Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/323830343a323232383a376630303a3a2f34302d3430203d3e20323634353935.roa
File:                     323830343a323232383a376630303a3a2f34302d3430203d3e20323634353935.roa (raw, json)
Hash identifier:          cbSrCJnFhYwOk8zmVZB3ydB5Nu8xijIfMwsdGNCWglQ=
Subject key identifier:   D7:86:08:CE:E5:CD:A1:6E:E0:97:7F:D1:D5:95:AA:CD:6B:E1:2C:2F
Certificate issuer:       /CN=574748D8BF31C17F406ADCFABD98395668029B7F
Certificate serial:       2251377D792AD1FBCF6269919045D489D456BA68
Authority key identifier: 57:47:48:D8:BF:31:C1:7F:40:6A:DC:FA:BD:98:39:56:68:02:9B:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/574748D8BF31C17F406ADCFABD98395668029B7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/323830343a323232383a376630303a3a2f34302d3430203d3e20323634353935.roa
Signing time:             Mon 01 Apr 2024 14:40:13 +0000
ROA not before:           Mon 01 Apr 2024 14:35:13 +0000
ROA not after:            Mon 31 Mar 2025 14:40:13 +0000
asID:                     264595
IP address blocks:        2804:2228:7f00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:51:37:7d:79:2a:d1:fb:cf:62:69:91:90:45:d4:89:d4:56:ba:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=574748D8BF31C17F406ADCFABD98395668029B7F
        Validity
            Not Before: Apr  1 14:35:13 2024 GMT
            Not After : Mar 31 14:40:13 2025 GMT
        Subject: CN=D78608CEE5CDA16EE0977FD1D595AACD6BE12C2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8c:c3:a5:b7:41:ac:63:e5:a4:90:9e:ff:90:
                    ff:7f:cc:bf:87:a4:5d:a2:2b:e2:37:d0:6e:87:a9:
                    0e:10:7c:fa:1a:1d:45:cc:f9:40:48:31:38:37:08:
                    d1:59:c7:dc:a4:84:14:69:91:0b:74:f9:70:ce:ba:
                    7b:76:19:27:20:eb:55:b8:76:48:f0:18:6b:58:c0:
                    f9:47:c0:9e:c0:de:65:29:ae:c1:c9:0f:0e:0b:21:
                    c7:2b:bb:06:b0:3a:96:e4:aa:f1:3f:e1:93:47:35:
                    0f:3a:42:c7:19:ce:69:62:0c:df:1b:cc:1c:23:23:
                    40:6f:9c:53:3e:91:2a:a6:9d:4e:3b:d9:84:30:dc:
                    51:0b:3b:b5:c9:7b:c3:63:99:30:a4:24:ac:b7:76:
                    20:64:37:e9:d8:21:eb:3a:2c:17:56:36:1f:57:35:
                    7a:a8:d8:9e:b1:16:fb:05:4b:1c:f4:d1:b4:80:71:
                    57:8c:3a:a5:6c:45:4f:1f:dd:cc:3c:57:0a:85:bb:
                    45:6b:a1:34:f5:73:35:a3:8c:fb:c0:21:61:7b:f7:
                    7a:19:30:8c:f4:97:8c:9f:7c:e8:8d:e9:fa:e2:e5:
                    73:dd:e2:e6:5f:2b:8f:e5:4b:96:60:3d:ad:b0:37:
                    bb:55:ca:ea:ed:09:08:f8:ff:1e:cf:df:fe:c0:f1:
                    d7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:86:08:CE:E5:CD:A1:6E:E0:97:7F:D1:D5:95:AA:CD:6B:E1:2C:2F
            X509v3 Authority Key Identifier:
                keyid:57:47:48:D8:BF:31:C1:7F:40:6A:DC:FA:BD:98:39:56:68:02:9B:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/574748D8BF31C17F406ADCFABD98395668029B7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/574748D8BF31C17F406ADCFABD98395668029B7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/323830343a323232383a376630303a3a2f34302d3430203d3e20323634353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2228:7f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         93:8b:2f:a7:4c:9e:b8:48:03:91:3e:23:fc:14:1b:a4:59:90:
         3e:46:56:46:46:7b:44:46:d3:44:a0:23:6d:b1:c9:45:82:45:
         1d:78:01:8a:3f:b5:ca:65:ac:95:13:07:8f:54:23:ee:da:b5:
         d5:a0:f2:fe:f6:45:53:5c:0b:df:32:46:df:71:c2:39:68:b0:
         27:e9:0c:27:81:c7:78:76:ac:67:d6:33:1f:c3:b9:d9:0f:c7:
         e3:76:25:d0:35:57:e3:b7:5a:e6:33:d2:70:88:cd:6a:34:71:
         ec:ca:2e:85:e2:3c:c4:d0:c9:07:b9:7f:e3:92:c4:ce:10:30:
         25:86:7a:d0:4f:fa:23:ee:34:d6:94:02:39:8b:8a:30:4c:bd:
         46:79:75:00:9c:13:6f:a6:85:25:34:0c:40:97:f4:73:a5:b1:
         56:39:77:cb:14:90:c3:79:05:93:3b:10:55:68:41:34:b2:2e:
         d1:38:eb:67:18:fa:e3:eb:90:c8:a5:c9:99:7e:31:c2:9a:1f:
         7c:05:47:b8:91:e5:ba:56:b9:fa:f9:95:8e:03:0d:63:ed:28:
         f1:81:f3:51:c3:c2:af:d3:5e:05:74:fb:e5:48:6e:91:ba:8b:
         08:ec:c5:7d:38:25:e4:e2:fb:18:0a:46:9c:51:2f:cd:71:2e:
         c1:aa:14:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----