Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/0/323830343a326565383a3a2f33322d313238203d3e20323632383830.roa
File:                     323830343a326565383a3a2f33322d313238203d3e20323632383830.roa (raw, json)
Hash identifier:          V6Ag9syVWkUJR/H2GmLGs6a1gRuB47YvyN5c+q8W43o=
Subject key identifier:   27:CF:08:3F:1F:AC:9F:6D:9B:D4:7E:48:89:92:68:E2:48:34:E2:B4
Certificate issuer:       /CN=4331C75604BDCB26E64B954974D729F616D10D84
Certificate serial:       6309C617FDA13BA3B22E6B4A6276A3D5D4309AE3
Authority key identifier: 43:31:C7:56:04:BD:CB:26:E6:4B:95:49:74:D7:29:F6:16:D1:0D:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4331C75604BDCB26E64B954974D729F616D10D84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/0/323830343a326565383a3a2f33322d313238203d3e20323632383830.roa
Signing time:             Mon 29 Jan 2024 19:36:12 +0000
ROA not before:           Mon 29 Jan 2024 19:31:12 +0000
ROA not after:            Mon 27 Jan 2025 19:36:12 +0000
asID:                     262880
IP address blocks:        2804:2ee8::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:09:c6:17:fd:a1:3b:a3:b2:2e:6b:4a:62:76:a3:d5:d4:30:9a:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4331C75604BDCB26E64B954974D729F616D10D84
        Validity
            Not Before: Jan 29 19:31:12 2024 GMT
            Not After : Jan 27 19:36:12 2025 GMT
        Subject: CN=27CF083F1FAC9F6D9BD47E48899268E24834E2B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:87:96:fb:73:aa:0d:75:f0:72:8f:ff:5d:b3:
                    1c:d8:2d:ad:ef:6e:65:22:15:d4:95:19:4e:10:ae:
                    66:50:e2:96:91:c7:92:15:f2:02:20:24:ac:f9:25:
                    af:8a:a7:c6:e6:e4:ce:05:1b:ab:01:f8:8b:2a:5c:
                    5a:db:48:a8:b8:41:e1:a6:2b:bd:f0:c5:c6:cf:8c:
                    e7:d8:02:a9:40:8b:84:3a:e9:8d:3d:81:6f:cc:b7:
                    64:62:68:09:68:b3:34:21:d9:ce:73:5d:ca:09:d8:
                    87:42:a6:94:6a:22:92:a2:98:40:84:4b:e7:27:c9:
                    69:bf:45:33:0d:af:c1:fe:73:87:4a:4b:68:d7:f8:
                    54:5c:aa:62:5c:5f:0a:f4:11:bf:fd:53:0f:81:55:
                    8f:9f:fd:8a:1b:a2:46:a5:df:e3:b7:47:76:20:b0:
                    01:6e:ed:dd:c3:0f:93:1a:e2:ec:2f:08:a2:09:c1:
                    fe:b5:41:c0:85:18:64:78:3b:a0:1e:82:1b:45:24:
                    ee:89:e3:7d:69:b1:82:e8:cf:35:01:d2:96:fc:77:
                    f9:15:84:51:72:1c:d6:9e:71:a7:40:9d:51:5f:ae:
                    19:5d:de:e1:d2:7f:c2:51:81:59:8b:46:a3:a0:92:
                    a6:93:a5:44:3b:44:30:a7:17:55:3f:6d:d3:af:7c:
                    47:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:CF:08:3F:1F:AC:9F:6D:9B:D4:7E:48:89:92:68:E2:48:34:E2:B4
            X509v3 Authority Key Identifier:
                keyid:43:31:C7:56:04:BD:CB:26:E6:4B:95:49:74:D7:29:F6:16:D1:0D:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/0/4331C75604BDCB26E64B954974D729F616D10D84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4331C75604BDCB26E64B954974D729F616D10D84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/0/323830343a326565383a3a2f33322d313238203d3e20323632383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ee8::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:09:c9:74:9a:0e:3b:e1:f2:ae:71:62:cb:18:90:59:b5:58:
         70:98:28:09:b1:64:8c:57:e1:b6:18:68:f6:c5:c1:93:d1:5c:
         15:a0:db:f5:1f:c5:0d:b0:51:13:4a:c0:43:0d:4c:88:13:7f:
         52:bc:c0:b2:a1:30:46:9f:61:f9:3d:00:e2:3e:df:c6:bf:8e:
         9b:27:56:f3:6e:54:fd:73:5e:29:e5:6b:de:c9:87:9f:af:63:
         01:9d:de:81:bf:8d:43:7f:7a:78:47:6f:50:74:2b:9a:1c:03:
         5d:6e:a0:08:63:28:8e:10:93:3e:04:71:56:cb:6a:00:a2:9a:
         e9:35:03:d2:40:1b:77:42:0a:99:74:cf:cf:c5:da:e2:d2:66:
         e2:cf:ae:44:49:8c:47:01:9b:a3:ae:4e:42:10:60:f1:7f:b7:
         43:b9:17:3e:fc:03:b8:23:d2:5c:9b:46:99:fd:bd:5e:3b:e1:
         95:db:b0:41:59:05:5b:aa:92:b3:63:2b:e7:38:ff:3b:3b:6b:
         03:67:36:17:63:1f:e9:bf:49:e1:9a:e3:75:e0:f0:f0:08:f3:
         ec:13:a0:ea:8d:0a:5d:bd:2c:a5:25:1d:02:b2:4e:e7:f1:4b:
         4b:2e:53:9c:66:c6:10:69:3e:2a:1e:dc:de:f2:4b:11:15:39:
         43:08:76:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----