Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/0/323830343a343631383a333330303a3a2f34302d3430203d3e20323636393638.roa
File:                     323830343a343631383a333330303a3a2f34302d3430203d3e20323636393638.roa (raw, json)
Hash identifier:          ZLD00+1FuGUBBVY2es9Oox/s9da1HaCw/qHK4WsvvaY=
Subject key identifier:   25:74:E2:2A:CE:1D:36:84:89:F2:19:03:84:00:C4:41:EC:58:C4:87
Certificate issuer:       /CN=74FA7BEC0A12DC39CA289CE410D30FE47A56EAD1
Certificate serial:       08C37C4F319A9AD594383788E0D96DB6192DA379
Authority key identifier: 74:FA:7B:EC:0A:12:DC:39:CA:28:9C:E4:10:D3:0F:E4:7A:56:EA:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74FA7BEC0A12DC39CA289CE410D30FE47A56EAD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/0/323830343a343631383a333330303a3a2f34302d3430203d3e20323636393638.roa
Signing time:             Mon 11 Mar 2024 19:02:30 +0000
ROA not before:           Mon 11 Mar 2024 18:57:30 +0000
ROA not after:            Mon 10 Mar 2025 19:02:30 +0000
asID:                     266968
IP address blocks:        2804:4618:3300::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:c3:7c:4f:31:9a:9a:d5:94:38:37:88:e0:d9:6d:b6:19:2d:a3:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74FA7BEC0A12DC39CA289CE410D30FE47A56EAD1
        Validity
            Not Before: Mar 11 18:57:30 2024 GMT
            Not After : Mar 10 19:02:30 2025 GMT
        Subject: CN=2574E22ACE1D368489F219038400C441EC58C487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f9:8c:12:5d:6a:ca:87:fe:4a:dd:aa:f0:00:
                    e9:06:24:c5:da:db:5b:d9:9d:60:56:98:19:ca:54:
                    80:4e:a4:4f:62:8d:5c:50:1f:d9:b3:89:f2:83:b8:
                    5a:eb:6c:e2:ad:f2:5e:58:1a:13:3a:ed:d3:0b:90:
                    a7:f1:8a:fc:46:8a:89:1c:65:7c:f8:3b:ee:a9:97:
                    da:81:ed:c7:a7:63:e6:83:6b:74:fb:b4:5c:98:94:
                    30:94:50:73:e5:a4:fb:37:0d:8e:4e:f9:71:3b:ad:
                    2a:60:9a:c2:55:76:2c:29:ca:04:b8:b6:5d:40:58:
                    d8:9f:c8:c5:21:54:86:3f:f8:85:55:9b:7a:36:68:
                    5c:0a:2f:89:27:60:b1:16:90:d8:70:35:2f:76:3f:
                    bb:03:0e:c3:4f:cb:e1:dc:db:b1:5f:d5:a5:fa:4f:
                    2f:a9:8a:d0:0e:94:4b:8f:71:5d:71:0d:a5:5a:4e:
                    33:70:bb:8e:df:96:7d:64:6d:d2:ff:c0:67:20:28:
                    fe:4b:a0:36:81:ee:0d:a9:3e:b2:10:82:39:f1:8b:
                    77:c5:f1:52:a0:5c:70:69:78:93:23:06:74:bb:c2:
                    3f:7d:ec:6a:3c:c8:4f:57:be:d6:7e:b9:46:34:a9:
                    af:34:52:7e:3f:ee:2b:54:46:80:b4:d7:a6:65:ed:
                    d3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:74:E2:2A:CE:1D:36:84:89:F2:19:03:84:00:C4:41:EC:58:C4:87
            X509v3 Authority Key Identifier:
                keyid:74:FA:7B:EC:0A:12:DC:39:CA:28:9C:E4:10:D3:0F:E4:7A:56:EA:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/0/74FA7BEC0A12DC39CA289CE410D30FE47A56EAD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74FA7BEC0A12DC39CA289CE410D30FE47A56EAD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/0/323830343a343631383a333330303a3a2f34302d3430203d3e20323636393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4618:3300::/40

    Signature Algorithm: sha256WithRSAEncryption
         46:87:25:08:93:ed:46:25:ab:34:21:11:eb:ea:b8:00:fe:c1:
         ca:08:6b:d7:c7:ac:7a:29:a2:7c:bc:2c:1b:78:11:33:62:7d:
         3b:36:67:4e:6d:35:6e:44:9f:25:4e:3c:15:41:f3:c6:df:e8:
         ea:bd:e8:5a:66:99:97:59:58:da:b1:be:c3:4e:44:a5:17:b2:
         c2:f8:aa:56:7f:54:ae:ee:43:be:6b:ef:ca:30:bf:db:74:86:
         f8:08:04:dc:89:1b:97:6b:64:e5:35:af:ab:f1:50:f3:88:66:
         74:92:66:9b:ca:ac:9e:c7:c5:93:cb:09:b4:bb:3a:05:22:7c:
         76:f7:eb:a2:67:b1:75:42:22:cf:ba:81:09:04:43:4e:13:56:
         0e:4c:6c:1f:45:af:9a:bf:c0:d4:19:17:97:1f:4a:4b:c3:fa:
         59:60:a6:4d:ef:ac:38:a5:51:b7:cd:a2:8c:58:5d:4b:4e:bd:
         35:70:e0:d2:2f:26:8d:05:c8:cb:91:e8:7e:bf:37:eb:dd:76:
         02:67:58:5c:30:a4:f7:41:c2:bd:bf:71:89:1f:cb:12:35:0a:
         18:23:ec:f2:73:9c:80:23:42:7b:60:d6:4d:31:cd:ca:26:f2:
         86:de:e4:0e:f8:1c:36:f7:87:ea:00:4a:e4:84:0b:87:97:64:
         1a:91:a4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----