Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/323830343a323863383a383030303a3a2f33342d3438203d3e20323633393830.roa
File:                     323830343a323863383a383030303a3a2f33342d3438203d3e20323633393830.roa (raw, json)
Hash identifier:          lMdu8esmMy03ePji1807amohUXq6g3bwZnj2PHG7Brg=
Subject key identifier:   6D:08:58:00:B4:38:29:EE:A8:8B:B7:50:51:D8:93:BF:25:13:A0:16
Certificate issuer:       /CN=0EF336B7D8DD0FB847868A54C9C242AF4D8D6039
Certificate serial:       74B9302E4B3A8301BE54128632C5E7588F4035CD
Authority key identifier: 0E:F3:36:B7:D8:DD:0F:B8:47:86:8A:54:C9:C2:42:AF:4D:8D:60:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0EF336B7D8DD0FB847868A54C9C242AF4D8D6039.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/323830343a323863383a383030303a3a2f33342d3438203d3e20323633393830.roa
Signing time:             Thu 15 Feb 2024 18:38:53 +0000
ROA not before:           Thu 15 Feb 2024 18:33:53 +0000
ROA not after:            Thu 13 Feb 2025 18:38:53 +0000
asID:                     263980
IP address blocks:        2804:28c8:8000::/34 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:b9:30:2e:4b:3a:83:01:be:54:12:86:32:c5:e7:58:8f:40:35:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EF336B7D8DD0FB847868A54C9C242AF4D8D6039
        Validity
            Not Before: Feb 15 18:33:53 2024 GMT
            Not After : Feb 13 18:38:53 2025 GMT
        Subject: CN=3082010A0282010100B15B04B84A3551ABD71057DB138125E4FDF4EFE9854837BE4F4F55DBCA20458B4D094604B6F088CB128876F965446A0C433E37011A47604C4B28CB3685C4C17B591BAD94774A1E1F233D9A2064D44008623D8514A4D340CDF36D8C7BBC40DD9BE73C3540FD44FD70A62A2ADC9AD01B4B39C9AB378DC55E8F584BB7AD4E2631331FC294C163B89615A6D0C4F2A5E087341CC465E6176A748786963A15155E06B9B8B87076785E6223BC28306EB4E904F23F049AB4CA24BBAA9E23ECFD5A0433A151C73321D90FFBCFADFC550C9669C4E62C4E91398ACB2EF1165A2C03F587F27FDB7A767CD23A3E35EB239B68917E351169897F8DB3301B17A048556840B2A1FB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5b:04:b8:4a:35:51:ab:d7:10:57:db:13:81:
                    25:e4:fd:f4:ef:e9:85:48:37:be:4f:4f:55:db:ca:
                    20:45:8b:4d:09:46:04:b6:f0:88:cb:12:88:76:f9:
                    65:44:6a:0c:43:3e:37:01:1a:47:60:4c:4b:28:cb:
                    36:85:c4:c1:7b:59:1b:ad:94:77:4a:1e:1f:23:3d:
                    9a:20:64:d4:40:08:62:3d:85:14:a4:d3:40:cd:f3:
                    6d:8c:7b:bc:40:dd:9b:e7:3c:35:40:fd:44:fd:70:
                    a6:2a:2a:dc:9a:d0:1b:4b:39:c9:ab:37:8d:c5:5e:
                    8f:58:4b:b7:ad:4e:26:31:33:1f:c2:94:c1:63:b8:
                    96:15:a6:d0:c4:f2:a5:e0:87:34:1c:c4:65:e6:17:
                    6a:74:87:86:96:3a:15:15:5e:06:b9:b8:b8:70:76:
                    78:5e:62:23:bc:28:30:6e:b4:e9:04:f2:3f:04:9a:
                    b4:ca:24:bb:aa:9e:23:ec:fd:5a:04:33:a1:51:c7:
                    33:21:d9:0f:fb:cf:ad:fc:55:0c:96:69:c4:e6:2c:
                    4e:91:39:8a:cb:2e:f1:16:5a:2c:03:f5:87:f2:7f:
                    db:7a:76:7c:d2:3a:3e:35:eb:23:9b:68:91:7e:35:
                    11:69:89:7f:8d:b3:30:1b:17:a0:48:55:68:40:b2:
                    a1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:08:58:00:B4:38:29:EE:A8:8B:B7:50:51:D8:93:BF:25:13:A0:16
            X509v3 Authority Key Identifier:
                keyid:0E:F3:36:B7:D8:DD:0F:B8:47:86:8A:54:C9:C2:42:AF:4D:8D:60:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/0EF336B7D8DD0FB847868A54C9C242AF4D8D6039.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0EF336B7D8DD0FB847868A54C9C242AF4D8D6039.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/323830343a323863383a383030303a3a2f33342d3438203d3e20323633393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28c8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7e:4f:bf:e4:1e:d9:f3:48:13:b2:23:80:46:a4:e5:48:c9:d0:
         af:03:1d:74:6f:9b:2f:9e:7f:64:7c:a0:ba:47:58:5f:2c:92:
         33:95:16:70:47:3f:8f:f8:ed:b0:f2:17:8d:36:13:3c:b9:68:
         6d:22:e6:a8:a1:9d:03:bb:de:f3:4a:14:45:05:1c:8f:ba:ef:
         0e:30:ad:f8:42:70:d6:ef:35:e7:14:08:75:87:dd:11:33:54:
         95:bd:5f:fd:da:92:f6:4f:6f:da:ff:28:72:d8:bc:61:09:de:
         f4:95:f0:57:89:8f:1b:a0:bc:59:4f:c9:e6:e6:5e:4f:d3:69:
         0f:7f:c4:b0:6e:2c:32:f7:b0:20:16:5c:20:c6:ae:03:68:31:
         28:81:58:3f:1d:fa:3c:f3:e5:1e:83:ce:eb:13:ed:fc:65:a8:
         ce:53:c8:ef:b0:fb:3c:8c:02:fd:52:41:ba:68:36:8a:68:b7:
         c9:83:78:b1:0a:fa:5c:98:ab:73:ee:4b:46:9a:4d:30:c5:c2:
         8a:a4:d9:45:83:96:9c:be:c1:1b:0b:ab:cf:35:de:77:b3:c7:
         75:78:b9:e0:10:27:74:55:80:b5:10:66:0b:74:8c:bb:12:08:
         37:36:f5:ea:38:43:b2:98:a8:a6:9d:4b:78:33:79:bd:39:53:
         5d:f0:8d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----