Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/1/323830343a323135633a343030303a3a2f33342d3334203d3e20323634353530.roa
File:                     323830343a323135633a343030303a3a2f33342d3334203d3e20323634353530.roa (raw, json)
Hash identifier:          PARLx3kNt/XfvOYeElLMhIiOztRrObphMxZrNJ3JejY=
Subject key identifier:   A2:AB:4F:9E:E3:3D:B2:0F:C2:BC:23:A3:3C:86:99:0E:CB:6D:F8:56
Certificate issuer:       /CN=0F1901D49ADD4F9BF8D8BA5724F6030DC139578E
Certificate serial:       437BE191DDA15F9D3673E802C687F68A5EC0161E
Authority key identifier: 0F:19:01:D4:9A:DD:4F:9B:F8:D8:BA:57:24:F6:03:0D:C1:39:57:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F1901D49ADD4F9BF8D8BA5724F6030DC139578E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/1/323830343a323135633a343030303a3a2f33342d3334203d3e20323634353530.roa
Signing time:             Wed 10 Apr 2024 00:20:44 +0000
ROA not before:           Wed 10 Apr 2024 00:15:44 +0000
ROA not after:            Wed 09 Apr 2025 00:20:44 +0000
asID:                     264550
IP address blocks:        2804:215c:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:7b:e1:91:dd:a1:5f:9d:36:73:e8:02:c6:87:f6:8a:5e:c0:16:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F1901D49ADD4F9BF8D8BA5724F6030DC139578E
        Validity
            Not Before: Apr 10 00:15:44 2024 GMT
            Not After : Apr  9 00:20:44 2025 GMT
        Subject: CN=A2AB4F9EE33DB20FC2BC23A33C86990ECB6DF856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2c:25:80:41:66:86:0b:9d:ee:d9:d7:23:7a:
                    92:c8:d6:0f:59:d1:d0:64:b0:75:6c:49:d1:7a:16:
                    7d:c4:d2:43:a3:fe:95:c3:e0:f9:7a:11:50:f2:31:
                    ab:b9:69:00:43:60:b7:c7:ca:5a:8b:6d:2d:bf:2a:
                    f6:92:eb:06:87:af:f6:88:c1:87:45:f5:3a:8c:26:
                    22:8c:ba:77:4c:e5:20:c4:97:57:2e:fc:22:c0:49:
                    a9:b9:b7:6a:9d:9f:e0:0c:95:1d:91:59:e2:ca:be:
                    8e:e3:df:58:47:4e:cf:3b:48:b3:4a:98:4e:2c:b4:
                    50:b0:14:a8:7d:c7:b5:cb:f7:16:83:2f:d3:e0:ee:
                    52:65:28:60:8c:8d:93:b7:ce:16:f0:31:38:3d:86:
                    09:98:15:fd:17:43:87:70:61:67:fb:78:ce:e8:24:
                    4f:21:80:d3:ef:ee:3b:5c:9d:bf:04:49:b8:2d:5e:
                    6a:46:93:a9:15:8e:31:60:b9:9e:7f:a6:73:99:ef:
                    f5:26:90:15:14:8a:0b:b9:37:11:4b:1c:78:5f:d7:
                    f6:25:eb:66:6e:9d:d8:1c:ad:e3:49:4b:48:e4:e0:
                    3a:54:c6:d2:b0:ea:ec:f5:bf:09:b1:9c:51:1e:2d:
                    b2:d7:4b:14:06:b5:d7:f3:73:b0:11:21:c0:d8:03:
                    f7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:AB:4F:9E:E3:3D:B2:0F:C2:BC:23:A3:3C:86:99:0E:CB:6D:F8:56
            X509v3 Authority Key Identifier:
                keyid:0F:19:01:D4:9A:DD:4F:9B:F8:D8:BA:57:24:F6:03:0D:C1:39:57:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/1/0F1901D49ADD4F9BF8D8BA5724F6030DC139578E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F1901D49ADD4F9BF8D8BA5724F6030DC139578E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/1/323830343a323135633a343030303a3a2f33342d3334203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:215c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         00:75:0a:1e:eb:d9:22:f3:bb:03:84:87:a8:46:cf:84:d5:04:
         81:ed:41:82:ce:83:1c:8c:07:3f:fb:b2:e3:ce:23:e9:ed:cb:
         45:04:b9:cf:59:03:95:27:37:9e:1f:dd:09:e8:40:92:3b:a3:
         ff:bc:02:97:a5:13:bb:4b:ca:26:3b:48:1e:08:87:f1:b3:f0:
         e9:42:f5:45:69:3e:82:95:35:11:2b:f9:82:b0:fe:8d:13:91:
         60:3c:28:13:2f:a8:0f:43:c1:1d:55:57:4f:f0:90:db:b6:9f:
         f7:c9:63:ba:73:47:eb:51:85:aa:15:80:bf:97:d8:f7:44:e9:
         b4:f5:c8:c5:b6:f9:0a:aa:0b:62:64:3a:a1:e7:5c:a3:76:03:
         e8:b2:5c:cc:fa:7f:f6:7b:ef:6c:3a:d1:67:f3:dd:31:e6:c4:
         bf:df:88:d5:ae:5d:7e:57:82:17:af:a6:96:74:5b:7d:53:93:
         6d:48:85:5a:87:ed:0e:31:29:4b:8f:c1:9b:bc:55:53:02:17:
         f6:9d:09:dc:2a:9f:60:7b:8e:c3:2b:85:f5:a5:96:ed:50:d7:
         95:b7:b2:55:42:99:10:4e:5e:bb:f2:df:ab:8b:bc:5d:11:f4:
         c5:a8:d8:e4:07:e7:38:7a:e6:e6:de:47:ba:c7:56:18:53:d9:
         95:33:57:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----