Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/0/323830343a373264303a3a2f33332d3333203d3e20323730383737.roa
File:                     323830343a373264303a3a2f33332d3333203d3e20323730383737.roa (raw, json)
Hash identifier:          G8sNZPRT0pbn/cLGLTS6P/MqCKt2Q82YVSQe+0SW8B4=
Subject key identifier:   18:6B:6D:F7:A9:CC:82:EC:B0:A8:07:4A:39:3B:C7:AB:9C:59:14:90
Certificate issuer:       /CN=A731B275F45E256F64580D91E6FC778E5C57FBF8
Certificate serial:       27BEE6E736657EA9C8EA219937D2DFDEABEE6F50
Authority key identifier: A7:31:B2:75:F4:5E:25:6F:64:58:0D:91:E6:FC:77:8E:5C:57:FB:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A731B275F45E256F64580D91E6FC778E5C57FBF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/0/323830343a373264303a3a2f33332d3333203d3e20323730383737.roa
Signing time:             Thu 15 Feb 2024 14:55:36 +0000
ROA not before:           Thu 15 Feb 2024 14:50:36 +0000
ROA not after:            Thu 13 Feb 2025 14:55:36 +0000
asID:                     270877
IP address blocks:        2804:72d0::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:be:e6:e7:36:65:7e:a9:c8:ea:21:99:37:d2:df:de:ab:ee:6f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A731B275F45E256F64580D91E6FC778E5C57FBF8
        Validity
            Not Before: Feb 15 14:50:36 2024 GMT
            Not After : Feb 13 14:55:36 2025 GMT
        Subject: CN=186B6DF7A9CC82ECB0A8074A393BC7AB9C591490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4f:a7:e1:29:65:32:68:09:b0:86:1d:b5:b6:
                    42:61:cb:a9:9f:26:dd:5d:0c:69:50:68:3a:04:6f:
                    fc:64:a2:5e:1d:36:d2:f9:03:24:c1:5c:8e:3c:98:
                    aa:f1:89:d9:10:17:7f:cf:cd:d5:47:82:53:ff:2d:
                    0c:79:92:46:63:48:c7:6d:68:6b:70:ca:8b:29:23:
                    18:61:cf:4b:f1:ab:5b:57:69:09:6b:5e:0d:6d:b1:
                    7f:17:f8:bc:20:7c:0e:60:6a:3a:2c:aa:a1:85:0b:
                    9d:56:2d:86:85:d1:60:83:25:39:4e:e3:29:ce:e8:
                    61:fc:5f:38:18:ec:8f:e1:28:f0:c6:6c:28:63:38:
                    01:b5:40:ea:83:ac:bf:d6:22:0e:cc:7a:d4:10:01:
                    6e:ca:23:9d:73:03:f5:05:89:8b:0e:ba:90:fc:3f:
                    63:61:0c:25:32:23:15:fc:6d:41:6d:07:2d:99:82:
                    23:a3:1f:a4:16:e0:86:fd:9b:6b:a2:e3:3f:9d:6f:
                    18:71:e1:4e:30:52:50:46:35:a5:0e:5e:ee:02:d1:
                    63:64:8c:d5:e6:0b:83:1c:7f:e6:8c:12:60:00:6f:
                    26:a3:75:ba:43:32:8b:3f:f5:a7:0d:c5:85:d2:4a:
                    d9:be:4f:08:5b:72:d1:fb:93:8c:08:68:c1:ba:f1:
                    de:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:6B:6D:F7:A9:CC:82:EC:B0:A8:07:4A:39:3B:C7:AB:9C:59:14:90
            X509v3 Authority Key Identifier:
                keyid:A7:31:B2:75:F4:5E:25:6F:64:58:0D:91:E6:FC:77:8E:5C:57:FB:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/0/A731B275F45E256F64580D91E6FC778E5C57FBF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A731B275F45E256F64580D91E6FC778E5C57FBF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/0/323830343a373264303a3a2f33332d3333203d3e20323730383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:72d0::/33

    Signature Algorithm: sha256WithRSAEncryption
         8a:71:8c:c7:54:04:ce:be:f6:b8:30:02:84:6b:4b:7e:02:e7:
         ee:4a:74:32:24:f9:72:49:c9:19:c8:b3:a5:c8:6f:08:5d:83:
         4d:65:5b:58:83:ee:09:47:68:13:9d:1c:28:23:21:a9:3e:7f:
         84:65:c8:49:84:66:94:3e:03:4a:ad:ac:00:6d:bd:b6:61:ba:
         9b:81:cc:61:a7:bc:cf:81:4e:41:cc:81:f3:9e:c4:82:58:38:
         6f:62:68:7d:60:d6:f5:8f:ef:11:67:fa:09:74:c4:89:32:89:
         bf:d9:cb:5b:dc:63:0e:aa:d3:a9:1e:e6:1c:94:15:5d:53:fe:
         c9:12:82:db:67:1e:a1:e3:9e:f6:fe:05:76:f7:79:65:e4:fb:
         33:42:a4:d8:4c:ba:40:26:28:bd:b6:34:db:71:12:52:79:fc:
         34:b3:1b:5d:00:65:96:0c:a7:7c:cf:d4:ff:09:db:ac:f1:52:
         1a:d7:94:59:88:60:2c:54:f4:21:51:85:2c:bc:59:f3:f7:0b:
         01:8d:e9:5b:7d:a2:2f:41:62:9c:94:40:99:b6:63:af:36:33:
         b3:77:27:1f:25:e8:c4:52:f9:38:a7:77:32:f7:e3:bb:53:34:
         dd:82:63:f2:50:28:39:e0:a0:70:74:2f:44:8e:bb:de:39:8b:
         34:bd:1e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----