Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/323830343a386466343a3a2f33322d3438203d3e20323733333932.roa
File:                     323830343a386466343a3a2f33322d3438203d3e20323733333932.roa (raw, json)
Hash identifier:          Nxjw0X37zdHEQQS5VveuN44AeaEmQ06Tw/Zcn01HGRM=
Subject key identifier:   1D:E5:E3:3A:64:68:BF:D4:4A:6C:0F:6C:4C:19:98:FD:63:D2:4D:CB
Certificate issuer:       /CN=520B73CFD2D4A90F7BFCBB9994BCEEC50715860B
Certificate serial:       5BB96AA487B563DA9CBC215F6C3BB315E196EB08
Authority key identifier: 52:0B:73:CF:D2:D4:A9:0F:7B:FC:BB:99:94:BC:EE:C5:07:15:86:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/520B73CFD2D4A90F7BFCBB9994BCEEC50715860B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/323830343a386466343a3a2f33322d3438203d3e20323733333932.roa
Signing time:             Thu 04 Jan 2024 22:48:40 +0000
ROA not before:           Thu 04 Jan 2024 22:43:40 +0000
ROA not after:            Thu 02 Jan 2025 22:48:40 +0000
asID:                     273392
IP address blocks:        2804:8df4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:b9:6a:a4:87:b5:63:da:9c:bc:21:5f:6c:3b:b3:15:e1:96:eb:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=520B73CFD2D4A90F7BFCBB9994BCEEC50715860B
        Validity
            Not Before: Jan  4 22:43:40 2024 GMT
            Not After : Jan  2 22:48:40 2025 GMT
        Subject: CN=1DE5E33A6468BFD44A6C0F6C4C1998FD63D24DCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9d:4d:46:43:fa:07:19:f8:35:9f:be:9d:36:
                    00:25:11:90:e2:66:73:7a:48:e7:ab:89:7a:46:95:
                    bd:33:cf:50:fe:9f:22:ec:50:46:f3:49:16:27:5c:
                    4c:e5:ca:9f:71:51:0c:88:00:d2:55:43:85:2c:c6:
                    78:66:2b:58:07:ba:eb:65:ab:57:a9:0b:c5:db:e7:
                    89:84:9b:67:18:18:88:77:15:5c:05:87:31:e3:9f:
                    c4:d3:cc:d5:7e:ff:de:c9:3e:15:a5:dd:cb:6c:63:
                    3f:e8:a2:59:1c:09:83:51:7a:fa:3c:59:65:06:e4:
                    45:3a:ae:2f:d6:c9:c0:58:e8:16:71:f4:c1:bf:c4:
                    c6:3c:5d:16:89:45:a7:7a:1d:24:3c:e6:e1:c3:29:
                    c2:0c:f5:7d:e6:ab:67:8a:f3:8e:f0:c8:53:96:4a:
                    ce:60:78:73:fa:6d:cc:52:ce:b0:96:e2:aa:3f:40:
                    24:f7:a5:69:8b:97:ed:0d:cd:71:ba:fb:02:d9:bf:
                    61:3c:84:ac:b4:91:7d:e5:5d:0f:2f:df:2f:0d:ab:
                    29:5f:5e:6d:48:fb:47:f4:2b:eb:c0:10:8b:0b:60:
                    30:84:76:07:77:e2:be:22:a5:a2:f9:4c:46:ed:6f:
                    dc:0b:54:f6:69:df:af:b1:63:01:46:e8:78:60:15:
                    b2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E5:E3:3A:64:68:BF:D4:4A:6C:0F:6C:4C:19:98:FD:63:D2:4D:CB
            X509v3 Authority Key Identifier:
                keyid:52:0B:73:CF:D2:D4:A9:0F:7B:FC:BB:99:94:BC:EE:C5:07:15:86:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/520B73CFD2D4A90F7BFCBB9994BCEEC50715860B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/520B73CFD2D4A90F7BFCBB9994BCEEC50715860B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/323830343a386466343a3a2f33322d3438203d3e20323733333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8df4::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:34:a3:da:99:a9:d5:12:7c:c4:33:17:85:2a:04:d9:a6:a9:
         8b:8b:be:88:f6:a9:5c:14:ab:49:31:19:e7:87:87:7c:c5:df:
         28:70:03:9a:c2:33:e2:62:2b:c3:77:fd:0c:a8:62:6b:d8:52:
         57:72:65:1f:8b:8a:4c:9a:66:d6:e3:01:2d:9d:33:69:03:e2:
         42:ee:56:e3:73:45:57:bc:8f:f6:07:0d:2f:ab:cf:58:27:b7:
         79:f6:ef:49:1f:52:fc:1a:94:ba:6b:a1:fd:89:fc:13:b6:f4:
         4f:e8:d1:49:f8:88:b2:31:25:64:0e:06:3f:ec:fc:57:63:77:
         2c:a1:0d:d6:03:96:56:cb:07:30:c8:ab:ab:00:a1:b2:ff:ce:
         4f:bd:87:b0:4f:f1:bc:13:99:86:cf:d5:1a:14:92:e1:95:b9:
         70:39:ae:6c:1c:5f:36:a1:a3:b6:a0:51:7c:b7:7d:29:ff:c1:
         1c:c4:f8:40:f9:4d:7c:1a:e2:18:82:75:22:26:e8:fa:72:82:
         15:d5:a9:32:7c:66:38:1e:45:6e:72:9f:ba:1f:1a:f6:7e:f9:
         61:f5:ab:96:3a:14:55:58:fe:eb:39:e5:0a:7d:e4:4a:0e:34:
         73:7b:44:d1:6b:ee:e6:79:97:f1:43:75:a1:63:a3:e7:f7:f1:
         f9:50:de:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----