Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/323830343a326231303a313830303a3a2f33392d3339203d3e203532393136.roa
File:                     323830343a326231303a313830303a3a2f33392d3339203d3e203532393136.roa (raw, json)
Hash identifier:          X9xpMhAgv8z/Osw1E4Zj/XPzKcKx1gq8L0zFOeLmU2A=
Subject key identifier:   6A:BB:D6:4E:1F:52:86:19:9F:6F:CE:77:7D:FB:ED:BE:EB:AE:AA:E3
Certificate issuer:       /CN=D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D
Certificate serial:       073FDE8461B969F9BC09B7EA9D8D4D219096D5EC
Authority key identifier: D1:03:4C:4B:71:C8:FD:5C:F3:CC:7E:3C:02:EC:F8:22:A1:A2:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/323830343a326231303a313830303a3a2f33392d3339203d3e203532393136.roa
Signing time:             Sat 30 Mar 2024 01:37:53 +0000
ROA not before:           Sat 30 Mar 2024 01:32:53 +0000
ROA not after:            Sat 29 Mar 2025 01:37:53 +0000
asID:                     52916
IP address blocks:        2804:2b10:1800::/39 maxlen: 39

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:3f:de:84:61:b9:69:f9:bc:09:b7:ea:9d:8d:4d:21:90:96:d5:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D
        Validity
            Not Before: Mar 30 01:32:53 2024 GMT
            Not After : Mar 29 01:37:53 2025 GMT
        Subject: CN=6ABBD64E1F5286199F6FCE777DFBEDBEEBAEAAE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b4:4d:ab:8b:c3:5c:32:bb:33:99:c6:5a:46:
                    19:7e:8c:2b:d1:f5:41:b9:ae:ea:1a:f0:0b:1a:96:
                    7e:ae:03:9c:8f:7e:38:32:67:6a:9b:77:5d:1d:0e:
                    a1:20:85:ce:1f:50:dc:85:a9:56:cd:6a:8c:5e:3d:
                    7e:4a:db:4f:c9:90:b7:9b:da:b1:15:94:12:18:ca:
                    17:cb:15:27:a8:63:76:1f:2d:0b:59:96:40:d8:9f:
                    23:14:09:8d:4a:77:bc:06:dc:92:62:a2:48:e7:d8:
                    74:92:52:fa:ef:f9:0c:61:98:a0:9c:71:0c:00:3d:
                    96:d8:b2:97:87:26:d6:b8:9b:20:7d:c3:29:f0:77:
                    20:b4:21:c7:c8:27:33:b7:cd:92:c5:2e:72:fc:fa:
                    d4:7a:99:d5:e7:08:8d:0b:dd:81:d6:a8:3a:e2:94:
                    74:42:e4:ab:52:03:35:a5:9a:23:ce:77:62:af:7a:
                    7b:d1:16:c1:f1:7a:6b:12:f7:3d:3f:7a:25:be:f6:
                    6e:5b:73:f6:4f:bf:bc:25:a1:f0:77:10:6d:b0:c6:
                    48:5a:32:c8:b2:a6:f2:1a:e2:a9:4f:4e:08:30:91:
                    24:07:f9:0b:38:f5:7f:70:d2:12:eb:7e:61:9a:18:
                    b2:0b:98:29:51:34:ef:28:a2:66:f4:55:8d:fa:ae:
                    7a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:BB:D6:4E:1F:52:86:19:9F:6F:CE:77:7D:FB:ED:BE:EB:AE:AA:E3
            X509v3 Authority Key Identifier:
                keyid:D1:03:4C:4B:71:C8:FD:5C:F3:CC:7E:3C:02:EC:F8:22:A1:A2:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/323830343a326231303a313830303a3a2f33392d3339203d3e203532393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b10:1800::/39

    Signature Algorithm: sha256WithRSAEncryption
         20:45:83:0c:ed:08:ba:72:6a:f1:39:8c:4b:54:81:4f:5a:a1:
         e5:a9:4a:91:bf:3b:d0:06:b7:32:b8:eb:e2:6f:46:af:bf:c4:
         2c:f4:e0:c8:28:31:bb:b2:a2:c8:f6:5e:09:b9:e7:ff:58:d8:
         55:51:7c:c1:d1:48:84:28:1b:95:ce:ad:c5:26:90:77:78:f4:
         fc:4c:a8:22:51:c0:50:e1:5e:cc:0c:e9:96:cf:a0:c8:a4:83:
         b7:68:e8:e1:3a:80:e0:da:09:6f:b1:ca:a0:64:bf:50:06:34:
         f0:d1:91:f0:37:f9:84:1b:45:56:e1:69:e3:4f:c4:e9:08:e0:
         f1:57:63:3a:41:75:6c:13:22:52:f6:85:1f:40:7e:31:e2:51:
         b4:d5:10:12:04:34:50:24:fb:cb:b1:a3:96:da:de:e1:c0:3e:
         12:95:2b:7e:c4:a2:37:b4:38:5e:c7:e1:0d:59:4d:c8:a7:d6:
         40:d2:ce:78:cd:0c:25:50:cc:3b:40:ff:62:e2:51:44:51:c4:
         3a:e1:68:cc:0e:c6:55:e5:36:b8:44:85:c0:09:61:70:b3:33:
         04:a6:24:1f:73:33:f9:73:ff:e4:27:8b:b9:37:57:2c:87:f4:
         d0:75:a7:a6:b5:8d:af:80:fb:c4:98:60:fb:77:02:74:ec:68:
         e7:91:59:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----