Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/323830343a356161343a383030303a3a2f33342d3334203d3e20323638373836.roa
File:                     323830343a356161343a383030303a3a2f33342d3334203d3e20323638373836.roa (raw, json)
Hash identifier:          WQur+vAlkLFEZCK7Guvt9x4M9Ueffi8AI5DrsHujEus=
Subject key identifier:   03:E0:C8:21:CD:3A:97:07:83:EB:CE:19:8C:4D:16:53:C5:5C:98:19
Certificate issuer:       /CN=5B0E34B275C876C4B43F01DC71D28BE4396AE47A
Certificate serial:       4EACC4826E7A63ABC8F6F5208682C83CCF52D184
Authority key identifier: 5B:0E:34:B2:75:C8:76:C4:B4:3F:01:DC:71:D2:8B:E4:39:6A:E4:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B0E34B275C876C4B43F01DC71D28BE4396AE47A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/323830343a356161343a383030303a3a2f33342d3334203d3e20323638373836.roa
Signing time:             Fri 05 Jan 2024 20:10:34 +0000
ROA not before:           Fri 05 Jan 2024 20:05:34 +0000
ROA not after:            Fri 03 Jan 2025 20:10:34 +0000
asID:                     268786
IP address blocks:        2804:5aa4:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ac:c4:82:6e:7a:63:ab:c8:f6:f5:20:86:82:c8:3c:cf:52:d1:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B0E34B275C876C4B43F01DC71D28BE4396AE47A
        Validity
            Not Before: Jan  5 20:05:34 2024 GMT
            Not After : Jan  3 20:10:34 2025 GMT
        Subject: CN=03E0C821CD3A970783EBCE198C4D1653C55C9819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ed:50:9c:f4:81:14:2f:53:e9:e8:d1:35:df:
                    dc:74:9f:b2:b0:22:c7:ee:f0:d0:1c:d3:9c:52:12:
                    3c:6e:58:b0:f2:00:d7:8b:6a:16:1e:ef:bf:c2:cf:
                    a5:6d:a7:07:be:d4:99:4c:32:6a:71:2e:ca:f3:d1:
                    8b:56:8f:db:26:eb:7e:30:dd:0d:a0:c2:a8:7d:b6:
                    eb:f4:33:3e:93:c5:a3:2e:d9:e1:45:10:ae:74:17:
                    7e:ae:a5:64:a1:bc:47:c2:09:f2:cb:d0:0f:0f:8e:
                    a3:9d:a5:e0:d4:f6:58:88:fe:82:1e:14:9f:87:51:
                    be:04:75:f5:ea:fb:ce:a0:38:e3:cb:83:d8:db:fa:
                    47:cb:4e:b5:92:f8:41:0b:73:0c:06:ef:bd:e1:4f:
                    a9:28:3e:6a:7e:a8:60:0c:08:e5:5e:e5:f3:aa:0f:
                    ea:5d:f1:b4:74:3e:ff:76:d0:9d:12:5a:b0:0f:29:
                    aa:c7:68:50:bc:86:55:38:ed:43:1c:3a:96:d1:ac:
                    8e:27:ae:0f:85:31:3f:e4:72:96:3b:32:3d:04:ec:
                    ca:ab:97:43:24:de:c3:45:45:09:84:c5:18:85:e2:
                    50:08:61:b4:33:a6:34:60:40:c0:6f:7d:0a:b8:e6:
                    5f:a6:02:22:46:83:a9:a0:33:37:23:21:d6:e1:4e:
                    4d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E0:C8:21:CD:3A:97:07:83:EB:CE:19:8C:4D:16:53:C5:5C:98:19
            X509v3 Authority Key Identifier:
                keyid:5B:0E:34:B2:75:C8:76:C4:B4:3F:01:DC:71:D2:8B:E4:39:6A:E4:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/5B0E34B275C876C4B43F01DC71D28BE4396AE47A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B0E34B275C876C4B43F01DC71D28BE4396AE47A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/323830343a356161343a383030303a3a2f33342d3334203d3e20323638373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5aa4:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         69:59:e2:90:b3:23:79:cd:38:5f:bd:6d:b3:3e:56:de:ad:49:
         fc:e9:50:2f:be:fb:3f:05:51:55:bd:8e:11:e7:d4:b7:ad:0c:
         83:55:dc:6a:39:6d:9f:d8:49:65:33:3d:1a:eb:7c:c0:f9:b3:
         f6:aa:4c:47:70:81:17:25:b0:bb:a3:10:60:96:9b:51:67:f3:
         21:ec:2d:cf:a3:90:35:9a:6f:a8:b7:1a:5b:11:07:40:74:60:
         01:ce:60:d9:7b:bd:68:35:8e:08:69:c6:23:1b:94:9f:64:51:
         11:25:ec:ce:23:a2:11:a3:a3:fe:32:14:94:b7:fa:4a:47:04:
         25:f3:3e:17:5b:de:b5:cd:3c:2e:71:0a:e5:61:58:92:30:f6:
         27:4d:c1:06:87:fe:9e:f0:55:e0:be:10:bb:d8:95:dc:ad:dc:
         f8:de:fb:b0:50:44:c5:af:06:50:f5:00:0a:1e:e9:7a:a0:19:
         bb:00:fb:08:de:7c:4e:ee:2e:a3:bf:47:54:92:c2:83:27:9b:
         05:ed:5c:0a:a8:47:f5:61:eb:77:a0:f8:e2:cb:33:27:22:9d:
         e3:bc:e0:73:da:76:d3:22:73:a7:fe:25:4a:2f:c1:0f:30:9c:
         22:4b:8a:5d:d5:ba:85:f5:73:8c:f0:58:d7:99:03:81:ad:9e:
         0a:fd:9a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----