Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a3a2f33322d3438203d3e20323632373239.roa
File:                     323830343a313664383a3a2f33322d3438203d3e20323632373239.roa (raw, json)
Hash identifier:          P22ETbb57CFpWK+wmk9qjDLfXTJrph+JmtcAP6b33Zw=
Subject key identifier:   D0:2C:1F:FE:7D:C1:6B:E4:FA:3F:A3:AC:ED:3F:90:D5:72:42:6A:A4
Certificate issuer:       /CN=588EE00910FA303185B2D60E297C4C76D993A8E1
Certificate serial:       5C5CF02BA69334DC29FB733931CE7B2893E9F6D2
Authority key identifier: 58:8E:E0:09:10:FA:30:31:85:B2:D6:0E:29:7C:4C:76:D9:93:A8:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/588EE00910FA303185B2D60E297C4C76D993A8E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a3a2f33322d3438203d3e20323632373239.roa
Signing time:             Tue 25 Jul 2023 15:00:00 +0000
ROA not before:           Tue 25 Jul 2023 14:55:00 +0000
ROA not after:            Tue 23 Jul 2024 15:00:00 +0000
asID:                     262729
IP address blocks:        2804:16d8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:5c:f0:2b:a6:93:34:dc:29:fb:73:39:31:ce:7b:28:93:e9:f6:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=588EE00910FA303185B2D60E297C4C76D993A8E1
        Validity
            Not Before: Jul 25 14:55:00 2023 GMT
            Not After : Jul 23 15:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c0:0a:99:0e:5b:1d:b1:e7:b6:e1:35:1a:e6:
                    6d:a7:56:a8:9e:94:f8:c5:15:f2:e3:da:b9:3b:99:
                    a3:d9:c4:9c:04:6c:d1:58:0c:4c:7d:0e:3f:b7:32:
                    af:19:e7:c8:75:bc:38:f2:d2:7a:41:23:d8:1b:fd:
                    74:8b:fc:bd:1f:6f:5a:cc:57:09:e2:39:c8:eb:c3:
                    5e:45:65:2e:68:0b:a7:70:24:4a:e4:5c:64:df:c0:
                    24:1b:3f:22:9c:2a:a2:e7:e0:e6:71:28:77:b2:92:
                    cc:af:a2:63:ae:44:b8:ac:c7:64:c5:a4:a7:b4:11:
                    ad:08:f0:57:3c:30:49:5c:31:eb:9d:30:06:38:2d:
                    6d:c3:c9:4b:19:fc:5e:4b:26:ed:6d:be:f1:3c:b5:
                    ba:b6:62:c5:11:db:74:e9:b4:da:47:ae:d7:36:86:
                    91:0f:be:96:56:b1:2d:a7:89:03:5f:3f:3c:cd:a9:
                    a9:2f:2d:f5:c4:67:e3:39:f6:b9:24:3b:01:a6:b6:
                    92:0a:24:18:42:99:6a:7d:7f:c3:12:93:51:5f:d5:
                    2d:fe:0d:2d:75:36:ac:2a:9b:d3:46:93:9a:ef:c2:
                    79:6d:8e:08:01:6c:b7:85:f7:82:0a:a6:92:33:ae:
                    a5:18:8d:49:d7:bc:ef:aa:32:b2:98:8e:d0:98:cd:
                    dc:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:2C:1F:FE:7D:C1:6B:E4:FA:3F:A3:AC:ED:3F:90:D5:72:42:6A:A4
            X509v3 Authority Key Identifier:
                keyid:58:8E:E0:09:10:FA:30:31:85:B2:D6:0E:29:7C:4C:76:D9:93:A8:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/588EE00910FA303185B2D60E297C4C76D993A8E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/588EE00910FA303185B2D60E297C4C76D993A8E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a3a2f33322d3438203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:52:0c:53:d5:29:a7:39:cf:b2:07:08:50:b3:4c:5f:2e:33:
         b5:9e:39:c7:3c:0b:e1:11:38:4c:c2:80:ef:69:cc:95:c9:37:
         cd:bd:74:23:a3:b3:d5:5c:8a:d9:d8:bb:dd:4b:ab:50:e1:6b:
         96:e4:57:87:32:46:ec:51:46:b6:18:6c:e4:21:05:33:4b:ee:
         77:73:4e:25:fb:8b:ca:56:e9:3d:08:05:02:20:79:19:86:03:
         53:da:d1:0e:9e:30:ed:60:ac:31:81:8b:88:af:b6:72:8e:e2:
         38:4b:62:95:c4:84:1f:a0:b3:fb:e3:e7:e7:c0:6d:31:7f:d7:
         d1:f7:d9:51:e3:be:17:17:9c:c8:66:78:f2:b3:67:f9:65:e6:
         3d:db:d9:31:7e:55:7a:1d:83:3a:30:85:59:11:07:65:d5:fe:
         07:bc:d4:a7:27:b2:8f:fa:9e:ac:45:14:65:d1:5e:c2:5c:48:
         35:34:5a:fa:84:38:01:39:79:32:d1:99:41:4f:7b:95:c8:bc:
         09:43:99:d8:e1:1f:4f:a3:bd:d2:f9:12:3b:0e:e0:f4:37:1d:
         95:a4:ed:ae:2f:69:8e:19:68:88:0b:7c:f1:2c:22:a1:d1:4a:
         a8:fa:75:af:ab:95:87:bd:49:8b:6c:44:79:a6:9f:3a:c4:a9:
         a2:29:bb:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----