Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/323830343a3332383a383030303a3a2f33332d3333203d3e20323632383638.roa
File:                     323830343a3332383a383030303a3a2f33332d3333203d3e20323632383638.roa (raw, json)
Hash identifier:          T1ffOB5DO530+c+hdEsNEuIYPiwTj0gkT7crsqZt1Ns=
Subject key identifier:   29:C8:85:C7:E9:7D:FF:DE:21:67:70:D4:80:DB:13:07:FF:66:54:FC
Certificate issuer:       /CN=0743743A0AB828DD321DB1C96B6AB55916A8859A
Certificate serial:       0783D52FD3EB691A209F3EED840091952397A53B
Authority key identifier: 07:43:74:3A:0A:B8:28:DD:32:1D:B1:C9:6B:6A:B5:59:16:A8:85:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0743743A0AB828DD321DB1C96B6AB55916A8859A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/323830343a3332383a383030303a3a2f33332d3333203d3e20323632383638.roa
Signing time:             Sat 22 Jul 2023 21:39:18 +0000
ROA not before:           Sat 22 Jul 2023 21:34:18 +0000
ROA not after:            Sat 20 Jul 2024 21:39:18 +0000
asID:                     262868
IP address blocks:        2804:328:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:83:d5:2f:d3:eb:69:1a:20:9f:3e:ed:84:00:91:95:23:97:a5:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0743743A0AB828DD321DB1C96B6AB55916A8859A
        Validity
            Not Before: Jul 22 21:34:18 2023 GMT
            Not After : Jul 20 21:39:18 2024 GMT
        Subject: CN=29C885C7E97DFFDE216770D480DB1307FF6654FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f6:ce:3b:18:ad:b2:e0:ef:78:99:16:b7:c3:
                    4f:82:9f:b7:d8:5a:99:3f:9f:58:f8:e8:c1:92:25:
                    2a:1d:88:3d:a4:61:5b:8f:3e:ff:b6:9b:62:e0:b8:
                    5c:c4:1e:c9:b1:90:f0:be:be:4f:f7:e3:b1:d2:db:
                    33:59:8e:9b:84:a4:15:eb:63:31:7f:96:28:7e:22:
                    b1:2c:f1:11:22:2d:f4:d5:5f:19:d0:64:5b:db:89:
                    e5:f5:c8:39:4b:36:c5:e4:7e:cf:0b:8b:b6:74:6d:
                    43:6d:d5:0a:62:a8:82:83:bf:89:9a:b3:4c:22:a6:
                    6d:11:44:97:ae:b3:14:49:cc:6c:83:46:e9:4a:8b:
                    4c:05:8c:68:57:af:a9:5c:aa:09:63:56:d0:84:cb:
                    f5:b8:9d:73:05:96:85:68:f8:21:8a:48:fb:74:0d:
                    0b:47:fb:d2:bc:85:47:92:91:d7:8c:9b:7d:e6:ae:
                    a6:eb:3e:62:c4:ae:40:83:7f:b9:e4:dc:ba:4e:ce:
                    15:b0:b9:91:53:33:b4:45:36:c7:50:c5:ed:32:b0:
                    9b:f9:18:39:95:d0:be:88:f5:63:cb:9a:d4:4a:57:
                    8c:2e:ff:88:e5:d9:bc:50:11:15:e6:d2:fd:3e:b7:
                    fd:db:18:21:29:2e:8b:05:d3:8f:1c:fa:e5:7c:01:
                    b3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C8:85:C7:E9:7D:FF:DE:21:67:70:D4:80:DB:13:07:FF:66:54:FC
            X509v3 Authority Key Identifier:
                keyid:07:43:74:3A:0A:B8:28:DD:32:1D:B1:C9:6B:6A:B5:59:16:A8:85:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/0743743A0AB828DD321DB1C96B6AB55916A8859A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0743743A0AB828DD321DB1C96B6AB55916A8859A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/323830343a3332383a383030303a3a2f33332d3333203d3e20323632383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:328:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         67:14:d5:4f:5d:60:38:06:67:8d:d8:b8:be:77:43:50:33:67:
         e5:e6:af:a9:b3:65:10:4f:0b:18:b6:b0:bf:0c:c0:0a:58:a1:
         71:5d:de:c6:f2:be:e6:a3:d2:a3:cd:2f:aa:60:1b:df:8a:7a:
         71:7e:c2:da:8a:00:c1:79:38:1d:4a:d2:83:c9:cf:e9:a7:1b:
         09:7b:51:c8:ab:3f:0e:a9:19:1b:41:01:ec:9f:52:b2:e3:9e:
         e8:05:f8:17:f7:a8:80:0b:a3:b7:5a:c4:86:f7:5f:0a:6e:19:
         4f:e9:3b:d4:a5:fc:33:7a:d7:6f:f3:c6:34:d7:0c:62:99:db:
         79:5a:a0:6d:c2:5b:ec:c1:40:37:8c:e8:ba:ba:33:16:0f:3b:
         3d:0e:ad:40:63:35:4c:29:ae:8a:06:e5:44:95:d5:1c:dd:c9:
         7e:91:63:be:cf:cb:03:06:67:91:bd:3f:79:dc:25:3e:b8:be:
         9a:a5:c3:a5:78:e0:63:4d:18:f7:de:7a:63:3b:e9:2a:12:25:
         7f:a9:94:06:dc:d8:53:ad:48:19:e0:1b:0f:45:a4:69:d0:59:
         d9:cd:96:c6:75:01:9e:7c:d3:55:60:a2:32:5e:2d:5b:1b:a1:
         a3:78:e9:cd:5f:c9:b9:79:e8:12:53:32:1b:cc:14:56:6a:7d:
         20:da:88:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----