Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/323830343a336561343a3a2f33332d3333203d3e20323636363131.roa
File:                     323830343a336561343a3a2f33332d3333203d3e20323636363131.roa (raw, json)
Hash identifier:          juFq6x9gHsaZmjCjocOVVTrfKfGdFGuFSVKD5pzpcnM=
Subject key identifier:   C5:61:58:FE:77:BB:1C:2B:2B:45:32:BC:6F:68:D0:1B:09:0A:5D:1E
Certificate issuer:       /CN=128E3DF9D967032A562E804D2E781DB1DC454A79
Certificate serial:       2E5B28E1DF925DEF090B4304A1365B39303252C0
Authority key identifier: 12:8E:3D:F9:D9:67:03:2A:56:2E:80:4D:2E:78:1D:B1:DC:45:4A:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/128E3DF9D967032A562E804D2E781DB1DC454A79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/323830343a336561343a3a2f33332d3333203d3e20323636363131.roa
Signing time:             Thu 25 Jan 2024 00:59:11 +0000
ROA not before:           Thu 25 Jan 2024 00:54:11 +0000
ROA not after:            Thu 23 Jan 2025 00:59:11 +0000
asID:                     266611
IP address blocks:        2804:3ea4::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:5b:28:e1:df:92:5d:ef:09:0b:43:04:a1:36:5b:39:30:32:52:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128E3DF9D967032A562E804D2E781DB1DC454A79
        Validity
            Not Before: Jan 25 00:54:11 2024 GMT
            Not After : Jan 23 00:59:11 2025 GMT
        Subject: CN=C56158FE77BB1C2B2B4532BC6F68D01B090A5D1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:47:87:3e:9f:c9:95:c9:87:b7:5f:53:9c:f9:
                    f9:5f:2c:9f:7e:a9:c4:70:31:58:45:01:37:73:3e:
                    ee:69:6b:d4:c0:27:1a:23:59:fb:71:42:8b:76:95:
                    5e:a2:eb:04:d4:24:f7:4a:88:f9:67:55:e7:56:e7:
                    d2:b5:73:b2:38:55:76:7f:6b:2d:b6:aa:71:18:b8:
                    04:b4:6c:79:87:45:04:49:09:98:43:07:ab:f0:f6:
                    ac:f5:95:e9:e8:10:bf:fd:7f:6a:fc:18:f4:59:c1:
                    d2:da:1f:36:c2:df:5f:c2:cc:82:95:c7:a1:84:fc:
                    50:e7:c7:13:7d:07:9b:a9:60:bb:98:52:75:5e:13:
                    f9:c9:de:f8:9c:e1:1d:f4:82:53:dc:f2:e6:8d:21:
                    e9:b0:c3:93:1b:da:5c:03:af:94:4f:91:37:bd:1f:
                    2b:88:08:4f:ec:73:bd:fc:a9:b8:2a:e2:ea:b7:48:
                    37:78:cb:44:e0:8d:c0:74:a3:37:c3:04:94:c3:73:
                    b7:9e:3a:b1:aa:e3:be:7d:60:70:ae:5a:a6:ce:dd:
                    e4:e0:04:2e:a9:9b:17:81:ce:bb:ac:14:70:60:92:
                    60:85:bc:14:7c:3c:26:e5:2b:fe:7c:3e:40:6d:5f:
                    1e:c2:ba:81:b9:20:5d:c2:5c:4c:51:c2:ca:0a:3e:
                    9a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:61:58:FE:77:BB:1C:2B:2B:45:32:BC:6F:68:D0:1B:09:0A:5D:1E
            X509v3 Authority Key Identifier:
                keyid:12:8E:3D:F9:D9:67:03:2A:56:2E:80:4D:2E:78:1D:B1:DC:45:4A:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/128E3DF9D967032A562E804D2E781DB1DC454A79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/128E3DF9D967032A562E804D2E781DB1DC454A79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/323830343a336561343a3a2f33332d3333203d3e20323636363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ea4::/33

    Signature Algorithm: sha256WithRSAEncryption
         04:2b:cf:7a:bf:cb:f0:7a:dc:bf:58:f6:12:18:21:3e:be:1f:
         36:18:64:f7:e1:f6:0a:18:d0:2f:85:44:2e:ad:3e:68:b4:1d:
         5c:18:6e:54:f1:cf:25:84:a6:1a:51:7b:f6:96:e5:0c:2c:1a:
         94:7c:fc:7c:af:5d:1c:d5:8b:87:69:20:88:ee:ac:d2:42:01:
         ce:5c:12:fc:92:79:ab:2e:ba:30:51:8c:63:be:be:b6:90:3c:
         2c:2d:8a:a3:88:89:c2:e6:6b:93:4d:ec:d3:3d:a3:cc:97:12:
         94:32:03:9c:47:cd:df:c2:55:9e:bb:20:5d:47:7a:0e:ca:87:
         f7:98:82:a8:6e:79:04:7f:c1:68:4c:bb:19:b1:e4:32:29:7a:
         cc:6f:cf:ff:72:8d:85:9e:8f:24:08:03:b5:67:d1:e9:2a:2a:
         6a:1a:b5:28:38:e9:21:b9:e6:64:9b:cb:b9:d0:e4:7b:ac:70:
         1a:02:e1:ec:69:15:41:de:bb:ee:f6:da:d4:ef:aa:b6:b3:7d:
         2e:f4:25:df:d3:f9:44:cd:c8:c8:0f:1f:b4:d0:99:f4:a0:43:
         ad:56:74:bf:62:3f:06:92:5f:06:d4:f8:30:fc:2e:4e:9e:23:
         9f:77:86:4d:a2:4c:da:08:67:6a:3a:fc:b0:c4:b2:ba:68:9d:
         7e:61:40:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----