Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9NobCjzpJjYaq7dxygh7rB31Wn5jyF3ybc4uQc9dWe65/0/323830343a373939343a3a2f33322d3438203d3e20323731333134.roa
File:                     323830343a373939343a3a2f33322d3438203d3e20323731333134.roa (raw, json)
Hash identifier:          4Iqb5L8+keluoCOa/KofabbQl3KB6J+RNBt/UvIEfIs=
Subject key identifier:   B7:E7:54:0B:88:62:BC:26:5D:96:C6:28:EC:8E:EC:DA:D3:AF:D4:9D
Certificate issuer:       /CN=E0077013C077901F08A3C81C71541EE098776F90
Certificate serial:       55B99027B051D702A121102196AE5A9B35B8AA1D
Authority key identifier: E0:07:70:13:C0:77:90:1F:08:A3:C8:1C:71:54:1E:E0:98:77:6F:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0077013C077901F08A3C81C71541EE098776F90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9NobCjzpJjYaq7dxygh7rB31Wn5jyF3ybc4uQc9dWe65/0/323830343a373939343a3a2f33322d3438203d3e20323731333134.roa
Signing time:             Thu 21 Dec 2023 00:43:58 +0000
ROA not before:           Thu 21 Dec 2023 00:38:58 +0000
ROA not after:            Thu 19 Dec 2024 00:43:58 +0000
asID:                     271314
IP address blocks:        2804:7994::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:b9:90:27:b0:51:d7:02:a1:21:10:21:96:ae:5a:9b:35:b8:aa:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0077013C077901F08A3C81C71541EE098776F90
        Validity
            Not Before: Dec 21 00:38:58 2023 GMT
            Not After : Dec 19 00:43:58 2024 GMT
        Subject: CN=B7E7540B8862BC265D96C628EC8EECDAD3AFD49D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:62:f5:fe:8a:81:fa:ed:a5:da:f3:43:47:02:
                    65:83:e1:cf:82:76:bf:98:5c:15:18:16:3c:64:ae:
                    cd:ce:29:d2:52:31:17:11:64:89:4f:ed:8f:06:ed:
                    03:f5:52:ab:3a:a9:22:b8:a8:5a:7c:d2:e6:26:d0:
                    3c:9c:96:6b:77:0f:af:42:51:7f:d0:9e:ac:67:5f:
                    1f:18:5b:18:58:4a:a4:1f:33:95:d1:37:20:8a:a5:
                    90:e4:fe:55:7e:f1:e3:5a:e5:b2:40:0d:d5:06:28:
                    45:22:85:a2:6f:5e:3b:ba:78:8f:cd:63:10:2e:02:
                    fa:98:48:98:5e:fc:ca:55:0e:f1:2a:0f:2c:1a:9b:
                    60:6d:63:e1:36:7d:67:83:15:a5:bd:e0:3f:ce:a2:
                    59:f6:2f:30:3c:bf:4e:fa:89:7d:37:b8:69:5a:d8:
                    54:7d:fd:da:76:95:52:3d:85:ef:89:72:0f:4d:d2:
                    53:1c:9a:41:35:b4:4d:78:48:7b:31:61:da:fb:52:
                    f7:c6:42:9a:64:ab:59:3a:b3:ef:52:1f:f1:a5:94:
                    10:19:f3:38:02:c9:3a:86:4f:f4:e4:e1:55:fc:26:
                    28:7c:89:20:e4:e8:88:f7:48:e9:39:a1:22:df:33:
                    17:21:9c:76:6b:69:7d:dd:ed:4d:f1:f0:5c:4f:de:
                    b3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E7:54:0B:88:62:BC:26:5D:96:C6:28:EC:8E:EC:DA:D3:AF:D4:9D
            X509v3 Authority Key Identifier:
                keyid:E0:07:70:13:C0:77:90:1F:08:A3:C8:1C:71:54:1E:E0:98:77:6F:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9NobCjzpJjYaq7dxygh7rB31Wn5jyF3ybc4uQc9dWe65/0/E0077013C077901F08A3C81C71541EE098776F90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0077013C077901F08A3C81C71541EE098776F90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9NobCjzpJjYaq7dxygh7rB31Wn5jyF3ybc4uQc9dWe65/0/323830343a373939343a3a2f33322d3438203d3e20323731333134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7994::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:53:d7:e2:c5:f1:d3:91:98:2c:1b:a4:fe:59:eb:27:69:3d:
         fe:62:f1:51:37:70:ee:bd:34:d9:bd:1f:8d:d0:da:39:fc:15:
         8a:74:7c:70:11:19:7a:9d:d4:f2:c9:43:ea:ac:06:8e:28:18:
         40:c4:11:f7:23:21:b0:ba:68:ae:d9:ee:f6:de:fa:d9:80:16:
         dd:97:6a:ff:97:0e:cd:90:e4:af:a3:75:2d:f7:1b:0b:46:3a:
         90:73:1a:e4:11:cc:ce:9c:8d:eb:c9:f5:14:f0:f8:59:ac:3c:
         fb:3c:8e:8d:c8:23:29:40:de:59:7f:23:88:34:d0:bd:c8:13:
         58:67:6d:fd:3a:65:b8:52:72:f0:d4:57:bf:be:33:af:90:bf:
         42:c0:b2:4a:89:b5:b0:67:ff:67:59:d8:d8:53:1e:10:e6:f5:
         6f:26:8f:f1:e3:03:62:46:fe:fe:29:60:09:b1:d7:e6:93:fe:
         d6:44:c2:e8:e0:53:c7:55:7b:8a:aa:28:90:2d:ab:4d:55:ed:
         ee:10:e4:b9:4c:91:1e:3e:b1:ff:f0:60:28:fd:cd:0f:c9:d9:
         c3:de:f9:60:39:ae:55:ab:1e:1a:68:7a:4a:a7:0d:fa:c5:13:
         32:8e:ce:86:c2:a0:05:4a:83:22:0f:aa:23:55:1d:07:6d:df:
         9f:02:14:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----