Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/323830343a313039343a3a2f33322d3438203d3e20323633363431.roa
File:                     323830343a313039343a3a2f33322d3438203d3e20323633363431.roa (raw, json)
Hash identifier:          NRLyzofbfjvaqZcQ1ojHPTEiKnm+6EmjqtmNozLW5PM=
Subject key identifier:   07:F8:A4:E2:AD:A2:D5:96:53:EC:7C:36:68:D3:02:68:B3:12:C2:71
Certificate issuer:       /CN=551FF95B2328867EC2F8D3A8E213AF61D7EC076F
Certificate serial:       709BC3A473308BD16DE0AC762D8D0F936AB94D05
Authority key identifier: 55:1F:F9:5B:23:28:86:7E:C2:F8:D3:A8:E2:13:AF:61:D7:EC:07:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/551FF95B2328867EC2F8D3A8E213AF61D7EC076F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/323830343a313039343a3a2f33322d3438203d3e20323633363431.roa
Signing time:             Mon 11 Mar 2024 19:56:49 +0000
ROA not before:           Mon 11 Mar 2024 19:51:49 +0000
ROA not after:            Mon 10 Mar 2025 19:56:49 +0000
asID:                     263641
IP address blocks:        2804:1094::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:9b:c3:a4:73:30:8b:d1:6d:e0:ac:76:2d:8d:0f:93:6a:b9:4d:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551FF95B2328867EC2F8D3A8E213AF61D7EC076F
        Validity
            Not Before: Mar 11 19:51:49 2024 GMT
            Not After : Mar 10 19:56:49 2025 GMT
        Subject: CN=07F8A4E2ADA2D59653EC7C3668D30268B312C271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:d2:1f:af:e8:b7:4f:f6:d2:ce:d1:f5:ed:de:
                    e6:28:f7:4c:c0:58:18:5c:0e:54:c3:6e:01:63:9c:
                    e7:96:a7:c6:02:d2:0f:b7:c7:c0:59:81:0d:67:08:
                    62:b6:24:03:1e:e7:ef:f5:3e:18:b5:91:08:7c:7c:
                    e6:db:91:72:fb:d2:58:8e:5a:28:5d:a9:c3:45:9c:
                    0b:45:fe:da:a4:c2:2c:d2:95:70:42:73:a4:b5:91:
                    2c:36:3b:ec:fe:e2:49:e2:24:71:19:26:48:0b:72:
                    e4:63:7e:0c:19:4a:f3:05:bf:19:c9:9b:f8:2e:06:
                    44:77:5b:ec:cf:6a:92:de:1a:f4:20:ca:21:fa:b4:
                    c6:b8:93:93:d0:cc:5b:c7:28:92:61:b4:ac:27:2f:
                    79:d7:1c:21:06:94:a7:e9:92:3c:cc:78:40:d7:7c:
                    47:d2:bc:c2:45:c7:94:77:63:48:79:41:21:c5:c1:
                    72:04:d2:b5:73:33:b5:37:fe:2d:ae:95:31:62:eb:
                    34:bc:f4:54:c2:36:d2:0e:3d:b1:be:bb:cd:58:0e:
                    fe:98:0e:c3:e4:69:05:a0:8c:18:f6:65:4c:c8:83:
                    f6:5e:29:15:26:28:b0:a8:8d:42:ca:46:c1:c2:b5:
                    3e:17:ed:6e:2b:5f:44:79:b8:b6:ce:b7:ce:2f:e9:
                    2c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F8:A4:E2:AD:A2:D5:96:53:EC:7C:36:68:D3:02:68:B3:12:C2:71
            X509v3 Authority Key Identifier:
                keyid:55:1F:F9:5B:23:28:86:7E:C2:F8:D3:A8:E2:13:AF:61:D7:EC:07:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/551FF95B2328867EC2F8D3A8E213AF61D7EC076F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/551FF95B2328867EC2F8D3A8E213AF61D7EC076F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/323830343a313039343a3a2f33322d3438203d3e20323633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1094::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:4e:91:e1:a3:41:3d:61:59:c4:4d:8d:0f:aa:02:12:0e:2b:
         cb:3a:3b:7e:79:6f:a8:b6:c9:89:8c:37:84:89:52:cc:ed:38:
         ff:4a:c9:b6:fa:18:6e:6b:93:c5:6f:ba:2f:92:2a:cd:c6:82:
         fc:cf:63:a4:02:4f:f9:35:94:cb:07:2d:ed:52:cd:f9:07:8d:
         49:3c:04:83:b5:ba:e6:50:b6:58:0d:f4:36:08:69:18:fe:52:
         b9:62:fc:5a:54:bb:1d:cd:43:7e:2f:30:2a:b4:9f:82:a6:ce:
         af:30:d6:da:4c:a0:61:e6:ed:f7:ab:82:be:c1:af:1f:32:7f:
         a7:f1:fd:85:63:a8:e7:92:7b:02:9a:66:34:52:51:58:fc:df:
         57:10:7a:b6:b8:53:f4:86:42:42:cd:c2:9e:b5:13:b6:2f:54:
         1d:81:c0:10:05:bf:35:9f:c6:e2:46:34:c0:1f:3b:ce:fd:49:
         46:e4:ed:0e:b5:2e:03:f4:05:c6:4a:f0:7c:ec:87:13:e3:0b:
         7c:fd:bd:18:93:2a:ab:62:dd:e0:62:b0:cb:05:f4:3c:47:e5:
         27:a9:c7:78:35:77:42:8e:3d:8b:49:3f:da:8e:7e:28:02:86:
         3f:28:d9:fa:91:87:b1:c7:74:56:13:63:c5:81:71:48:94:28:
         41:b5:bc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----