Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/323830343a356131303a3a2f33342d3334203d3e20323638373436.roa
File:                     323830343a356131303a3a2f33342d3334203d3e20323638373436.roa (raw, json)
Hash identifier:          nZ3vJRgOjHA4ObQaUgDb5TMXE0dmwFXPII1UcFMDnCw=
Subject key identifier:   31:6E:52:5B:91:D6:8D:0B:C8:FA:29:D0:D9:B6:F8:1E:01:70:19:AF
Certificate issuer:       /CN=CF829EB0B35DA29B497042D7E790F0EEC35512E4
Certificate serial:       19746A778B404C023B1E98F919E5CAC001981791
Authority key identifier: CF:82:9E:B0:B3:5D:A2:9B:49:70:42:D7:E7:90:F0:EE:C3:55:12:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF829EB0B35DA29B497042D7E790F0EEC35512E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/323830343a356131303a3a2f33342d3334203d3e20323638373436.roa
Signing time:             Mon 18 Dec 2023 19:37:14 +0000
ROA not before:           Mon 18 Dec 2023 19:32:14 +0000
ROA not after:            Mon 16 Dec 2024 19:37:14 +0000
asID:                     268746
IP address blocks:        2804:5a10::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:74:6a:77:8b:40:4c:02:3b:1e:98:f9:19:e5:ca:c0:01:98:17:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF829EB0B35DA29B497042D7E790F0EEC35512E4
        Validity
            Not Before: Dec 18 19:32:14 2023 GMT
            Not After : Dec 16 19:37:14 2024 GMT
        Subject: CN=316E525B91D68D0BC8FA29D0D9B6F81E017019AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f2:40:5e:96:f5:d0:3b:16:9b:3f:6e:39:f8:
                    2f:24:bf:61:97:7f:9e:68:03:50:92:f6:60:3f:5e:
                    9b:7e:98:32:e5:dc:32:22:1d:18:8a:e7:90:22:a1:
                    40:d2:86:39:7b:69:47:ad:e7:83:73:b0:b3:94:e5:
                    76:ae:64:c2:c8:c4:52:df:fa:d1:84:c0:87:37:da:
                    49:d0:66:34:4f:a7:a0:d8:ab:e2:67:a4:08:f8:55:
                    64:02:72:26:4f:e6:1f:60:98:49:74:79:1a:39:fc:
                    f8:11:43:dc:bf:cc:21:cb:98:9a:0a:90:5f:c6:7d:
                    58:49:cd:b3:e2:04:c4:4c:40:d3:37:24:02:99:0b:
                    68:de:9b:23:af:0e:e8:f9:ba:19:75:0a:0a:ad:3a:
                    f7:53:f8:ca:79:04:49:35:0a:48:9e:70:81:0e:65:
                    e7:57:27:29:55:33:8c:3b:27:4f:83:00:68:73:97:
                    06:05:e5:b8:d4:90:a2:ee:52:68:53:53:a8:ef:2c:
                    1d:82:8a:d5:f1:94:93:b3:1d:02:48:52:cd:96:ed:
                    f0:b5:ac:f7:1a:82:4f:47:3c:ac:d5:93:40:74:5a:
                    86:84:47:f4:12:3e:e9:85:e1:e6:e3:82:84:de:d3:
                    46:e6:d8:c3:66:b8:1d:b1:ed:99:4f:00:df:9e:ae:
                    30:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:6E:52:5B:91:D6:8D:0B:C8:FA:29:D0:D9:B6:F8:1E:01:70:19:AF
            X509v3 Authority Key Identifier:
                keyid:CF:82:9E:B0:B3:5D:A2:9B:49:70:42:D7:E7:90:F0:EE:C3:55:12:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/CF829EB0B35DA29B497042D7E790F0EEC35512E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF829EB0B35DA29B497042D7E790F0EEC35512E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/323830343a356131303a3a2f33342d3334203d3e20323638373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5a10::/34

    Signature Algorithm: sha256WithRSAEncryption
         60:f8:fa:fd:17:cf:cf:dc:2b:4c:fe:84:39:50:4e:6e:46:6e:
         87:6e:e7:b7:44:4e:7c:05:a4:a9:35:1f:26:a8:8a:d1:dd:d5:
         c9:1b:05:9e:a9:f6:bb:a4:f0:f7:0f:c7:05:66:de:2a:46:41:
         b2:50:9b:78:29:cb:0d:53:42:57:a5:0f:a2:c0:08:09:fc:ae:
         eb:c5:59:91:0a:a7:0e:1c:12:9f:2a:19:1c:3d:0c:0d:14:db:
         23:fb:38:29:ba:07:6c:34:4f:7c:45:19:95:1d:53:ee:85:60:
         c7:6b:04:9c:8e:21:46:97:ca:f2:96:79:b2:41:7b:ef:c0:85:
         e5:88:16:3b:27:02:d0:b8:38:69:53:c0:71:c6:09:36:d6:43:
         b3:a7:6a:73:68:7a:da:65:88:72:df:6f:fb:11:c4:a1:d7:98:
         9d:77:e8:a9:f8:73:92:e0:d1:26:98:df:5c:c5:41:05:84:d5:
         f1:c4:56:4f:fa:64:a3:bc:5a:e2:3f:f2:81:68:56:10:4b:c3:
         97:57:6c:cf:f0:69:54:02:ac:77:76:b9:ce:ab:0a:8a:da:46:
         b0:af:0f:2c:4f:17:d4:82:0e:56:64:9f:6a:f7:fc:04:72:c1:
         45:22:65:6d:ce:5e:bf:13:22:e6:98:0b:d3:aa:f3:b0:71:bb:
         59:fc:ae:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----