Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/323830343a346263383a3a2f33322d3332203d3e20323637333239.roa
File:                     323830343a346263383a3a2f33322d3332203d3e20323637333239.roa (raw, json)
Hash identifier:          797n7yF6Z0aEDkqv78MErWFEH7vSYQoVMBK8UKoWOAk=
Subject key identifier:   58:17:02:DA:D5:23:D0:CC:16:3B:0E:76:90:CD:3C:07:57:76:DD:8F
Certificate issuer:       /CN=115C12DC4C631C1412ED74BF15353D05F8F2974F
Certificate serial:       55719AD73FA863766F8A59B98324086B4AB265B2
Authority key identifier: 11:5C:12:DC:4C:63:1C:14:12:ED:74:BF:15:35:3D:05:F8:F2:97:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/115C12DC4C631C1412ED74BF15353D05F8F2974F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/323830343a346263383a3a2f33322d3332203d3e20323637333239.roa
Signing time:             Thu 07 Mar 2024 17:45:04 +0000
ROA not before:           Thu 07 Mar 2024 17:40:04 +0000
ROA not after:            Thu 06 Mar 2025 17:45:04 +0000
asID:                     267329
IP address blocks:        2804:4bc8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:71:9a:d7:3f:a8:63:76:6f:8a:59:b9:83:24:08:6b:4a:b2:65:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=115C12DC4C631C1412ED74BF15353D05F8F2974F
        Validity
            Not Before: Mar  7 17:40:04 2024 GMT
            Not After : Mar  6 17:45:04 2025 GMT
        Subject: CN=581702DAD523D0CC163B0E7690CD3C075776DD8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:92:2d:5c:7a:ad:7f:5a:e3:6c:87:29:4a:b5:
                    bd:38:28:91:af:cf:2f:eb:07:bd:22:44:9f:cf:3b:
                    38:72:46:eb:df:3d:9e:4d:a9:f1:ae:00:6d:52:ff:
                    50:7c:db:b2:ee:90:3e:6d:f2:64:3e:c4:2a:2a:55:
                    8c:67:b4:d4:ec:48:aa:2f:be:d5:01:12:db:c9:16:
                    2a:44:ea:5b:61:24:fb:4d:01:3a:ba:88:6e:82:f4:
                    33:7f:4d:2e:f6:c8:ce:21:d8:56:d0:b5:45:5d:74:
                    f5:8c:f1:88:37:a2:6b:24:37:98:23:db:dd:87:96:
                    33:dc:43:59:a0:ff:ad:ad:b0:8c:49:54:34:25:c6:
                    aa:11:1e:ce:25:21:69:b0:c2:99:55:57:12:c4:8f:
                    02:cd:60:0f:f9:bf:ef:bd:8d:2a:b3:5d:09:c9:a4:
                    d0:18:00:c6:32:ff:7c:c4:6b:69:a5:72:40:45:cb:
                    ad:bf:d2:a6:01:a3:ad:19:24:64:28:1e:aa:d0:82:
                    c5:a0:8c:05:46:f5:30:62:66:c6:14:37:0a:25:30:
                    53:3f:53:6d:75:09:76:9b:37:aa:3e:36:cc:19:f0:
                    a9:0b:82:d1:da:c0:80:9a:3d:1a:af:b7:68:9b:00:
                    0c:9e:c5:86:da:2f:2a:69:66:f2:e2:52:14:0e:fa:
                    ba:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:17:02:DA:D5:23:D0:CC:16:3B:0E:76:90:CD:3C:07:57:76:DD:8F
            X509v3 Authority Key Identifier:
                keyid:11:5C:12:DC:4C:63:1C:14:12:ED:74:BF:15:35:3D:05:F8:F2:97:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/115C12DC4C631C1412ED74BF15353D05F8F2974F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/115C12DC4C631C1412ED74BF15353D05F8F2974F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/323830343a346263383a3a2f33322d3332203d3e20323637333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:90:4e:7c:df:8f:27:b0:4f:ac:66:5a:c1:0f:0f:9c:20:c0:
         54:3a:f9:8d:41:ce:0c:ff:13:8f:2b:72:9b:98:bf:4a:b5:10:
         e0:64:69:b4:38:37:46:ee:08:47:c9:48:d1:26:12:92:a1:23:
         4c:4b:1c:91:0c:49:9e:21:a7:ba:d1:3a:bb:ba:90:9d:c3:4f:
         9c:86:93:95:f4:68:2c:d4:e1:97:9d:70:70:99:4b:f6:e3:42:
         ce:54:9e:21:35:fd:52:26:e8:5b:07:73:7c:b2:d6:46:2a:2c:
         d8:0b:06:7b:73:a0:7e:d6:34:00:ec:89:ef:04:3f:dd:c0:f4:
         6d:e7:85:44:6d:98:02:e8:5e:65:b4:c1:f1:81:ff:c6:66:ba:
         86:ba:1b:dc:31:2b:8e:5a:1f:5f:58:7f:82:30:aa:ef:72:ee:
         9a:b4:2f:8f:b0:b4:a2:fd:35:84:fd:1b:42:d6:d0:d7:eb:0c:
         49:da:cf:aa:57:b3:db:80:c9:1c:8b:54:2c:6e:33:0e:0d:3b:
         f1:35:b0:db:7f:cd:d0:17:48:3e:b1:a9:e2:3f:0a:95:b0:28:
         27:7e:a6:9a:57:5c:5f:6e:81:be:67:d4:8c:be:63:33:7c:12:
         94:8a:c9:3a:3d:44:e9:09:29:3c:09:1f:77:38:4b:8a:3a:74:
         8b:42:b8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----