Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0/323830343a3636343a3a2f33322d3438203d3e20323632353832.roa
File:                     323830343a3636343a3a2f33322d3438203d3e20323632353832.roa (raw, json)
Hash identifier:          uhyL4w7pYBwUQoCC2Bh1qe8s9qSub5CGrONIojZxi5A=
Subject key identifier:   99:BE:82:29:98:3F:3B:EB:3B:57:EE:D8:CB:E8:E2:13:99:AE:28:0C
Certificate issuer:       /CN=1D7BC705EEA281DFF0A94B408D23A1F04AE05888
Certificate serial:       09B513E8B26C5E95C4295A2B0D9474719902F373
Authority key identifier: 1D:7B:C7:05:EE:A2:81:DF:F0:A9:4B:40:8D:23:A1:F0:4A:E0:58:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1D7BC705EEA281DFF0A94B408D23A1F04AE05888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0/323830343a3636343a3a2f33322d3438203d3e20323632353832.roa
Signing time:             Mon 18 Mar 2024 20:50:37 +0000
ROA not before:           Mon 18 Mar 2024 20:45:37 +0000
ROA not after:            Mon 17 Mar 2025 20:50:37 +0000
asID:                     262582
IP address blocks:        2804:664::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:b5:13:e8:b2:6c:5e:95:c4:29:5a:2b:0d:94:74:71:99:02:f3:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D7BC705EEA281DFF0A94B408D23A1F04AE05888
        Validity
            Not Before: Mar 18 20:45:37 2024 GMT
            Not After : Mar 17 20:50:37 2025 GMT
        Subject: CN=99BE8229983F3BEB3B57EED8CBE8E21399AE280C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5d:87:97:44:30:20:ee:07:da:33:a2:82:19:
                    9b:70:0b:6c:2a:48:39:50:d1:de:1b:b0:fd:85:5a:
                    d4:75:ee:3b:2a:f7:78:d7:27:2a:91:8a:ba:ef:15:
                    a7:aa:69:14:e7:03:9d:1f:30:19:92:e3:ee:ce:a4:
                    1c:8e:14:25:3e:a1:47:32:85:87:4b:0a:3a:f6:da:
                    54:9f:eb:51:37:56:66:29:d5:ae:d4:bb:08:63:4b:
                    58:ae:10:0b:fe:9e:d7:da:47:23:2f:b5:c4:b1:86:
                    a8:62:44:f4:99:20:d2:e2:90:e0:2f:2a:33:af:65:
                    9c:5f:f7:a6:24:a4:f3:85:fd:e3:c1:ac:c8:04:a6:
                    b6:13:94:4b:f2:05:c2:3e:af:32:5d:9f:c3:e7:58:
                    4c:74:cf:fc:e2:cd:c6:f6:eb:31:ab:b3:b2:82:4a:
                    65:61:dd:2e:f9:d9:ed:77:f7:9e:e6:6f:f5:e4:38:
                    d3:cf:7b:5f:2e:df:a1:10:90:17:49:75:0b:77:48:
                    77:21:9b:f6:25:32:ab:f0:86:48:c4:bb:e1:e6:0e:
                    39:53:9a:44:20:85:46:49:0c:76:37:88:23:bc:c8:
                    64:8e:45:e8:62:4d:34:4d:6a:6f:76:a2:7a:30:88:
                    43:33:21:ef:75:1a:90:3e:9e:ae:6c:e2:06:a4:35:
                    2f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:BE:82:29:98:3F:3B:EB:3B:57:EE:D8:CB:E8:E2:13:99:AE:28:0C
            X509v3 Authority Key Identifier:
                keyid:1D:7B:C7:05:EE:A2:81:DF:F0:A9:4B:40:8D:23:A1:F0:4A:E0:58:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0/1D7BC705EEA281DFF0A94B408D23A1F04AE05888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1D7BC705EEA281DFF0A94B408D23A1F04AE05888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0/323830343a3636343a3a2f33322d3438203d3e20323632353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:664::/32

    Signature Algorithm: sha256WithRSAEncryption
         c9:c5:15:e3:19:f4:83:6c:94:38:f8:6e:c8:74:9c:28:71:c2:
         21:da:2f:af:47:09:97:3a:ed:3c:58:a2:9d:be:9b:1e:15:2a:
         0f:af:11:e7:47:bc:73:8e:2a:07:99:5b:84:73:dd:4e:f9:bf:
         9a:ec:92:0c:e9:55:7a:95:f6:cf:d9:b4:63:44:c9:3c:66:d1:
         79:fa:9d:77:17:2c:df:06:ab:c1:5b:54:5e:8d:be:c3:4f:e1:
         e8:23:2a:e3:bc:51:d7:b0:85:1f:d2:15:78:f4:56:90:df:88:
         32:78:e4:70:10:7e:5f:e5:4b:2c:73:7f:63:94:18:db:72:4a:
         bc:74:16:a3:29:20:a1:74:4e:ae:8a:68:35:58:04:0e:58:4f:
         08:3f:2d:46:ec:34:ad:b6:6d:61:0f:bc:63:7a:68:a7:4f:45:
         60:df:32:8b:f7:e7:10:c6:bf:3d:21:77:d6:07:41:93:51:54:
         f9:69:15:80:df:4e:a4:47:fb:d6:e8:6e:43:78:72:b1:eb:5f:
         15:44:ee:6c:f5:19:4e:76:67:bd:93:e6:2a:89:29:3f:12:4f:
         a2:0e:b3:b5:27:b7:da:ca:2d:35:2f:d1:97:34:aa:0f:13:af:
         2e:9f:53:b2:20:ca:54:d0:d4:42:d3:18:33:86:b5:e6:b2:74:
         7a:4a:cc:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----