Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/323830343a343761343a3130303a3a2f34302d3430203d3e20323637303637.roa
File:                     323830343a343761343a3130303a3a2f34302d3430203d3e20323637303637.roa (raw, json)
Hash identifier:          oMWQhvtN2Ht74DwScQKZ4/6v8dT/317EmMLjfL/5WpM=
Subject key identifier:   E6:2D:A1:14:60:CB:CB:FE:F9:7A:33:32:E3:3A:23:CE:20:F5:AF:5B
Certificate issuer:       /CN=AA645B4C304DB254B5BF6669A930A294780DC49B
Certificate serial:       0A98E7CE4C9B76389A5272F04D82A8BF50338438
Authority key identifier: AA:64:5B:4C:30:4D:B2:54:B5:BF:66:69:A9:30:A2:94:78:0D:C4:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA645B4C304DB254B5BF6669A930A294780DC49B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/323830343a343761343a3130303a3a2f34302d3430203d3e20323637303637.roa
Signing time:             Fri 23 Feb 2024 14:40:52 +0000
ROA not before:           Fri 23 Feb 2024 14:35:52 +0000
ROA not after:            Fri 21 Feb 2025 14:40:52 +0000
asID:                     267067
IP address blocks:        2804:47a4:100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:98:e7:ce:4c:9b:76:38:9a:52:72:f0:4d:82:a8:bf:50:33:84:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA645B4C304DB254B5BF6669A930A294780DC49B
        Validity
            Not Before: Feb 23 14:35:52 2024 GMT
            Not After : Feb 21 14:40:52 2025 GMT
        Subject: CN=E62DA11460CBCBFEF97A3332E33A23CE20F5AF5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fd:ad:b5:91:2d:5e:2d:d0:4b:e9:3c:e9:c8:
                    f9:90:30:9d:43:80:c3:e6:52:a2:0e:78:7a:a7:66:
                    db:a4:c1:48:8f:c1:cd:76:66:04:02:fe:12:b6:d2:
                    3f:94:e9:a5:04:8e:51:a8:fd:69:0a:b6:f9:c7:f4:
                    e1:76:58:ff:2d:1b:29:94:f9:cd:2c:a7:9d:f0:b9:
                    45:f9:f7:e3:2a:9e:75:a5:b4:7c:fa:f0:5c:4a:fa:
                    bd:b7:17:f1:52:af:8e:61:5f:07:72:85:92:0a:d1:
                    13:2b:e3:04:52:6d:3f:d4:d1:97:1d:5c:4c:bc:8a:
                    a1:42:bb:41:ed:53:69:88:7c:e5:24:78:4a:7d:e7:
                    af:be:9d:e0:2c:93:9d:8c:2a:01:0d:77:3b:f1:36:
                    13:ef:b4:7d:80:da:45:0f:1b:12:54:d3:15:89:0b:
                    66:56:39:1c:a5:c1:a1:12:2e:58:67:b0:1a:c4:e2:
                    8c:2c:ec:6b:6f:42:7c:4a:52:28:e0:a3:6c:e4:41:
                    f6:36:c8:d9:88:39:a0:96:b4:5f:60:4e:ba:b6:ea:
                    5a:a7:09:2f:44:c9:d2:fe:d1:12:36:14:a2:73:e5:
                    96:19:94:78:30:89:2a:35:d1:d2:3d:e9:df:3e:3f:
                    b7:19:d9:ce:7d:b8:ab:ff:09:b4:c6:b0:db:34:22:
                    48:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:2D:A1:14:60:CB:CB:FE:F9:7A:33:32:E3:3A:23:CE:20:F5:AF:5B
            X509v3 Authority Key Identifier:
                keyid:AA:64:5B:4C:30:4D:B2:54:B5:BF:66:69:A9:30:A2:94:78:0D:C4:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/AA645B4C304DB254B5BF6669A930A294780DC49B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA645B4C304DB254B5BF6669A930A294780DC49B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/323830343a343761343a3130303a3a2f34302d3430203d3e20323637303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47a4:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         51:66:e3:c1:7e:ea:f8:fe:15:85:dc:b9:2a:9f:38:f5:d5:1e:
         dc:e4:17:80:98:52:50:af:66:3f:36:c5:e2:71:1d:92:ba:a2:
         3c:ab:f0:42:26:2d:34:2f:4d:2c:01:07:3b:ff:87:b8:33:2d:
         81:7c:46:d1:cc:d7:ff:14:00:e6:56:df:a8:5a:68:0d:81:e9:
         33:41:1a:6d:86:50:b7:94:c3:b8:77:72:17:70:a4:83:a7:25:
         5b:41:1f:c8:db:28:71:8d:ce:40:51:26:0f:c1:f8:19:dd:53:
         80:55:a9:5c:74:d4:d2:f8:9a:0b:2a:56:90:27:da:1e:39:0b:
         87:5a:64:33:dc:6f:29:f1:bd:ff:e0:d2:07:72:1b:de:7d:0a:
         8d:ca:b6:2a:08:e2:8d:0e:39:28:df:26:29:46:fe:74:85:06:
         bb:e7:9d:d7:f7:7d:91:53:cd:b8:2f:b5:99:9e:76:1e:e6:1b:
         2d:3b:7a:0d:14:1a:31:bd:07:1f:0a:6d:ea:9c:82:d5:f9:0c:
         c8:b4:ed:71:50:6e:fc:c7:91:12:c2:74:12:02:29:16:7c:b6:
         46:c7:2b:0d:cb:7d:f8:8d:1b:06:e5:35:87:fd:67:1a:fc:d4:
         77:9c:d9:0d:b5:fa:46:fb:cc:d0:b4:fe:c0:bc:84:19:74:b1:
         c5:ca:25:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----