Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/0/323830343a333463303a3a2f33322d3332203d3e20323635343737.roa
File:                     323830343a333463303a3a2f33322d3332203d3e20323635343737.roa (raw, json)
Hash identifier:          v5L6ruNKs4v1jLXWOicjaE2akmRE/bOsQasCsB2YngQ=
Subject key identifier:   2F:03:C8:BF:75:32:82:37:14:D9:0F:E6:FF:E5:3C:99:D3:7C:A5:55
Certificate issuer:       /CN=CC9E03E325DB50E5129BE1E9A5D2E0A19844EF84
Certificate serial:       7DA8C486282CAFEC7F50D947544EA30ECFE3F684
Authority key identifier: CC:9E:03:E3:25:DB:50:E5:12:9B:E1:E9:A5:D2:E0:A1:98:44:EF:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC9E03E325DB50E5129BE1E9A5D2E0A19844EF84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/0/323830343a333463303a3a2f33322d3332203d3e20323635343737.roa
Signing time:             Sat 30 Dec 2023 04:00:00 +0000
ROA not before:           Sat 30 Dec 2023 03:55:00 +0000
ROA not after:            Sat 28 Dec 2024 04:00:00 +0000
asID:                     265477
IP address blocks:        2804:34c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:a8:c4:86:28:2c:af:ec:7f:50:d9:47:54:4e:a3:0e:cf:e3:f6:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC9E03E325DB50E5129BE1E9A5D2E0A19844EF84
        Validity
            Not Before: Dec 30 03:55:00 2023 GMT
            Not After : Dec 28 04:00:00 2024 GMT
        Subject: CN=2F03C8BF7532823714D90FE6FFE53C99D37CA555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f9:d1:18:15:09:c4:be:41:e7:0d:0a:23:9c:
                    10:5a:d6:eb:02:1a:b8:19:72:8b:5e:b9:0b:60:f3:
                    56:da:1f:b9:96:bf:47:06:83:5d:3c:11:5e:86:42:
                    1b:7e:6f:d4:01:c6:df:ed:1e:0b:b3:2b:df:20:28:
                    98:04:9f:d6:d6:7d:d9:bf:b5:7c:37:1b:df:f3:2a:
                    a0:4b:42:9e:e2:39:f3:9b:f7:8f:4d:bf:43:95:0a:
                    e2:fa:0d:79:2a:ab:a0:f0:5b:b6:f3:46:49:23:6e:
                    e8:9c:a5:b2:39:e9:9a:ba:a2:5f:a7:b4:4a:2f:8f:
                    bb:a8:f8:10:5d:5f:fe:98:2a:5c:51:d3:6b:4b:21:
                    66:b1:65:9d:25:33:e4:1c:76:0c:9b:d6:f5:e2:f1:
                    04:dc:1a:49:2d:16:93:71:b7:40:ea:dc:58:00:4f:
                    74:8d:ea:61:0a:bf:18:f3:06:d4:0f:47:56:8a:a4:
                    ff:d5:53:cf:df:24:d9:1d:20:5a:cc:f9:e3:67:92:
                    1a:ce:24:0e:2f:58:1e:d7:ac:e2:1f:59:8e:27:2c:
                    c2:12:5f:06:fd:af:f3:2c:80:dd:89:bf:ac:63:0b:
                    18:99:25:22:8d:f2:f8:5a:14:f6:f8:52:a4:28:f3:
                    66:ab:f8:9d:cc:e1:0c:d6:ae:fb:65:91:df:6d:b4:
                    87:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:03:C8:BF:75:32:82:37:14:D9:0F:E6:FF:E5:3C:99:D3:7C:A5:55
            X509v3 Authority Key Identifier:
                keyid:CC:9E:03:E3:25:DB:50:E5:12:9B:E1:E9:A5:D2:E0:A1:98:44:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/0/CC9E03E325DB50E5129BE1E9A5D2E0A19844EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC9E03E325DB50E5129BE1E9A5D2E0A19844EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/0/323830343a333463303a3a2f33322d3332203d3e20323635343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:83:82:3c:40:19:7d:76:3f:6e:c9:11:e8:f2:97:3f:c4:5a:
         fc:98:62:0f:fa:3f:3e:c3:d1:23:b6:ba:79:bb:fe:c9:70:40:
         07:93:08:47:54:31:06:21:fc:6e:35:b7:8d:c3:7a:50:fc:34:
         18:41:9c:fb:d2:fa:23:67:3d:2b:39:c0:42:e3:4b:21:ad:7c:
         79:28:f3:e9:77:f3:89:b3:27:b0:fa:3a:57:7e:b3:79:98:ac:
         b2:e4:38:ea:d6:90:ad:70:8a:e9:c6:cf:f7:38:97:a8:a9:9f:
         1e:69:16:da:c5:4a:df:c0:c6:e9:38:f4:89:53:9e:41:36:8e:
         42:49:15:5c:b2:6d:a0:c5:4d:9d:61:a9:be:6b:47:59:2c:3f:
         be:8d:61:a7:3f:62:d7:15:c4:d5:5f:2e:5c:cd:60:73:80:05:
         85:17:ae:c9:b6:e4:03:ea:bc:b5:fe:fd:70:10:2a:fa:a9:0e:
         36:3e:b1:f5:8b:16:12:fa:54:77:ad:b1:bd:d9:7f:16:f4:b4:
         14:eb:c1:bd:03:7d:f0:91:17:38:35:f8:e5:ca:a8:88:31:2e:
         c0:73:ac:c9:a6:f8:dd:74:75:33:df:c1:af:7c:a5:92:5a:1f:
         44:e2:6c:25:a6:24:f4:cb:d2:32:fe:d5:76:25:bb:43:06:9d:
         4b:10:a3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----