Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/323830343a313432343a383030303a3a2f33332d3333203d3e203532393430.roa
File:                     323830343a313432343a383030303a3a2f33332d3333203d3e203532393430.roa (raw, json)
Hash identifier:          QO2hgzLEszaMWzaz0zifXGh6P5SKppXXiFRYWAuww2s=
Subject key identifier:   95:BC:32:BE:24:40:0A:6B:FE:68:08:6C:D0:05:02:1B:B5:E2:7A:63
Certificate issuer:       /CN=BCD88303CE2E897D34FC20773375908050FB299E
Certificate serial:       34ECE12153EF157A7091C336A0D4D4C4F09194F7
Authority key identifier: BC:D8:83:03:CE:2E:89:7D:34:FC:20:77:33:75:90:80:50:FB:29:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCD88303CE2E897D34FC20773375908050FB299E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/323830343a313432343a383030303a3a2f33332d3333203d3e203532393430.roa
Signing time:             Tue 22 Aug 2023 18:26:40 +0000
ROA not before:           Tue 22 Aug 2023 18:21:40 +0000
ROA not after:            Tue 20 Aug 2024 18:26:40 +0000
asID:                     52940
IP address blocks:        2804:1424:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:ec:e1:21:53:ef:15:7a:70:91:c3:36:a0:d4:d4:c4:f0:91:94:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCD88303CE2E897D34FC20773375908050FB299E
        Validity
            Not Before: Aug 22 18:21:40 2023 GMT
            Not After : Aug 20 18:26:40 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f1:f5:f0:e2:b7:1b:a1:5c:0a:47:f2:8c:ab:
                    35:18:da:f2:67:5f:7a:f0:41:dc:05:65:59:9a:dc:
                    17:08:d9:49:b7:cc:a1:90:bb:aa:7e:33:2b:a6:30:
                    32:da:89:0d:0d:94:2e:3f:f0:13:e6:b4:24:54:7f:
                    e5:2d:cf:13:43:1e:c9:e1:2e:87:2d:6d:6c:66:c6:
                    7e:9d:00:93:6a:0b:5e:b2:95:49:fb:e3:44:28:b0:
                    17:b3:66:8e:0d:79:31:8a:7c:68:44:ad:1a:6e:75:
                    bc:4f:03:31:0f:3d:b1:74:dd:b4:97:92:ae:08:a7:
                    f6:7e:8a:0a:e8:33:90:8b:c7:d2:43:6e:74:6f:bd:
                    0b:1b:ec:af:94:96:2b:68:97:23:e5:6a:55:fa:44:
                    b1:49:13:c1:ff:7b:77:96:cb:20:70:e3:a7:8b:c1:
                    88:ed:8f:be:d7:a2:b3:3d:87:0f:1f:93:8a:15:10:
                    67:b4:d1:49:dd:81:bf:60:b7:90:49:7a:67:31:34:
                    15:99:b0:7b:a0:2a:96:f2:56:70:5d:46:5b:5d:86:
                    1c:0a:a0:cd:c3:87:3f:43:ef:8f:6c:d0:91:dd:58:
                    ad:94:bd:7d:af:25:19:7b:cb:cd:a8:fc:bd:74:26:
                    ad:92:47:83:fc:21:45:8e:70:1f:ba:c1:42:bb:08:
                    94:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:BC:32:BE:24:40:0A:6B:FE:68:08:6C:D0:05:02:1B:B5:E2:7A:63
            X509v3 Authority Key Identifier:
                keyid:BC:D8:83:03:CE:2E:89:7D:34:FC:20:77:33:75:90:80:50:FB:29:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/BCD88303CE2E897D34FC20773375908050FB299E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCD88303CE2E897D34FC20773375908050FB299E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/323830343a313432343a383030303a3a2f33332d3333203d3e203532393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1424:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         53:9f:75:c4:b8:99:91:c5:7a:d8:5a:19:ad:5a:4e:04:77:07:
         4d:e6:86:fe:49:78:ec:b7:16:88:44:af:a4:2c:1b:28:56:86:
         d1:2b:74:e3:6a:14:ec:7b:8b:06:c3:27:9f:cf:f1:eb:e0:fe:
         ec:10:15:5a:1a:32:62:d9:e9:2a:d0:96:cd:30:fd:a6:fe:d2:
         f6:d8:66:f0:3b:e3:5a:d0:ef:52:91:1e:1b:da:38:6d:08:cc:
         70:1e:e7:d7:95:60:8a:11:b4:fe:99:f1:fe:15:01:84:3b:eb:
         45:8e:38:92:a4:79:d8:c8:06:7b:ec:cb:98:21:7d:4f:58:a1:
         44:4d:0e:5c:c2:e8:26:4b:13:01:4a:23:f3:64:65:9e:73:c2:
         ab:2f:76:93:78:12:46:de:95:fa:10:2b:c0:61:07:96:7c:e5:
         e7:4d:a6:b0:00:e2:51:1d:29:71:d4:24:97:31:a4:d3:de:ef:
         64:3b:6d:f5:47:a4:9a:4c:4b:0e:e2:28:fe:5f:c5:2b:dd:7b:
         96:26:0a:1a:45:0d:b4:17:f0:50:50:14:ce:2a:f5:21:88:70:
         55:7f:bf:55:2c:48:97:f8:0f:17:31:7f:da:4c:d6:3e:b2:04:
         5d:73:bb:67:66:a4:33:01:20:f2:4c:92:1e:4c:37:92:84:51:
         f7:3c:0e:98
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----