Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/323830343a373735343a3a2f33322d3335203d3e203631363034.roa
File:                     323830343a373735343a3a2f33322d3335203d3e203631363034.roa (raw, json)
Hash identifier:          pE0LFsUGbi3vLxecRk282+6a94Wn/8pqHCG+1P9ob6U=
Subject key identifier:   2D:75:3A:48:25:89:D2:68:F3:03:3A:1C:F7:36:B7:80:CA:16:85:0F
Certificate issuer:       /CN=E7F21F5C36725D1544566F24D524EA663254F06A
Certificate serial:       186E1A6B36517EADA0B5E3C29C291021C9E10760
Authority key identifier: E7:F2:1F:5C:36:72:5D:15:44:56:6F:24:D5:24:EA:66:32:54:F0:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E7F21F5C36725D1544566F24D524EA663254F06A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/323830343a373735343a3a2f33322d3335203d3e203631363034.roa
Signing time:             Mon 15 Jan 2024 17:45:11 +0000
ROA not before:           Mon 15 Jan 2024 17:40:11 +0000
ROA not after:            Mon 13 Jan 2025 17:45:11 +0000
asID:                     61604
IP address blocks:        2804:7754::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:6e:1a:6b:36:51:7e:ad:a0:b5:e3:c2:9c:29:10:21:c9:e1:07:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7F21F5C36725D1544566F24D524EA663254F06A
        Validity
            Not Before: Jan 15 17:40:11 2024 GMT
            Not After : Jan 13 17:45:11 2025 GMT
        Subject: CN=2D753A482589D268F3033A1CF736B780CA16850F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e8:6f:fa:9a:ee:e4:64:c9:ed:a9:b7:d8:c1:
                    8a:4b:16:1e:b8:ea:bb:1e:58:30:69:f8:bc:cf:ce:
                    39:dd:96:5c:fa:47:8c:c0:f8:a8:17:70:22:61:05:
                    b5:c8:67:29:9d:3b:38:14:19:ec:12:0a:bc:13:f4:
                    fa:d0:db:71:9a:fe:2d:c2:9e:e5:55:a4:94:30:20:
                    b6:69:cd:07:f2:31:7f:ff:fa:af:be:f8:73:26:ee:
                    cb:fd:cc:86:2c:42:cb:b7:2c:cc:87:93:fc:7b:34:
                    8f:6b:70:5f:16:dd:8d:eb:fc:b6:18:5f:e7:0c:90:
                    f2:be:21:4e:0d:18:f8:3f:c5:e0:c9:39:0a:a3:71:
                    34:b5:17:f1:03:7e:fd:94:78:bd:92:ec:b4:d4:e1:
                    2b:1d:39:82:bb:9f:ae:e9:75:4e:0c:17:6d:fc:b8:
                    b6:9d:12:f0:e7:0f:fb:44:cd:0c:bc:4a:d6:a0:53:
                    b5:e2:8c:91:6b:99:d6:72:4f:53:ce:12:96:bc:f9:
                    43:53:4a:6e:2a:30:a1:08:f9:06:78:b6:02:56:fb:
                    49:08:03:8c:83:ac:3d:d3:44:00:86:25:af:8c:2d:
                    e1:09:60:ef:5c:62:ec:18:d1:84:25:27:2a:a3:d0:
                    b0:cd:1d:ad:81:9f:8c:94:43:de:f4:30:a4:15:86:
                    02:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:75:3A:48:25:89:D2:68:F3:03:3A:1C:F7:36:B7:80:CA:16:85:0F
            X509v3 Authority Key Identifier:
                keyid:E7:F2:1F:5C:36:72:5D:15:44:56:6F:24:D5:24:EA:66:32:54:F0:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/E7F21F5C36725D1544566F24D524EA663254F06A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E7F21F5C36725D1544566F24D524EA663254F06A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/323830343a373735343a3a2f33322d3335203d3e203631363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7754::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:a1:ed:d1:84:9e:b7:5d:5b:ec:78:e8:fc:8f:c1:1c:65:8e:
         ea:b6:87:9c:07:83:5f:34:84:0f:8a:58:2f:1d:2f:db:4e:27:
         34:1f:92:b0:8c:72:7f:1f:a2:74:7a:a2:e8:53:30:ea:6f:59:
         c8:5c:03:a9:81:6e:48:6e:4b:68:87:01:1a:d7:6a:24:e3:b8:
         b7:24:00:ba:46:a4:46:7b:c5:72:be:84:10:89:78:c8:40:f6:
         a9:c4:42:6f:41:26:05:ea:50:9a:3a:bf:d8:89:4a:39:71:27:
         e1:19:c2:86:ca:df:26:e3:66:29:e6:50:d2:29:9e:44:6f:f0:
         b7:2e:9b:a4:90:0c:ea:30:f9:1d:31:e0:06:e4:e6:32:03:cb:
         e9:34:df:6b:47:ab:eb:22:66:c9:03:68:12:0d:ba:ce:37:cf:
         63:6a:6c:3b:8b:5d:fe:a6:f5:d8:46:8e:3f:af:01:f5:fe:cc:
         31:e3:3c:56:8b:e6:ab:ec:10:eb:5e:c3:b6:cd:42:64:01:a7:
         75:f9:bc:0b:1b:d8:0e:b9:67:66:17:f5:5c:4a:fd:38:45:e3:
         0e:0c:46:c3:19:78:a3:d2:3d:77:ff:b6:82:80:c8:fe:ef:e9:
         dd:d0:8b:7e:52:26:1f:7b:77:95:20:bf:d6:8b:a6:0d:38:cd:
         10:36:63:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----