Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97PJnaV91PLGva4tj7iCQ1Eskx2QA7ZXVEB6ZwGwDy5u/1/323830343a336633633a3a2f33322d3438203d3e20323636363437.roa
File:                     323830343a336633633a3a2f33322d3438203d3e20323636363437.roa (raw, json)
Hash identifier:          uuua3qUnVxWoJuRfWna8Go1Y5PGLQ2KODm2/vhiUWXU=
Subject key identifier:   10:4D:3D:CB:AC:C8:EA:B4:BD:E8:FD:7A:3C:4B:FC:91:19:31:8F:6C
Certificate issuer:       /CN=C1F80CF5CCAB6525170BD6FC3D9D0340DD63EC2C
Certificate serial:       7EF28E355D26F3409B20C36461AA16C87E4C34DD
Authority key identifier: C1:F8:0C:F5:CC:AB:65:25:17:0B:D6:FC:3D:9D:03:40:DD:63:EC:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C1F80CF5CCAB6525170BD6FC3D9D0340DD63EC2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97PJnaV91PLGva4tj7iCQ1Eskx2QA7ZXVEB6ZwGwDy5u/1/323830343a336633633a3a2f33322d3438203d3e20323636363437.roa
Signing time:             Fri 05 Apr 2024 14:37:21 +0000
ROA not before:           Fri 05 Apr 2024 14:32:21 +0000
ROA not after:            Fri 04 Apr 2025 14:37:21 +0000
asID:                     266647
IP address blocks:        2804:3f3c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:f2:8e:35:5d:26:f3:40:9b:20:c3:64:61:aa:16:c8:7e:4c:34:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1F80CF5CCAB6525170BD6FC3D9D0340DD63EC2C
        Validity
            Not Before: Apr  5 14:32:21 2024 GMT
            Not After : Apr  4 14:37:21 2025 GMT
        Subject: CN=104D3DCBACC8EAB4BDE8FD7A3C4BFC9119318F6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8a:3e:45:5c:62:4b:e9:25:f3:64:8a:58:21:
                    9c:a1:22:83:47:1a:ac:1a:b0:e2:2d:84:d9:38:0a:
                    e5:ac:c9:df:c6:30:f9:69:07:d1:b8:73:7b:41:62:
                    68:fe:53:9a:65:16:15:b7:5c:a7:8b:e2:5e:51:06:
                    c1:67:50:a1:ad:4b:f1:e5:b5:71:e8:07:08:36:7f:
                    49:ef:46:ba:78:ca:76:8a:b2:90:90:dc:8c:aa:11:
                    1d:82:a0:12:cf:49:be:01:67:a9:99:2e:f1:0a:bb:
                    1e:7b:0d:95:d6:94:b4:0c:6b:1d:ef:f4:e6:6d:04:
                    5d:f9:a5:27:72:42:77:93:72:19:64:7a:ad:c5:01:
                    f2:b6:bb:34:73:40:e1:38:57:41:07:c2:85:63:8d:
                    e8:fa:4b:72:ab:92:e1:b9:21:de:16:57:80:96:81:
                    01:c2:9e:2a:74:0e:73:13:1e:56:d2:53:f1:18:7c:
                    cf:2c:ed:ca:34:08:a2:d8:c2:47:fa:6c:b3:e4:04:
                    6d:ba:70:0c:4c:7f:ed:24:e1:a5:33:bd:32:28:2c:
                    85:0d:7e:9d:c7:5a:99:99:73:03:e1:02:94:a6:d8:
                    80:e3:13:85:cd:67:e4:71:5f:e1:06:69:60:09:0b:
                    ef:07:83:2d:2a:22:e2:03:ff:28:eb:6f:0e:a0:ae:
                    2e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:4D:3D:CB:AC:C8:EA:B4:BD:E8:FD:7A:3C:4B:FC:91:19:31:8F:6C
            X509v3 Authority Key Identifier:
                keyid:C1:F8:0C:F5:CC:AB:65:25:17:0B:D6:FC:3D:9D:03:40:DD:63:EC:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97PJnaV91PLGva4tj7iCQ1Eskx2QA7ZXVEB6ZwGwDy5u/1/C1F80CF5CCAB6525170BD6FC3D9D0340DD63EC2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C1F80CF5CCAB6525170BD6FC3D9D0340DD63EC2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97PJnaV91PLGva4tj7iCQ1Eskx2QA7ZXVEB6ZwGwDy5u/1/323830343a336633633a3a2f33322d3438203d3e20323636363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f3c::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:8d:4b:e3:d8:c1:ad:c2:49:0a:f2:bf:a3:83:16:a5:c7:b5:
         58:0a:bc:4f:86:11:01:a7:94:8e:3e:dd:1c:8b:44:53:24:4d:
         6a:64:7f:87:06:10:d7:9a:a9:0d:29:36:93:72:50:cd:3e:b6:
         64:75:60:37:c5:54:04:f4:09:f8:49:28:4d:4d:0c:7d:40:5f:
         4a:18:85:53:43:23:84:70:51:2e:81:0e:a5:67:c2:95:5b:8a:
         c0:88:6a:1b:b9:a0:62:62:8c:86:ac:23:b4:9c:90:d8:70:cd:
         15:7c:15:aa:9a:9c:7b:58:71:8e:73:3e:06:fd:e8:c6:86:12:
         be:88:f7:a9:71:d2:5d:3f:b4:5f:73:c0:cd:af:e1:13:00:9e:
         59:ea:9b:4f:27:17:2b:54:2a:30:f0:84:9c:96:f4:10:de:40:
         1f:47:90:5a:43:6e:55:76:97:3d:ba:ea:75:6f:1d:62:a1:f5:
         76:c6:34:08:0e:27:0d:18:e0:55:9a:1a:d4:77:de:fe:0f:6f:
         48:f7:18:03:72:3e:84:83:c1:fa:96:19:78:81:1a:16:ca:67:
         d0:5b:97:79:c1:82:56:ac:4f:08:16:27:0d:70:a5:72:07:a7:
         5d:97:8c:28:3a:c8:ce:e0:bb:74:e8:4d:2d:ac:80:42:8f:e2:
         31:c1:eb:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----