Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/0/323830343a353130303a323030303a3a2f34302d3430203d3e20323638343234.roa
File:                     323830343a353130303a323030303a3a2f34302d3430203d3e20323638343234.roa (raw, json)
Hash identifier:          RtsBnO9bd/i875ejrwIXErKRmBLr/v3tSayldI0N4uA=
Subject key identifier:   2E:64:A0:AA:95:63:A7:32:AD:5B:B4:9D:B1:51:32:56:34:EC:99:1A
Certificate issuer:       /CN=E429F35E74597C6DE39F18CE6F1303823FC75955
Certificate serial:       6577AD2386AF44A1838559EDEA919122979C5896
Authority key identifier: E4:29:F3:5E:74:59:7C:6D:E3:9F:18:CE:6F:13:03:82:3F:C7:59:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E429F35E74597C6DE39F18CE6F1303823FC75955.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/0/323830343a353130303a323030303a3a2f34302d3430203d3e20323638343234.roa
Signing time:             Mon 04 Mar 2024 19:34:22 +0000
ROA not before:           Mon 04 Mar 2024 19:29:22 +0000
ROA not after:            Mon 03 Mar 2025 19:34:22 +0000
asID:                     268424
IP address blocks:        2804:5100:2000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:77:ad:23:86:af:44:a1:83:85:59:ed:ea:91:91:22:97:9c:58:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E429F35E74597C6DE39F18CE6F1303823FC75955
        Validity
            Not Before: Mar  4 19:29:22 2024 GMT
            Not After : Mar  3 19:34:22 2025 GMT
        Subject: CN=2E64A0AA9563A732AD5BB49DB151325634EC991A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:b0:3d:18:93:3a:fc:db:f8:99:86:60:cd:2f:
                    a0:1f:30:11:4f:52:58:d8:be:ea:90:e7:e8:73:36:
                    16:7f:59:e5:d5:7e:ef:0a:a4:2e:03:9d:46:52:77:
                    8c:1b:df:c2:87:8b:52:fa:e7:81:94:40:af:2d:15:
                    aa:62:14:6e:9c:23:ab:48:9b:1b:58:fa:0c:8b:e0:
                    79:3d:7c:87:f5:23:d4:95:da:6a:95:f9:c9:4a:7b:
                    bb:3e:ee:99:94:21:19:00:a2:2d:ab:fd:3d:41:7e:
                    54:a3:e4:45:98:96:81:97:42:59:a5:b4:64:4d:1f:
                    cd:b7:96:29:c8:de:a3:38:e4:62:d0:5b:d6:9d:6b:
                    a4:e4:6b:b9:98:1e:70:43:41:1c:65:9f:91:c1:56:
                    60:59:a6:a9:e8:10:82:f0:b5:18:c4:81:24:e5:a9:
                    2f:d7:c7:49:5a:ff:fe:6b:cb:5b:21:a7:53:12:c4:
                    4f:25:c1:09:5f:04:98:de:5f:de:1b:36:d0:c9:32:
                    db:16:38:fc:2f:49:89:f9:90:82:20:3f:bd:cd:3c:
                    93:43:c8:f0:5b:5a:ab:e0:f6:cd:3a:08:02:36:0a:
                    34:33:ed:86:f9:c3:f5:0b:89:a6:e0:b5:e9:6b:94:
                    f5:dd:ea:d7:e3:56:0f:aa:c7:22:f1:a9:25:3d:5c:
                    6b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:64:A0:AA:95:63:A7:32:AD:5B:B4:9D:B1:51:32:56:34:EC:99:1A
            X509v3 Authority Key Identifier:
                keyid:E4:29:F3:5E:74:59:7C:6D:E3:9F:18:CE:6F:13:03:82:3F:C7:59:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/0/E429F35E74597C6DE39F18CE6F1303823FC75955.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E429F35E74597C6DE39F18CE6F1303823FC75955.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/0/323830343a353130303a323030303a3a2f34302d3430203d3e20323638343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5100:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         b0:b6:d2:47:c1:e6:7b:6e:18:97:24:5b:74:ed:1d:c7:5a:50:
         52:4e:c0:ba:6a:86:d6:fb:b4:b7:c7:4b:39:31:c0:06:69:48:
         c8:7f:f9:b1:89:30:52:d3:1b:40:63:41:8c:4e:55:cb:f7:06:
         e9:c7:08:92:a9:b2:46:a8:33:67:a0:99:38:69:64:06:e8:8c:
         f5:57:46:3b:26:f4:0f:d2:f4:aa:d0:e1:e3:60:9d:f6:e4:41:
         ea:bc:a5:aa:81:31:43:87:54:81:7a:09:e3:8a:ee:fe:54:06:
         78:1d:12:1f:df:8d:6c:9b:ca:4b:9f:2e:f3:3f:d2:27:0c:8a:
         1b:4d:99:c6:f8:c3:36:b0:fb:74:76:1c:aa:7e:1a:e3:48:cb:
         fe:8c:db:ba:cb:ef:ce:bb:74:38:41:7f:58:a1:41:0e:f5:d5:
         6f:dc:01:c8:35:26:61:5b:58:bc:1a:ce:4d:d4:b4:3a:7b:4f:
         d9:1b:48:fa:67:c0:6e:e8:da:89:be:7a:21:7a:4c:de:59:7b:
         11:6c:12:93:f1:f6:99:04:0b:90:44:e8:59:23:22:5a:8a:c9:
         98:e0:dd:57:7d:25:11:56:ff:d3:20:b1:45:15:ef:10:54:32:
         c3:24:47:cd:52:29:39:51:7e:d1:d8:58:20:51:4d:4e:d1:87:
         d5:e8:45:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----