Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/323830343a313032633a3a2f33322d3334203d3e20323633363233.roa
File:                     323830343a313032633a3a2f33322d3334203d3e20323633363233.roa (raw, json)
Hash identifier:          1RM3ZwEuYuuNpmYhDFWK1mWEWtfdna/uqyFNwL/X/F8=
Subject key identifier:   E2:1F:B7:DB:8A:22:F5:82:EC:FC:19:47:0B:30:3F:08:57:E6:6B:C2
Certificate issuer:       /CN=5C908AE2A50DFF743C0A2B041FD20DD3BC047668
Certificate serial:       535E0C6E55F606FBD32157670CAFF095643F7943
Authority key identifier: 5C:90:8A:E2:A5:0D:FF:74:3C:0A:2B:04:1F:D2:0D:D3:BC:04:76:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C908AE2A50DFF743C0A2B041FD20DD3BC047668.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/323830343a313032633a3a2f33322d3334203d3e20323633363233.roa
Signing time:             Thu 24 Aug 2023 18:16:14 +0000
ROA not before:           Thu 24 Aug 2023 18:11:14 +0000
ROA not after:            Thu 22 Aug 2024 18:16:14 +0000
asID:                     263623
IP address blocks:        2804:102c::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:5e:0c:6e:55:f6:06:fb:d3:21:57:67:0c:af:f0:95:64:3f:79:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C908AE2A50DFF743C0A2B041FD20DD3BC047668
        Validity
            Not Before: Aug 24 18:11:14 2023 GMT
            Not After : Aug 22 18:16:14 2024 GMT
        Subject: CN=E21FB7DB8A22F582ECFC19470B303F0857E66BC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:48:a5:e4:e0:03:b7:30:6f:c8:ea:e5:83:aa:
                    b0:ae:0d:41:81:09:4f:27:36:87:a9:de:3a:1b:69:
                    43:66:6e:a4:12:97:24:ac:78:0e:da:6e:e2:ac:96:
                    4e:33:30:fd:ac:3d:f8:6e:a9:5d:6a:ce:e1:36:a0:
                    2a:09:c9:ac:e0:d8:fe:22:73:32:2b:91:75:56:a6:
                    75:c6:4e:c5:a4:e5:a6:7a:1c:ef:f0:60:3e:04:28:
                    49:74:ec:0f:06:78:67:83:23:f2:6d:1e:80:00:75:
                    36:d8:30:01:41:26:16:81:65:62:24:a1:f6:15:6b:
                    eb:77:ad:af:6c:f8:36:a8:a2:22:0f:55:61:54:e7:
                    79:80:c0:56:37:c5:09:7a:40:78:26:40:e7:0f:6d:
                    ee:fd:f7:c0:51:60:e3:c2:61:81:05:66:71:70:27:
                    02:d7:68:8e:67:ab:61:b6:98:31:e1:08:c6:6f:e9:
                    45:5d:b2:57:91:97:9f:57:29:6d:ea:15:ea:2d:f0:
                    c0:97:b8:32:77:59:17:57:29:f2:95:d6:52:ee:50:
                    0e:89:e5:51:6c:23:16:28:a5:17:a2:74:ea:0c:d0:
                    8c:65:bb:36:f6:e8:26:cf:37:94:48:04:1a:06:86:
                    e4:04:43:c5:00:9e:3d:30:c3:48:42:19:81:77:75:
                    f7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:1F:B7:DB:8A:22:F5:82:EC:FC:19:47:0B:30:3F:08:57:E6:6B:C2
            X509v3 Authority Key Identifier:
                keyid:5C:90:8A:E2:A5:0D:FF:74:3C:0A:2B:04:1F:D2:0D:D3:BC:04:76:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/5C908AE2A50DFF743C0A2B041FD20DD3BC047668.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C908AE2A50DFF743C0A2B041FD20DD3BC047668.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/323830343a313032633a3a2f33322d3334203d3e20323633363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:102c::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:3d:81:61:52:41:65:0f:e9:b9:3f:bd:29:76:99:57:10:15:
         81:fc:9d:42:17:ab:c5:e5:c4:1c:47:f8:22:14:e1:d1:c9:5a:
         77:3e:2b:e8:72:43:44:ca:44:58:0c:28:e8:9c:d9:ac:71:f2:
         04:b2:2c:36:14:b2:4a:bf:46:fc:23:c0:34:8e:38:54:ee:ea:
         6b:44:a9:70:f3:a5:40:90:66:d5:0b:53:1b:c7:fd:51:af:39:
         28:cf:f2:72:9f:a8:38:60:58:17:d7:65:88:ac:8b:43:94:8e:
         67:ab:29:b4:87:3c:0c:13:64:32:a7:f7:0f:97:32:95:15:f1:
         4c:92:b5:8e:53:a7:db:02:24:b9:39:9e:d3:07:7d:cf:8a:d1:
         87:34:b9:48:45:fd:8b:0c:e4:31:e5:a2:85:5f:ea:82:03:79:
         ff:a9:f5:86:a8:2d:33:e0:ce:e7:7d:f9:3b:19:95:b1:37:4e:
         d8:b3:1c:8d:97:f7:25:61:c3:28:36:25:f1:c4:0c:16:2b:b9:
         75:93:03:9f:03:1c:f8:a7:b4:ac:13:f5:94:1f:09:da:eb:ba:
         37:f6:a3:a0:2b:fc:6b:99:50:4a:3a:d8:c9:69:b2:00:02:84:
         dd:0a:1a:8c:c0:21:4e:5d:74:43:3e:77:4b:0e:fb:53:c5:7a:
         5a:fe:d9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----