Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/323830343a3534343a3a2f33322d3438203d3e20323632353035.roa
File:                     323830343a3534343a3a2f33322d3438203d3e20323632353035.roa (raw, json)
Hash identifier:          W48a8ACBYMiWGtSasyGyFTDDjKAjNkoEq3cnh0l3uJY=
Subject key identifier:   CC:F5:F4:DA:87:59:5F:D7:48:5A:CC:4E:0C:F8:E4:8E:27:12:38:2F
Certificate issuer:       /CN=2BC73A920C13C977F506EBD39B6882740FC9BC3A
Certificate serial:       357BB6AEF87D23A1C22EA4943BBFD25A75A55EF2
Authority key identifier: 2B:C7:3A:92:0C:13:C9:77:F5:06:EB:D3:9B:68:82:74:0F:C9:BC:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BC73A920C13C977F506EBD39B6882740FC9BC3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/323830343a3534343a3a2f33322d3438203d3e20323632353035.roa
Signing time:             Tue 24 Oct 2023 18:35:06 +0000
ROA not before:           Tue 24 Oct 2023 18:30:06 +0000
ROA not after:            Tue 22 Oct 2024 18:35:06 +0000
asID:                     262505
IP address blocks:        2804:544::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:7b:b6:ae:f8:7d:23:a1:c2:2e:a4:94:3b:bf:d2:5a:75:a5:5e:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BC73A920C13C977F506EBD39B6882740FC9BC3A
        Validity
            Not Before: Oct 24 18:30:06 2023 GMT
            Not After : Oct 22 18:35:06 2024 GMT
        Subject: CN=CCF5F4DA87595FD7485ACC4E0CF8E48E2712382F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ff:f1:bb:35:39:e5:e7:ea:dc:43:e1:15:b6:
                    04:fb:c2:58:2b:d2:a1:96:f0:c4:01:d6:24:b3:0a:
                    9b:12:7d:44:0a:12:7d:43:ea:d7:1c:26:1d:15:dd:
                    f1:3a:19:59:81:e5:d5:63:7b:ac:c8:ae:61:4c:0d:
                    1f:3e:95:23:7d:5b:a8:1b:f5:a3:80:ea:34:70:d8:
                    2d:85:a1:ba:2f:07:ea:24:b8:8b:76:45:a5:de:37:
                    86:3b:e2:5e:2c:30:b0:6d:da:72:08:68:4c:7a:4d:
                    10:e2:8a:98:7d:60:9d:d3:51:3c:ab:25:cb:e0:13:
                    8d:00:7a:60:4a:af:3b:3f:f6:c9:3b:40:3b:6f:37:
                    73:e9:8a:3f:98:a0:1d:d1:2d:e6:ee:59:a0:e7:94:
                    c8:67:c6:ec:16:19:3b:d0:4c:b5:8a:e5:60:ff:e9:
                    e1:5f:67:8e:5f:ad:79:c2:cf:87:34:46:11:f9:ab:
                    4c:8c:11:ed:06:b8:ac:30:2d:5f:68:67:0b:1e:b3:
                    ba:c8:8f:0a:71:7e:f2:02:e2:d2:11:52:65:69:10:
                    6b:f9:fd:e3:aa:30:8e:5f:4a:ed:ca:f0:3e:ac:48:
                    6a:13:fa:20:99:1d:2a:ab:69:b0:87:23:f6:04:2e:
                    b1:83:55:61:7f:78:a0:f8:a0:af:9f:74:93:c6:61:
                    e9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F5:F4:DA:87:59:5F:D7:48:5A:CC:4E:0C:F8:E4:8E:27:12:38:2F
            X509v3 Authority Key Identifier:
                keyid:2B:C7:3A:92:0C:13:C9:77:F5:06:EB:D3:9B:68:82:74:0F:C9:BC:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/2BC73A920C13C977F506EBD39B6882740FC9BC3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BC73A920C13C977F506EBD39B6882740FC9BC3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/323830343a3534343a3a2f33322d3438203d3e20323632353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:544::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:f2:09:f7:b9:0e:7d:c9:cf:dc:99:dc:ac:a4:8e:64:fd:0c:
         15:ef:d0:6a:d4:7f:99:97:5c:da:9d:aa:22:a0:e5:5e:d7:2e:
         33:f3:53:3e:f8:9c:0a:08:2c:64:18:2a:1a:2d:b8:ab:64:41:
         42:88:14:fa:05:d8:76:ca:9b:8c:24:0a:74:06:9d:85:bf:f9:
         db:15:1b:a2:47:d8:20:c0:af:be:6d:d2:d7:8a:56:38:ca:f4:
         14:b7:ca:8c:a7:ff:43:e8:d2:ac:ba:4c:e1:88:74:f3:f6:6a:
         47:ad:0e:f2:7b:ad:b9:96:06:13:1c:ea:e4:bb:cc:a6:fd:b6:
         7e:74:db:31:76:ac:7c:74:64:d7:9a:e9:68:33:bf:34:14:90:
         8b:a5:21:87:ac:e4:b5:6e:1d:2d:9e:7a:de:e8:90:2b:83:33:
         b6:3a:dd:62:e6:dc:41:9c:1f:c7:f1:e2:5b:06:b9:a4:11:1e:
         91:bb:fc:3e:9a:50:3e:35:d3:0b:43:8e:5d:1f:65:86:58:7e:
         af:4d:f5:7a:ea:8f:f1:9a:1b:20:51:5f:51:66:e4:21:75:72:
         ba:97:0d:ae:16:66:67:2a:52:fb:e6:ab:e9:06:9b:ff:78:81:
         ad:95:42:93:be:3d:21:3c:5f:f4:42:79:66:8e:c2:63:e3:59:
         d3:eb:ca:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----