Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/323830343a326231303a313030303a3a2f33392d3339203d3e203532393136.roa
File:                     323830343a326231303a313030303a3a2f33392d3339203d3e203532393136.roa (raw, json)
Hash identifier:          dTPbAb9AoQ6xBUWxlgb/JeGQb456DL0YRP+cYbTDVB4=
Subject key identifier:   B0:2C:3E:9C:66:43:91:24:47:72:BE:08:E1:B8:C2:7C:B9:21:74:D2
Certificate issuer:       /CN=D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D
Certificate serial:       2CD1C0B9E210CE1690C72A5F52AD1BD53A66B7F3
Authority key identifier: D1:03:4C:4B:71:C8:FD:5C:F3:CC:7E:3C:02:EC:F8:22:A1:A2:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/323830343a326231303a313030303a3a2f33392d3339203d3e203532393136.roa
Signing time:             Fri 15 Dec 2023 16:51:10 +0000
ROA not before:           Fri 15 Dec 2023 16:46:10 +0000
ROA not after:            Fri 13 Dec 2024 16:51:10 +0000
asID:                     52916
IP address blocks:        2804:2b10:1000::/39 maxlen: 39

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:d1:c0:b9:e2:10:ce:16:90:c7:2a:5f:52:ad:1b:d5:3a:66:b7:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D
        Validity
            Not Before: Dec 15 16:46:10 2023 GMT
            Not After : Dec 13 16:51:10 2024 GMT
        Subject: CN=B02C3E9C664391244772BE08E1B8C27CB92174D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9d:ec:8e:3f:cb:11:2a:bc:37:17:d3:d1:da:
                    38:e5:3d:42:b8:c9:a2:d9:03:9e:b3:52:76:5e:f8:
                    fc:f6:e4:6b:18:4b:9e:13:be:89:27:0a:4a:26:d6:
                    e1:73:1f:72:40:2a:2c:0b:03:a2:c0:69:b6:91:b1:
                    9a:19:f8:d4:90:5c:75:9a:7e:7b:23:e8:a0:dd:52:
                    28:a1:3e:96:ea:81:8d:29:01:93:cb:0b:ac:3a:2a:
                    e3:23:be:31:9b:0c:a8:63:b9:ef:6a:ee:49:f6:4a:
                    60:84:d3:0a:a4:03:d9:ea:18:8e:2a:52:b3:0a:53:
                    23:b9:37:24:4e:ce:64:da:c2:2f:76:45:11:d0:37:
                    63:d8:5d:34:6d:74:56:71:40:ce:76:b9:42:1a:d6:
                    bd:2e:ee:b6:5d:2b:f4:d0:71:3a:e1:40:f1:2b:dc:
                    3e:4a:0a:b3:29:80:b4:1b:c3:9a:b0:92:26:af:5b:
                    65:b3:21:67:c0:60:bb:38:0a:02:bb:90:27:42:9f:
                    18:96:05:62:d9:e1:ee:56:ef:5f:ee:9c:a1:7d:d0:
                    55:54:0e:2f:78:9f:26:13:57:5e:c5:2c:ab:81:2e:
                    63:4d:55:59:98:d0:b8:ef:bc:05:88:72:21:cf:62:
                    80:ed:26:31:ae:46:92:28:12:c0:00:1f:f5:11:09:
                    85:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:2C:3E:9C:66:43:91:24:47:72:BE:08:E1:B8:C2:7C:B9:21:74:D2
            X509v3 Authority Key Identifier:
                keyid:D1:03:4C:4B:71:C8:FD:5C:F3:CC:7E:3C:02:EC:F8:22:A1:A2:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/323830343a326231303a313030303a3a2f33392d3339203d3e203532393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b10:1000::/39

    Signature Algorithm: sha256WithRSAEncryption
         b1:b2:ad:ed:93:79:02:74:19:c7:39:dd:80:f3:e2:b5:22:58:
         50:3d:1a:d2:98:3d:e8:14:fd:02:9b:55:f4:6a:c4:db:95:b0:
         05:c5:40:86:b8:50:ba:7f:12:3e:f8:76:12:63:61:d2:b2:44:
         48:10:7a:8f:41:27:c2:22:93:74:81:14:fd:db:92:86:6d:43:
         8b:37:3a:da:f1:3c:19:0a:eb:e6:db:d6:7e:99:9f:bd:ae:8d:
         2d:8b:0e:bf:ba:4e:0a:b2:f1:31:7c:f9:b3:dc:74:cf:a4:95:
         24:ae:41:f9:cd:df:68:95:67:ac:63:60:4e:b3:dd:f8:b3:88:
         b9:b2:fb:74:d1:b1:c8:23:18:d0:af:f2:a9:09:73:15:ef:83:
         50:5a:8c:19:33:50:5e:7a:22:eb:06:70:27:27:02:ab:50:82:
         f0:ec:92:92:04:4e:5f:6d:79:cb:51:4b:43:ba:15:84:4b:32:
         04:ae:2f:81:50:fd:f4:dc:6c:ed:95:f5:d9:9b:9b:cf:c3:1f:
         96:6b:58:8d:77:4e:5b:92:52:54:75:06:b1:7f:30:d0:48:f6:
         47:6f:78:f0:a5:f0:8f:3f:45:c3:1e:ca:f0:86:9f:4d:63:cc:
         a3:7d:ec:f8:e4:c4:88:1a:cb:72:d0:03:ca:c7:e4:7b:80:25:
         41:b8:49:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----