Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323037343a3a2f33322d3438203d3e20323634343931.roa
File:                     323830343a323037343a3a2f33322d3438203d3e20323634343931.roa (raw, json)
Hash identifier:          /11kF0vG7bCkPpHvc4YPZwwprBLSpghOx7Pw3vjF2CA=
Subject key identifier:   6A:6D:FF:57:71:73:8F:A7:8C:7E:C7:02:49:60:95:01:50:EA:E4:1C
Certificate issuer:       /CN=8C2C77205EE6970E9E8839D552B00BD6F1128E95
Certificate serial:       7CC3AECF8DE10897B3A07CAA53D7D75E30A98180
Authority key identifier: 8C:2C:77:20:5E:E6:97:0E:9E:88:39:D5:52:B0:0B:D6:F1:12:8E:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C2C77205EE6970E9E8839D552B00BD6F1128E95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323037343a3a2f33322d3438203d3e20323634343931.roa
Signing time:             Mon 11 Mar 2024 20:41:56 +0000
ROA not before:           Mon 11 Mar 2024 20:36:56 +0000
ROA not after:            Mon 10 Mar 2025 20:41:56 +0000
asID:                     264491
IP address blocks:        2804:2074::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c3:ae:cf:8d:e1:08:97:b3:a0:7c:aa:53:d7:d7:5e:30:a9:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C2C77205EE6970E9E8839D552B00BD6F1128E95
        Validity
            Not Before: Mar 11 20:36:56 2024 GMT
            Not After : Mar 10 20:41:56 2025 GMT
        Subject: CN=6A6DFF5771738FA78C7EC7024960950150EAE41C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:32:6d:32:c9:68:7b:b9:0b:e5:6e:b1:b5:20:
                    d5:cc:8f:e5:96:a8:3b:96:c6:49:f3:85:2e:dc:0d:
                    24:13:18:a4:76:32:9b:03:82:15:71:a6:a1:d2:7f:
                    5f:b1:0b:61:5c:ba:a6:1b:5d:80:43:dc:a8:b5:14:
                    43:62:36:2b:02:ca:99:f6:58:95:7e:ca:30:c5:81:
                    2a:73:c2:74:88:a1:27:ed:6c:a4:4c:cb:42:6f:67:
                    c3:e6:38:33:53:52:cb:56:28:21:b2:f0:21:19:f8:
                    75:e7:9e:2e:f5:e4:4a:d4:64:d6:bc:55:ef:83:3f:
                    1c:19:ec:ab:ef:93:a9:32:b1:23:87:fc:b7:c3:ea:
                    ba:1f:da:7a:e4:24:76:87:81:e1:a8:b7:c2:e3:f3:
                    2e:29:c1:b7:b7:d3:e6:24:4f:59:dc:1c:2d:b7:26:
                    38:3c:c4:8f:8e:ba:37:08:b0:32:ee:4d:76:24:b0:
                    f1:2a:fc:74:ff:c7:b1:84:f0:0a:b0:67:c0:8b:b5:
                    68:6d:44:fb:a6:e9:55:1e:fc:6b:71:4d:ed:ae:56:
                    f1:b0:eb:b6:69:79:3b:6d:69:74:03:69:4a:7d:00:
                    7e:10:0e:63:28:e8:7c:cc:41:a7:9f:2c:aa:a2:5b:
                    83:9b:be:b0:d9:55:a2:59:6f:a4:67:d6:50:54:07:
                    80:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:6D:FF:57:71:73:8F:A7:8C:7E:C7:02:49:60:95:01:50:EA:E4:1C
            X509v3 Authority Key Identifier:
                keyid:8C:2C:77:20:5E:E6:97:0E:9E:88:39:D5:52:B0:0B:D6:F1:12:8E:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/8C2C77205EE6970E9E8839D552B00BD6F1128E95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C2C77205EE6970E9E8839D552B00BD6F1128E95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323037343a3a2f33322d3438203d3e20323634343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2074::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:55:e2:8a:c9:18:f7:65:6f:a0:d8:e7:22:4f:f0:fb:be:3a:
         e7:84:e2:80:ea:2f:96:7b:2d:ca:f1:01:5c:26:18:15:41:16:
         85:f7:c3:bf:72:9e:d1:c2:13:4f:b1:e6:29:c2:b9:04:46:c4:
         73:8e:f7:ba:6a:50:8c:57:b8:bd:a2:96:ff:50:a9:7e:b5:7d:
         fd:37:f3:95:4a:16:fa:3d:47:f2:36:65:ed:84:ab:6d:0c:50:
         4f:1e:b1:18:61:1f:c7:2c:a8:63:ad:ad:4e:ec:4b:61:79:a6:
         1d:3d:7f:1c:1e:d0:3a:8e:a2:97:91:7e:81:db:3f:80:3c:d5:
         27:e8:5d:1a:54:ea:aa:0b:cc:2b:43:e6:b2:fe:1e:62:3c:5f:
         b7:c7:b0:07:69:b0:c2:e7:54:5e:ac:a3:2f:03:24:12:39:96:
         c6:66:8b:3b:50:05:b9:74:f6:f3:b1:f3:08:36:54:48:e1:34:
         ad:ab:df:b6:0f:eb:ad:a7:48:fb:20:9d:81:66:b7:31:00:be:
         80:d6:49:f9:9e:00:1f:c7:13:d6:23:e7:f7:98:f4:0b:ef:3e:
         51:28:ba:62:ce:8d:67:f1:09:6b:66:1f:86:03:13:fd:43:0b:
         29:69:ab:1f:d6:2b:e7:72:24:60:55:2f:cc:d8:19:45:83:2c:
         51:f0:8f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----