Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/323830343a3266303a3a2f33362d3430203d3e203533323336.roa
File:                     323830343a3266303a3a2f33362d3430203d3e203533323336.roa (raw, json)
Hash identifier:          uIglb5cgk5cSLA3Mn0dgbwedBrKwyJU7r6Xp/TDqiRw=
Subject key identifier:   7C:52:6B:D4:8D:AF:EC:D7:62:36:80:6C:AF:16:D6:56:87:4D:72:F2
Certificate issuer:       /CN=EE1F2CBFD1CF93D6FA0078818FBF753815C16C09
Certificate serial:       42E724EFF377720C89AF6B84B1FB3FC4EEE7DB23
Authority key identifier: EE:1F:2C:BF:D1:CF:93:D6:FA:00:78:81:8F:BF:75:38:15:C1:6C:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE1F2CBFD1CF93D6FA0078818FBF753815C16C09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/323830343a3266303a3a2f33362d3430203d3e203533323336.roa
Signing time:             Tue 19 Mar 2024 20:38:01 +0000
ROA not before:           Tue 19 Mar 2024 20:33:01 +0000
ROA not after:            Tue 18 Mar 2025 20:38:01 +0000
asID:                     53236
IP address blocks:        2804:2f0::/36 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:e7:24:ef:f3:77:72:0c:89:af:6b:84:b1:fb:3f:c4:ee:e7:db:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE1F2CBFD1CF93D6FA0078818FBF753815C16C09
        Validity
            Not Before: Mar 19 20:33:01 2024 GMT
            Not After : Mar 18 20:38:01 2025 GMT
        Subject: CN=3082010A0282010100B5D7F06749D6B546FE750F4C04E50484AE8BEDC3B8070294466638519D0DA5210FC6E21699A26ECA335675F9DC8FB7E560F50C01B6F687DD6EA1011A098F6E6EBCF657A4A6AF8A821FFE5024718AD7E61E847D2183B3DAAF2540613AE34EA080C60523735D00FB12187EA70F44DB17A12C6739AE162E13CC1322A7838B52C19A574CE9FAD9ACEB05167EFBEFCEDDF8B816465101D603EBDAA88C7F51CEF45A4EBAD92AE2B089D3DAC3969218BF2860E2C01613B49E71091C271F82FCAA3264438B7D2D96820820083ABE2C69317364E24A0F7D4885DD321FE08EEAA06BA5B0534EC0E2CE7004501E18F6AACB50869A978D1F0D99267225B6812A78FA0BC03D390203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d7:f0:67:49:d6:b5:46:fe:75:0f:4c:04:e5:
                    04:84:ae:8b:ed:c3:b8:07:02:94:46:66:38:51:9d:
                    0d:a5:21:0f:c6:e2:16:99:a2:6e:ca:33:56:75:f9:
                    dc:8f:b7:e5:60:f5:0c:01:b6:f6:87:dd:6e:a1:01:
                    1a:09:8f:6e:6e:bc:f6:57:a4:a6:af:8a:82:1f:fe:
                    50:24:71:8a:d7:e6:1e:84:7d:21:83:b3:da:af:25:
                    40:61:3a:e3:4e:a0:80:c6:05:23:73:5d:00:fb:12:
                    18:7e:a7:0f:44:db:17:a1:2c:67:39:ae:16:2e:13:
                    cc:13:22:a7:83:8b:52:c1:9a:57:4c:e9:fa:d9:ac:
                    eb:05:16:7e:fb:ef:ce:dd:f8:b8:16:46:51:01:d6:
                    03:eb:da:a8:8c:7f:51:ce:f4:5a:4e:ba:d9:2a:e2:
                    b0:89:d3:da:c3:96:92:18:bf:28:60:e2:c0:16:13:
                    b4:9e:71:09:1c:27:1f:82:fc:aa:32:64:43:8b:7d:
                    2d:96:82:08:20:08:3a:be:2c:69:31:73:64:e2:4a:
                    0f:7d:48:85:dd:32:1f:e0:8e:ea:a0:6b:a5:b0:53:
                    4e:c0:e2:ce:70:04:50:1e:18:f6:aa:cb:50:86:9a:
                    97:8d:1f:0d:99:26:72:25:b6:81:2a:78:fa:0b:c0:
                    3d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:52:6B:D4:8D:AF:EC:D7:62:36:80:6C:AF:16:D6:56:87:4D:72:F2
            X509v3 Authority Key Identifier:
                keyid:EE:1F:2C:BF:D1:CF:93:D6:FA:00:78:81:8F:BF:75:38:15:C1:6C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/EE1F2CBFD1CF93D6FA0078818FBF753815C16C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE1F2CBFD1CF93D6FA0078818FBF753815C16C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/323830343a3266303a3a2f33362d3430203d3e203533323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f0::/36

    Signature Algorithm: sha256WithRSAEncryption
         1b:14:d7:86:02:79:4e:78:39:36:f8:2b:58:bf:6d:b3:23:ca:
         e1:c7:c5:84:7c:f4:f5:a2:46:c7:37:e3:9e:ec:12:d5:c8:e4:
         eb:e5:b0:83:3b:5c:75:4d:6a:54:d2:41:5a:7f:6a:ec:cc:6f:
         30:23:74:51:4f:5f:1b:75:67:34:18:64:c7:60:c3:a0:46:6a:
         eb:42:b0:ce:66:cd:a7:8c:a2:05:ca:6e:43:ad:a3:f2:23:4f:
         b8:90:07:6b:3e:c6:0e:ae:5f:1a:57:40:a8:bd:c4:a3:ee:4d:
         0b:48:a9:72:69:4a:f3:03:e4:35:64:7b:70:76:74:2b:c9:e2:
         e3:21:b5:82:45:0c:36:3a:6f:73:d1:f0:4c:e4:f5:20:23:39:
         49:58:0f:4b:97:5b:89:44:c1:64:65:24:71:22:24:c9:ac:9a:
         72:7c:ad:7a:67:32:8d:99:e5:71:a9:04:56:04:80:b6:ee:b4:
         ed:78:c3:bc:f2:54:98:d4:b8:cc:f3:e9:b7:81:3e:32:48:c3:
         e2:c7:e2:0f:68:38:3a:0b:b7:46:2a:69:b8:8f:51:e9:ad:4b:
         ec:90:09:d5:68:a5:e6:7b:9b:25:c2:4d:a2:09:bd:64:9e:a4:
         59:76:0e:3d:b2:c0:2f:ba:aa:12:02:d0:88:ac:1c:db:e2:db:
         a4:44:59:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----