Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/1/323830343a6533383a3a2f33322d3332203d3e20323632393432.roa
File:                     323830343a6533383a3a2f33322d3332203d3e20323632393432.roa (raw, json)
Hash identifier:          9fp/omsSUkuq3nRKJNQCovjlPAW1+eKTdGaHVRxK2C0=
Subject key identifier:   2F:F3:1A:EF:A9:52:F9:6A:7C:A2:14:E7:69:AE:74:37:59:1C:BC:E0
Certificate issuer:       /CN=C7D2D4B830F24D1323D706EAEFB759AC47A5304F
Certificate serial:       767432475E5DF3B752B27A1BC5ED4EC0B996993A
Authority key identifier: C7:D2:D4:B8:30:F2:4D:13:23:D7:06:EA:EF:B7:59:AC:47:A5:30:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7D2D4B830F24D1323D706EAEFB759AC47A5304F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/1/323830343a6533383a3a2f33322d3332203d3e20323632393432.roa
Signing time:             Wed 03 Apr 2024 18:31:36 +0000
ROA not before:           Wed 03 Apr 2024 18:26:36 +0000
ROA not after:            Wed 02 Apr 2025 18:31:36 +0000
asID:                     262942
IP address blocks:        2804:e38::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:74:32:47:5e:5d:f3:b7:52:b2:7a:1b:c5:ed:4e:c0:b9:96:99:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7D2D4B830F24D1323D706EAEFB759AC47A5304F
        Validity
            Not Before: Apr  3 18:26:36 2024 GMT
            Not After : Apr  2 18:31:36 2025 GMT
        Subject: CN=2FF31AEFA952F96A7CA214E769AE7437591CBCE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9a:18:f4:c1:60:6d:2b:04:f4:f3:03:ca:30:
                    ef:42:ca:c7:ed:0f:33:d7:cd:19:2a:f9:85:a5:87:
                    b8:56:ea:64:3b:b3:ba:6e:0a:94:c9:a5:08:98:47:
                    34:d9:8d:a4:50:36:6f:4c:47:07:32:44:88:a1:cc:
                    0f:30:b6:68:3c:41:63:f8:2f:bd:e7:6c:52:5d:df:
                    7d:f6:cd:f2:fb:98:45:24:87:5d:83:aa:dd:fe:97:
                    0e:1a:a6:85:43:77:06:c8:e4:13:27:3f:be:96:94:
                    8e:e9:07:58:a1:09:08:dc:2a:bf:c0:75:bb:30:0a:
                    d6:7f:59:b2:64:75:b1:0d:05:e3:d6:3c:2b:c6:ee:
                    14:57:d6:94:a5:a6:9b:e7:d5:90:2e:c5:ef:78:af:
                    0a:90:eb:63:87:e3:8a:de:cf:28:58:92:f9:1a:2b:
                    7d:a8:e1:ec:7e:af:fa:fc:dd:1d:9a:41:29:37:11:
                    c7:9b:b4:76:ba:e4:2a:b6:ff:42:cc:45:2c:17:be:
                    ce:26:54:f2:b5:6a:73:26:e1:2c:b9:14:16:3e:21:
                    6b:23:46:c6:e4:66:6f:47:34:20:50:be:7d:b2:77:
                    a4:c3:8a:85:24:b7:a1:b7:6e:94:2f:52:19:d0:18:
                    c8:b4:02:0c:f2:f0:f4:4f:d5:26:51:dd:b9:82:6f:
                    15:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F3:1A:EF:A9:52:F9:6A:7C:A2:14:E7:69:AE:74:37:59:1C:BC:E0
            X509v3 Authority Key Identifier:
                keyid:C7:D2:D4:B8:30:F2:4D:13:23:D7:06:EA:EF:B7:59:AC:47:A5:30:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/1/C7D2D4B830F24D1323D706EAEFB759AC47A5304F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7D2D4B830F24D1323D706EAEFB759AC47A5304F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/1/323830343a6533383a3a2f33322d3332203d3e20323632393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e38::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:1b:6f:18:e9:02:2b:38:d8:d2:c6:b0:48:ea:3a:83:a5:e5:
         1b:36:20:30:81:14:5a:3b:58:aa:0f:57:e2:10:53:45:7b:6d:
         f4:cc:af:61:f4:08:65:f4:8c:99:27:05:34:5e:83:a0:5e:16:
         11:a4:97:0a:c7:5e:68:d5:a1:1b:79:b3:4f:4e:56:73:90:c3:
         a1:eb:d5:5a:d9:97:a3:7a:20:cd:22:5b:99:be:2e:f7:b0:af:
         52:bb:35:d2:b0:3c:75:43:e2:be:2a:69:04:31:b4:29:3b:d7:
         37:7f:a4:8a:51:f1:24:b3:6f:03:6a:6b:7d:f8:86:77:d4:7f:
         b9:93:b1:d9:fd:64:cb:46:6f:a8:f9:54:e3:21:d7:12:f0:5b:
         18:33:fd:c5:35:d7:24:f0:ad:4c:50:e5:b6:dc:30:cf:0a:de:
         f3:e3:31:e5:db:c6:5b:ca:05:ac:08:78:89:f5:4c:75:c3:f9:
         0a:87:fd:d7:7a:f9:ea:97:c4:c4:11:c7:1d:c3:7e:57:b0:02:
         39:a9:a9:a7:f3:ce:c9:3b:f3:1d:9e:0a:a5:a2:5b:2d:17:8d:
         9c:1a:74:9a:3a:11:6e:38:34:23:d0:ff:4e:14:4a:3e:46:dd:
         9d:27:ec:59:f2:5b:6e:2a:d1:15:9d:3a:5d:0c:16:09:6f:42:
         e7:3a:4d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----