Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/323830343a333233303a3a2f33322d3334203d3e20323635303631.roa
File:                     323830343a333233303a3a2f33322d3334203d3e20323635303631.roa (raw, json)
Hash identifier:          kXIWnKKzTN0A3v9Utr1z7TO8kQK+rGNhC8A5LlOzbEo=
Subject key identifier:   E2:E4:AD:E1:91:10:5D:CE:E4:8C:5D:3F:A1:F8:0C:98:AA:C6:78:05
Certificate issuer:       /CN=57605BD6E2DA5C87A8B4437F8334A5F1320C41C7
Certificate serial:       06473641F16A4C59383F8ECA70AAC67F7049AFDB
Authority key identifier: 57:60:5B:D6:E2:DA:5C:87:A8:B4:43:7F:83:34:A5:F1:32:0C:41:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57605BD6E2DA5C87A8B4437F8334A5F1320C41C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/323830343a333233303a3a2f33322d3334203d3e20323635303631.roa
Signing time:             Thu 14 Mar 2024 20:00:06 +0000
ROA not before:           Thu 14 Mar 2024 19:55:06 +0000
ROA not after:            Thu 13 Mar 2025 20:00:06 +0000
asID:                     265061
IP address blocks:        2804:3230::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:47:36:41:f1:6a:4c:59:38:3f:8e:ca:70:aa:c6:7f:70:49:af:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57605BD6E2DA5C87A8B4437F8334A5F1320C41C7
        Validity
            Not Before: Mar 14 19:55:06 2024 GMT
            Not After : Mar 13 20:00:06 2025 GMT
        Subject: CN=E2E4ADE191105DCEE48C5D3FA1F80C98AAC67805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b3:ca:14:33:1f:96:92:8d:65:30:57:07:c0:
                    11:47:3d:87:fb:93:dc:36:f3:20:8d:de:58:fa:6e:
                    a3:41:81:77:9a:e2:fd:8b:8a:8b:3e:cf:a3:a0:ae:
                    6f:58:87:99:61:03:00:b6:e4:30:d3:8c:aa:96:92:
                    c0:8d:bf:35:e4:43:2d:ba:e9:64:35:ad:20:69:e7:
                    db:f8:3f:2d:91:2a:54:c3:d1:bd:3f:79:8e:a3:12:
                    35:93:92:c1:6c:63:bd:0b:ec:51:53:43:8f:e3:0c:
                    35:db:26:9a:89:56:ec:46:73:3a:08:f3:53:20:11:
                    c4:60:c4:a8:9c:90:ff:a5:0f:20:48:8f:7f:b6:1f:
                    9d:ec:3d:0a:62:ce:d2:71:61:88:f5:05:78:23:20:
                    30:54:4d:30:0b:2f:85:4b:82:9b:4d:aa:17:98:37:
                    da:a2:9f:2f:ed:55:b9:c5:45:d5:bd:5d:0c:e0:eb:
                    23:ff:cd:99:9f:18:11:da:cc:ca:55:1f:47:bb:51:
                    50:02:0e:e8:48:cb:ca:17:13:83:70:b8:95:3e:3a:
                    33:98:bd:68:8f:de:32:2b:c6:be:12:c5:e6:63:2f:
                    9f:c6:65:e0:4e:57:3a:ad:95:6a:6f:45:13:b3:7a:
                    4a:4c:65:dd:83:81:98:1e:46:43:14:5d:9b:92:f1:
                    68:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E4:AD:E1:91:10:5D:CE:E4:8C:5D:3F:A1:F8:0C:98:AA:C6:78:05
            X509v3 Authority Key Identifier:
                keyid:57:60:5B:D6:E2:DA:5C:87:A8:B4:43:7F:83:34:A5:F1:32:0C:41:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/57605BD6E2DA5C87A8B4437F8334A5F1320C41C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57605BD6E2DA5C87A8B4437F8334A5F1320C41C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/323830343a333233303a3a2f33322d3334203d3e20323635303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3230::/32

    Signature Algorithm: sha256WithRSAEncryption
         c1:77:e0:d0:26:88:50:64:7a:61:7b:ad:7e:a4:1b:57:8d:b4:
         8d:ae:b7:b3:cb:8b:21:1d:01:b5:25:50:7a:92:65:ed:c1:ff:
         83:49:c6:d6:8f:bd:b2:d9:17:d1:a0:85:2f:fa:1a:09:a1:b9:
         d0:af:8f:34:5a:ce:e1:03:a8:75:a3:bf:83:b0:23:17:f3:0b:
         c9:63:00:8b:6c:5b:45:9b:aa:e8:81:77:05:7e:af:13:d5:c9:
         71:28:77:b7:31:b2:15:b6:44:70:20:41:46:69:1b:38:f2:df:
         bc:31:8c:7a:08:4d:db:d0:aa:f8:2d:d2:32:09:06:ce:d6:fa:
         93:f1:28:58:1b:29:d9:a9:2b:5f:1f:f6:28:b4:0b:fe:7e:06:
         fb:c6:90:5f:d8:bd:bf:85:d0:c4:e7:50:c6:1d:37:41:93:d1:
         05:29:91:c7:e7:95:ef:0f:84:3d:7a:85:24:1a:b2:ca:8e:d4:
         33:3a:a1:fa:0f:44:bc:af:f4:e4:1d:a9:ea:2f:74:0f:ed:62:
         e8:b3:a5:fe:94:9e:ab:c5:d4:66:79:75:0c:47:a3:bb:f8:d2:
         9f:38:73:75:f3:fd:9d:a1:03:5a:2c:00:5f:89:63:a3:ef:7f:
         99:94:3c:db:b3:45:25:2e:51:0e:a6:d5:49:c3:a7:c5:63:53:
         53:4d:e2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----