Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a383030303a3a2f33332d3333203d3e20323635313735.roa
File:                     323830343a326263383a383030303a3a2f33332d3333203d3e20323635313735.roa (raw, json)
Hash identifier:          Esx0ovJ1KpBjuashbre07EfaR/tkQ3SQT0J0L04QGLY=
Subject key identifier:   A0:F7:C0:23:82:C4:19:60:BC:A5:E9:79:22:95:71:61:29:B4:8F:3F
Certificate issuer:       /CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
Certificate serial:       1E6F25C32FE807B81CF7040184602F0E4E6B7CB6
Authority key identifier: DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a383030303a3a2f33332d3333203d3e20323635313735.roa
Signing time:             Fri 29 Mar 2024 14:10:00 +0000
ROA not before:           Fri 29 Mar 2024 14:05:00 +0000
ROA not after:            Fri 28 Mar 2025 14:10:00 +0000
asID:                     265175
IP address blocks:        2804:2bc8:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:6f:25:c3:2f:e8:07:b8:1c:f7:04:01:84:60:2f:0e:4e:6b:7c:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
        Validity
            Not Before: Mar 29 14:05:00 2024 GMT
            Not After : Mar 28 14:10:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d1:90:ed:04:dd:99:92:b6:c8:b1:c1:b8:f7:
                    65:74:f5:7e:da:70:2b:f1:9f:7e:e9:65:9f:d7:b4:
                    6d:ff:b5:29:ae:8a:35:8f:7f:23:6d:d6:6d:52:be:
                    f1:a4:87:ab:51:7f:94:75:5a:a2:4b:9f:b3:89:9d:
                    29:91:f3:2b:e9:14:bc:6c:0c:7d:b9:75:3b:00:2a:
                    b0:a9:8f:73:d4:27:da:aa:82:ae:59:2c:9b:b2:8f:
                    27:ab:7f:df:3d:1c:93:1a:9c:87:02:08:95:97:d3:
                    81:df:89:dd:01:ba:64:fe:36:4e:26:d2:84:2d:3d:
                    bb:1d:96:b8:b6:f0:7b:23:23:65:21:ea:c7:94:8c:
                    cd:0c:a8:7b:cb:9d:8b:97:52:3c:50:6d:f0:8b:f1:
                    21:74:be:14:bb:03:d3:53:0f:f1:c6:b5:16:ca:cd:
                    1f:25:32:42:32:2b:94:51:64:39:6e:7d:61:e6:be:
                    15:c3:e7:ab:2c:d9:a2:c3:18:ad:fa:f1:28:d0:10:
                    b4:92:00:c1:71:54:73:c1:9a:df:83:6d:fe:08:77:
                    c8:13:c5:38:bc:0d:98:d9:f0:ef:47:ca:a1:be:e8:
                    3a:29:43:46:62:a5:dc:fb:9f:a2:9d:ba:2d:22:ec:
                    40:ba:f9:79:e1:41:51:46:45:59:15:86:85:94:1c:
                    83:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:F7:C0:23:82:C4:19:60:BC:A5:E9:79:22:95:71:61:29:B4:8F:3F
            X509v3 Authority Key Identifier:
                keyid:DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a383030303a3a2f33332d3333203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bc8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         23:f6:cc:ba:d9:41:20:a2:d4:b2:80:ef:89:88:1d:07:94:53:
         3b:0a:e8:ce:66:87:d2:7f:33:80:66:35:8c:3a:d9:1e:1c:36:
         a0:95:ee:66:2b:1f:a0:cf:e3:c8:16:86:9d:b5:8c:eb:28:fb:
         51:9d:76:d5:cb:5c:13:53:64:26:b7:6e:11:62:1d:33:f5:41:
         56:da:c3:42:b3:7c:0d:d5:5c:4b:50:63:2f:82:ff:72:f5:0c:
         6d:02:73:fe:58:4c:67:3d:c8:81:5e:4e:0a:b8:5e:a5:fb:43:
         c6:b0:16:c1:d5:87:b3:46:a9:51:88:0c:a1:19:cf:2e:22:2e:
         e2:eb:48:fc:8d:50:01:05:97:1d:db:4e:74:a7:b1:1e:e5:36:
         b0:f6:99:23:34:a2:79:34:3c:dc:9c:9d:8a:a4:d2:31:58:73:
         33:5d:89:9a:87:ec:8b:63:22:40:ef:c2:a6:1f:30:8f:39:1a:
         c4:32:f0:cf:04:6f:ec:8c:2b:a6:5f:de:f7:25:60:c6:8e:79:
         04:5c:17:57:9c:a2:52:be:cf:f5:cc:18:32:2b:5d:1f:ea:6e:
         aa:c7:83:81:1f:92:5d:97:55:3d:f7:04:d6:b5:50:0f:49:07:
         de:ea:84:e8:33:53:5e:64:1e:d7:a2:c5:2e:ae:ef:93:34:cd:
         bf:12:d5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----