03:ae:2b:46:a1:3b:80:51:60:
         e4:ee:a1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----