Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/0/323830343a383630343a313030303a3a2f33362d3336203d3e20323732363134.roa
File:                     323830343a383630343a313030303a3a2f33362d3336203d3e20323732363134.roa (raw, json)
Hash identifier:          DLfU6pzXS0lZG/ibdS+rBTF2n5O4+0ccR34NHq3CKc0=
Subject key identifier:   C4:76:6E:BC:69:DD:C0:69:9F:F4:74:6C:F1:BF:04:B5:F6:11:96:33
Certificate issuer:       /CN=3508ABC74EC71F9482F4469C06D817E172192BCC
Certificate serial:       49AA11FAFDF76BDC6BAAF332EA71FC0968FD0D58
Authority key identifier: 35:08:AB:C7:4E:C7:1F:94:82:F4:46:9C:06:D8:17:E1:72:19:2B:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3508ABC74EC71F9482F4469C06D817E172192BCC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/0/323830343a383630343a313030303a3a2f33362d3336203d3e20323732363134.roa
Signing time:             Tue 16 May 2023 11:51:05 +0000
ROA not before:           Tue 16 May 2023 11:46:05 +0000
ROA not after:            Tue 14 May 2024 11:51:05 +0000
asID:                     272614
IP address blocks:        2804:8604:1000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:aa:11:fa:fd:f7:6b:dc:6b:aa:f3:32:ea:71:fc:09:68:fd:0d:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3508ABC74EC71F9482F4469C06D817E172192BCC
        Validity
            Not Before: May 16 11:46:05 2023 GMT
            Not After : May 14 11:51:05 2024 GMT
        Subject: CN=C4766EBC69DDC0699FF4746CF1BF04B5F6119633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:07:63:73:81:26:97:f0:e1:de:5c:80:f3:c3:
                    8c:b8:78:52:8f:57:fd:83:3a:3e:9f:50:51:73:e5:
                    0b:15:50:72:4c:2b:26:6c:15:bd:f4:88:1b:58:96:
                    79:0b:27:01:71:ba:20:ec:7b:ff:0f:3e:cc:ec:81:
                    ff:cf:58:19:38:60:e5:64:30:4e:e4:f0:57:c5:c3:
                    f2:07:66:fa:fe:99:52:73:a3:85:52:c7:57:ec:46:
                    55:bd:8f:53:da:11:31:5a:10:ba:b6:99:98:26:ab:
                    bf:be:76:f2:79:69:d6:c5:71:68:44:44:e8:f8:9d:
                    8d:61:2a:da:64:15:27:88:cb:5e:12:c8:fe:d5:94:
                    53:2e:f4:68:cc:0f:34:59:ca:50:36:53:f7:28:04:
                    a1:e3:db:45:48:59:b9:d4:a8:d6:ab:99:cc:12:2b:
                    30:35:b8:b8:60:5c:c0:11:5b:2a:a8:9b:07:51:64:
                    17:08:2a:c7:7a:7d:54:b2:90:1f:9a:d3:4f:10:88:
                    be:41:8b:7a:ae:32:cf:b7:81:8e:49:29:67:fe:7b:
                    cd:05:83:11:ad:0e:65:a4:f0:59:cc:b5:f8:47:f0:
                    78:4e:11:0a:a4:c3:fc:0c:85:aa:78:4e:b2:9e:4b:
                    a5:6e:b7:9d:9e:95:ce:13:bd:df:78:8d:4a:8c:d2:
                    0c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:76:6E:BC:69:DD:C0:69:9F:F4:74:6C:F1:BF:04:B5:F6:11:96:33
            X509v3 Authority Key Identifier:
                keyid:35:08:AB:C7:4E:C7:1F:94:82:F4:46:9C:06:D8:17:E1:72:19:2B:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/0/3508ABC74EC71F9482F4469C06D817E172192BCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3508ABC74EC71F9482F4469C06D817E172192BCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/0/323830343a383630343a313030303a3a2f33362d3336203d3e20323732363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8604:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0d:b3:4f:8e:6e:69:74:79:59:ba:8d:8b:8c:cf:31:33:29:77:
         b0:cc:d5:25:f2:35:a4:53:c1:17:a0:82:c9:2b:2f:c3:34:ee:
         ab:1b:51:40:67:dd:a2:72:ca:41:94:45:df:25:c9:e2:a1:f9:
         e5:a6:66:b0:b4:aa:a1:34:63:03:25:f0:3c:7a:70:6d:ce:7a:
         1f:2b:f0:88:f0:2a:e2:06:76:1c:2c:e0:22:88:11:ca:c4:bc:
         1f:15:4f:96:da:f6:56:c9:d9:e4:97:18:86:52:89:a8:87:9b:
         10:b8:40:11:76:35:7f:ae:95:92:f4:10:eb:91:74:cd:a9:60:
         a5:d1:f2:22:61:1d:c5:aa:1f:b2:09:7d:70:20:b4:92:ed:51:
         c3:0a:45:3a:70:64:89:22:41:07:d2:6f:02:5a:85:ac:fa:bc:
         ce:66:92:1b:d8:fa:d4:e5:22:5c:6e:42:63:06:22:95:bf:a3:
         6d:c1:1d:89:ec:cd:30:f8:5f:e2:0d:ef:d7:19:b4:e4:2b:44:
         78:c4:84:17:d1:79:00:3e:c0:6b:55:e5:38:ff:23:69:0d:67:
         c2:3e:ca:da:e6:0d:81:8d:1e:9d:22:69:59:e5:98:30:69:06:
         49:a3:af:43:98:35:e5:16:10:df:57:fa:60:fe:39:0f:c2:57:
         23:14:ca:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----