Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/323830343a386533633a383030303a3a2f33332d3333203d3e20323733343132.roa
File:                     323830343a386533633a383030303a3a2f33332d3333203d3e20323733343132.roa (raw, json)
Hash identifier:          9jwngue1kZnFWd8dpOD4EXuFYVefLYMlh2so6kngUww=
Subject key identifier:   4D:A4:28:70:E4:E7:2F:5C:2D:7A:B8:E3:AE:26:3A:8D:5B:FD:F1:EB
Certificate issuer:       /CN=CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E
Certificate serial:       38AFF6B75FBAD3D3993F04493E319D2A1A6CF2CD
Authority key identifier: CE:F7:84:55:DE:B7:C5:CB:67:AC:1A:1A:4F:3E:5E:FD:D7:60:9A:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/323830343a386533633a383030303a3a2f33332d3333203d3e20323733343132.roa
Signing time:             Mon 22 Jan 2024 14:55:30 +0000
ROA not before:           Mon 22 Jan 2024 14:50:30 +0000
ROA not after:            Mon 20 Jan 2025 14:55:30 +0000
asID:                     273412
IP address blocks:        2804:8e3c:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:af:f6:b7:5f:ba:d3:d3:99:3f:04:49:3e:31:9d:2a:1a:6c:f2:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E
        Validity
            Not Before: Jan 22 14:50:30 2024 GMT
            Not After : Jan 20 14:55:30 2025 GMT
        Subject: CN=4DA42870E4E72F5C2D7AB8E3AE263A8D5BFDF1EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ee:93:96:91:ea:8a:ee:7b:03:5a:b9:2e:89:
                    c5:d4:39:14:3b:ec:91:46:03:fe:21:78:dd:cc:f7:
                    52:21:09:39:ea:c1:65:eb:b1:c5:a3:27:d8:c9:43:
                    a0:a5:b9:54:16:cc:d2:e9:86:9f:72:ca:40:d1:16:
                    35:af:b2:7a:82:db:1d:11:66:65:4d:2d:b0:a6:87:
                    65:95:96:ca:ba:78:e4:d6:d3:aa:ba:ec:79:0b:07:
                    7c:50:c3:2e:8c:91:8e:d3:2a:3b:1f:3f:2f:f0:99:
                    fe:e3:0f:7f:a7:ae:22:fd:37:85:48:0f:dd:a1:d4:
                    17:e4:f0:59:77:ec:d9:dc:dd:f8:7c:58:1d:ec:20:
                    52:03:c3:2a:55:62:c7:f0:bb:c4:55:91:68:39:27:
                    b7:7e:0f:dc:45:a2:8e:98:c8:c6:2a:8f:35:2b:c9:
                    90:80:47:97:3c:e2:ab:d5:35:b0:c3:e4:59:63:67:
                    f5:42:87:f5:80:22:82:46:5f:5c:7a:57:2f:fc:b5:
                    34:6c:e7:4e:32:44:4e:e9:69:e7:55:5d:0d:3a:a8:
                    bc:da:6d:86:3c:85:46:f1:0e:cf:a6:4f:34:44:af:
                    59:4a:60:c4:74:ee:d8:82:cd:1c:75:dc:d1:6e:55:
                    00:dd:47:95:41:a8:10:58:47:9f:0a:10:8c:ab:c1:
                    68:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A4:28:70:E4:E7:2F:5C:2D:7A:B8:E3:AE:26:3A:8D:5B:FD:F1:EB
            X509v3 Authority Key Identifier:
                keyid:CE:F7:84:55:DE:B7:C5:CB:67:AC:1A:1A:4F:3E:5E:FD:D7:60:9A:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/323830343a386533633a383030303a3a2f33332d3333203d3e20323733343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e3c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         60:a5:da:a2:06:ea:df:09:33:2e:b8:ce:4d:1f:61:bb:84:1e:
         3e:57:e3:bc:0a:b8:f8:39:15:03:e8:8e:f9:6a:33:fd:51:5f:
         9a:f3:35:dd:1a:75:6b:78:d8:60:1b:83:90:6f:58:3c:2c:f5:
         8a:b8:c3:05:e6:87:37:8e:47:ee:1a:95:ab:44:fc:44:1f:0c:
         49:ec:05:bc:81:b5:59:94:6f:97:78:94:58:50:5d:b5:87:3e:
         8b:13:bf:d1:34:3d:ef:02:8f:21:32:8d:b1:88:7d:5f:19:2a:
         44:f4:58:8d:f6:f7:71:e4:2d:21:3c:5c:c4:79:2c:68:a5:69:
         38:fa:82:c8:fe:f8:d5:9a:66:a1:37:93:df:b9:c2:44:98:23:
         17:ca:96:33:b6:01:70:f9:12:d1:86:a4:51:f3:bc:a8:85:50:
         08:78:33:1e:4b:b2:f3:53:04:dd:4f:53:9a:cf:9f:3d:25:1b:
         8a:0d:25:af:db:6b:53:52:44:18:c2:50:68:f1:05:62:67:42:
         d7:34:5d:ce:1a:f2:39:da:1f:2b:57:c2:93:99:54:5e:c2:26:
         2d:d8:19:14:39:81:a2:b8:2a:7f:dd:5b:1d:29:b7:13:a9:a6:
         2b:21:41:22:42:8c:62:3a:58:f4:b9:f7:01:23:c0:38:b8:96:
         df:08:bb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----