Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/323830343a3832383a3a2f33322d3332203d3e20323632333534.roa
File:                     323830343a3832383a3a2f33322d3332203d3e20323632333534.roa (raw, json)
Hash identifier:          HrAPYEfPU0dye40NvpUPs/zhrM4rr4PpUBOtKpNmtis=
Subject key identifier:   E2:AF:1D:5F:CE:D6:80:74:CB:2D:7C:4D:AD:AD:04:E3:53:1D:96:39
Certificate issuer:       /CN=9445327451CE84E39FB7363BC02549BB0F004F4B
Certificate serial:       08919647CE381FF5776FFD976A66101025A8F29F
Authority key identifier: 94:45:32:74:51:CE:84:E3:9F:B7:36:3B:C0:25:49:BB:0F:00:4F:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9445327451CE84E39FB7363BC02549BB0F004F4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/323830343a3832383a3a2f33322d3332203d3e20323632333534.roa
Signing time:             Wed 06 Mar 2024 14:14:31 +0000
ROA not before:           Wed 06 Mar 2024 14:09:31 +0000
ROA not after:            Wed 05 Mar 2025 14:14:31 +0000
asID:                     262354
IP address blocks:        2804:828::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:91:96:47:ce:38:1f:f5:77:6f:fd:97:6a:66:10:10:25:a8:f2:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9445327451CE84E39FB7363BC02549BB0F004F4B
        Validity
            Not Before: Mar  6 14:09:31 2024 GMT
            Not After : Mar  5 14:14:31 2025 GMT
        Subject: CN=E2AF1D5FCED68074CB2D7C4DADAD04E3531D9639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:59:0c:c2:b5:cb:ea:d8:77:a8:5a:d7:83:2c:
                    4d:45:35:32:8d:00:94:a3:ee:20:a1:86:83:0c:04:
                    cc:70:69:e7:18:3b:c6:7b:7f:22:19:dd:8a:06:55:
                    62:cb:83:46:d8:16:a9:6f:41:06:b6:ca:20:69:f5:
                    65:f6:ac:1d:42:0e:22:de:66:a1:e8:43:af:6b:d4:
                    fd:ef:fc:4d:72:99:04:2f:b5:5d:93:3f:8f:31:61:
                    6e:98:e0:03:ab:7d:ab:4f:fd:22:d9:19:b2:29:a3:
                    32:c5:fe:5a:53:88:a7:58:0b:3c:72:f1:f9:db:58:
                    25:6e:a2:4e:df:e1:0b:4f:f5:d9:6d:54:02:9b:e9:
                    e1:8e:d8:ce:04:6c:3e:70:f0:3d:98:23:c1:0f:c5:
                    a2:39:1d:f8:c3:db:02:aa:18:27:ee:25:b0:4e:af:
                    81:6e:e1:5e:c4:2e:37:79:66:0c:94:b9:17:7b:82:
                    73:c3:f2:67:80:a7:aa:b0:00:db:9b:01:98:a3:9d:
                    f3:3f:ac:d1:2b:4c:93:78:62:96:3b:82:ed:8c:f7:
                    cf:9f:a1:57:9a:46:58:82:d3:cf:e7:25:b3:b9:70:
                    f3:7f:2e:76:1a:e1:ca:ce:1d:6c:82:d5:eb:a8:ed:
                    2b:be:6f:2d:3b:6b:7b:dd:95:29:ee:50:66:a8:53:
                    ec:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:AF:1D:5F:CE:D6:80:74:CB:2D:7C:4D:AD:AD:04:E3:53:1D:96:39
            X509v3 Authority Key Identifier:
                keyid:94:45:32:74:51:CE:84:E3:9F:B7:36:3B:C0:25:49:BB:0F:00:4F:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/9445327451CE84E39FB7363BC02549BB0F004F4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9445327451CE84E39FB7363BC02549BB0F004F4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/323830343a3832383a3a2f33322d3332203d3e20323632333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:828::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:8d:72:b2:b5:1a:a4:57:df:0e:bf:7a:0e:66:e9:c8:be:4e:
         fc:7d:17:26:3e:54:f4:d2:37:d7:0f:26:cf:24:9e:8d:d3:ef:
         41:1e:78:47:82:75:9d:a0:64:35:af:29:08:94:65:fc:05:c1:
         7b:1d:58:79:fd:03:71:f8:e7:e6:3f:a4:c2:69:ea:a8:b9:1f:
         f8:a9:db:af:66:d9:e0:61:3c:cd:d2:0b:95:67:7f:1b:f4:6e:
         5f:e5:dd:ae:96:97:1b:64:43:32:14:00:7e:24:eb:cd:74:9e:
         38:36:37:29:4c:65:71:6f:b9:0d:16:f5:c5:44:d2:28:ac:74:
         8a:ce:f3:86:cb:22:8c:71:ef:69:cd:51:db:52:65:84:5a:5a:
         b7:3a:b5:8e:56:95:79:a7:7a:e5:73:d1:29:fc:d9:73:14:2b:
         5c:13:fd:08:96:bc:c8:31:b2:5b:9b:cf:8b:8c:da:cb:ec:04:
         95:64:c0:2d:0a:f1:e0:fc:a6:e7:70:f8:01:c4:09:b8:85:3e:
         6c:7a:1b:da:3a:37:c1:89:0e:8e:ae:94:28:bf:dd:48:bc:17:
         e5:7b:5e:20:b3:91:fd:bb:18:22:bf:8f:45:c4:1a:b2:f3:ff:
         a0:e5:99:24:59:3b:41:03:c7:fd:4d:b1:48:73:bc:8f:59:70:
         f6:ce:5b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----