Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63MNzjiMyBtgq1ft2Aapq3YcjjwnWKskZBLH1jvBrSDv/1/323830343a323330383a3a2f33322d3634203d3e20323634313338.roa
File:                     323830343a323330383a3a2f33322d3634203d3e20323634313338.roa (raw, json)
Hash identifier:          pgKfjJpDRdojuee1a140jc7JYYzOVxqCLeax/57Gmb4=
Subject key identifier:   DE:90:81:F5:5F:EF:F4:23:24:E6:E6:FE:14:C8:70:B5:8C:96:62:40
Certificate issuer:       /CN=E888AE22F26E58E48489B85354DE954F749C9280
Certificate serial:       5F1DD208D63403B829587E88521991259F1142A1
Authority key identifier: E8:88:AE:22:F2:6E:58:E4:84:89:B8:53:54:DE:95:4F:74:9C:92:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E888AE22F26E58E48489B85354DE954F749C9280.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63MNzjiMyBtgq1ft2Aapq3YcjjwnWKskZBLH1jvBrSDv/1/323830343a323330383a3a2f33322d3634203d3e20323634313338.roa
Signing time:             Fri 12 Apr 2024 13:11:16 +0000
ROA not before:           Fri 12 Apr 2024 13:06:16 +0000
ROA not after:            Sat 12 Apr 2025 13:11:16 +0000
asID:                     264138
IP address blocks:        2804:2308::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:1d:d2:08:d6:34:03:b8:29:58:7e:88:52:19:91:25:9f:11:42:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E888AE22F26E58E48489B85354DE954F749C9280
        Validity
            Not Before: Apr 12 13:06:16 2024 GMT
            Not After : Apr 12 13:11:16 2025 GMT
        Subject: CN=3082010A0282010100CA7271B88096C2364BCDE988DCBE1302F64964B10567E891EB68828F067B78B9D52E7CF63166E5C15C881A7F143180EB1368F384FB0F839C731B0E4F48987358F5086D71110513DA6E4474A22FA8FFF56E3072A60C847F62C8FFDA037059B8D38AD19696C16D1CF43BE75D2A80190DEB265CF6E9134F66E5EBC88496AF61BC9F760C61B5E96B444673B2578C0CEC43667D5E82473A5054B528F4681317C6BB42281477AA9528D55B398B3F50D4EF74026CF51A25782C0B5EE0532A40BE560C31676DEA790FF1880AFF1FEE100887655CA68BC534F20D0B3AF59AD02913ECB0F931592DCB2345301C839D55C3D5ECCACEAE80A2826AE7DC06D50CD89BD01AB1BF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:72:71:b8:80:96:c2:36:4b:cd:e9:88:dc:be:
                    13:02:f6:49:64:b1:05:67:e8:91:eb:68:82:8f:06:
                    7b:78:b9:d5:2e:7c:f6:31:66:e5:c1:5c:88:1a:7f:
                    14:31:80:eb:13:68:f3:84:fb:0f:83:9c:73:1b:0e:
                    4f:48:98:73:58:f5:08:6d:71:11:05:13:da:6e:44:
                    74:a2:2f:a8:ff:f5:6e:30:72:a6:0c:84:7f:62:c8:
                    ff:da:03:70:59:b8:d3:8a:d1:96:96:c1:6d:1c:f4:
                    3b:e7:5d:2a:80:19:0d:eb:26:5c:f6:e9:13:4f:66:
                    e5:eb:c8:84:96:af:61:bc:9f:76:0c:61:b5:e9:6b:
                    44:46:73:b2:57:8c:0c:ec:43:66:7d:5e:82:47:3a:
                    50:54:b5:28:f4:68:13:17:c6:bb:42:28:14:77:aa:
                    95:28:d5:5b:39:8b:3f:50:d4:ef:74:02:6c:f5:1a:
                    25:78:2c:0b:5e:e0:53:2a:40:be:56:0c:31:67:6d:
                    ea:79:0f:f1:88:0a:ff:1f:ee:10:08:87:65:5c:a6:
                    8b:c5:34:f2:0d:0b:3a:f5:9a:d0:29:13:ec:b0:f9:
                    31:59:2d:cb:23:45:30:1c:83:9d:55:c3:d5:ec:ca:
                    ce:ae:80:a2:82:6a:e7:dc:06:d5:0c:d8:9b:d0:1a:
                    b1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:90:81:F5:5F:EF:F4:23:24:E6:E6:FE:14:C8:70:B5:8C:96:62:40
            X509v3 Authority Key Identifier:
                keyid:E8:88:AE:22:F2:6E:58:E4:84:89:B8:53:54:DE:95:4F:74:9C:92:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63MNzjiMyBtgq1ft2Aapq3YcjjwnWKskZBLH1jvBrSDv/1/E888AE22F26E58E48489B85354DE954F749C9280.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E888AE22F26E58E48489B85354DE954F749C9280.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63MNzjiMyBtgq1ft2Aapq3YcjjwnWKskZBLH1jvBrSDv/1/323830343a323330383a3a2f33322d3634203d3e20323634313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2308::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:39:98:25:a7:fe:b9:19:15:f2:76:e8:8c:13:cf:6d:6a:10:
         ff:46:ff:39:4f:f0:b0:91:1f:37:10:f5:90:d9:45:30:33:45:
         ef:37:53:5b:dd:7f:35:11:57:8a:6e:9b:b0:c4:e9:e3:9c:07:
         21:e3:b1:a6:46:e8:4d:fc:ff:9d:e7:d7:fd:26:c3:ef:5b:57:
         4c:6d:5f:60:83:9e:9b:92:1b:49:cc:2c:bc:02:60:44:ff:d5:
         09:f6:fa:29:99:34:f4:45:76:ea:54:28:f8:40:e1:6a:55:39:
         90:3c:0e:80:74:29:f2:c9:a5:71:0a:c2:34:ba:54:c1:35:48:
         b2:96:6e:0e:ad:ed:6f:70:49:2d:5e:3d:17:23:de:b5:5e:66:
         4d:bf:4a:4d:96:8e:db:e3:6d:99:42:ae:f8:6f:5f:13:c0:cb:
         63:19:67:79:23:78:c7:c4:dc:42:14:53:3f:9b:f9:5a:33:ae:
         2c:2c:b1:50:be:48:07:2f:a9:40:84:9a:4a:76:2d:0f:9b:49:
         76:91:7f:dc:4c:7b:b5:0a:7b:42:f4:3c:9b:ba:05:d7:a4:1b:
         7b:c9:5e:70:a2:39:29:e7:99:2a:bd:4d:46:99:4c:d3:79:0f:
         d1:a3:2a:e7:ea:62:55:56:2f:90:99:19:64:2c:8b:ab:bf:f2:
         f6:87:1d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----