Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2jmfJfq5kmtXTePEeRdgEjH44LnTcpTAfJJGcCi6Rgok/0/323830343a363635383a3a2f33322d3438203d3e20323639353532.roa
File:                     323830343a363635383a3a2f33322d3438203d3e20323639353532.roa (raw, json)
Hash identifier:          WDGIM8gVKPlso/mRB1EX2yefg34rNamK7OJ7ERMIQi4=
Subject key identifier:   55:8B:60:E0:84:D4:00:8B:E9:4B:40:C5:0D:FA:73:D0:04:50:17:5B
Certificate issuer:       /CN=1055E79AD1F40A10965EED0FD076261BF1A03BB0
Certificate serial:       149C41090A0A034BDDEEF8E298043F4BCC7DC1FE
Authority key identifier: 10:55:E7:9A:D1:F4:0A:10:96:5E:ED:0F:D0:76:26:1B:F1:A0:3B:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1055E79AD1F40A10965EED0FD076261BF1A03BB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2jmfJfq5kmtXTePEeRdgEjH44LnTcpTAfJJGcCi6Rgok/0/323830343a363635383a3a2f33322d3438203d3e20323639353532.roa
Signing time:             Wed 17 May 2023 17:28:00 +0000
ROA not before:           Wed 17 May 2023 17:23:00 +0000
ROA not after:            Wed 15 May 2024 17:28:00 +0000
asID:                     269552
IP address blocks:        2804:6658::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:9c:41:09:0a:0a:03:4b:dd:ee:f8:e2:98:04:3f:4b:cc:7d:c1:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1055E79AD1F40A10965EED0FD076261BF1A03BB0
        Validity
            Not Before: May 17 17:23:00 2023 GMT
            Not After : May 15 17:28:00 2024 GMT
        Subject: CN=3082010A0282010100B8F51E37B96ECB041431C07A326B8649A682A3605F74348CF2E177C96F0D206E4C0FD13E593BCBA0ACB83E05AC8BA50C815D8E215A1B83A09C0472EC96019C5EB791AEDACD1D9FF020AEDF8213BF66EBCB3569A703FFC1535916A84E62B7829EFD3E0E4561E06132947CE36628DE6A057CABBE5960FC4E939EE7333ED95749C14DAD3D43DB6D684AE9E5996AC10FE8CE9B2CDB7A7C5E583ACBEF3C97307BE537C2DEA7349D507051EE3BD141E2FA4120F026974012F6B1DB68B20D6CFB48BC3ED1BD53CF53566E223C4F930E5E0B994573EDED30E36950DF561570F84C77D27BF8A87984D63BAE1EE3D2A03DE4DC8A9950088D0EAC595824BCA63993C99FE08B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f5:1e:37:b9:6e:cb:04:14:31:c0:7a:32:6b:
                    86:49:a6:82:a3:60:5f:74:34:8c:f2:e1:77:c9:6f:
                    0d:20:6e:4c:0f:d1:3e:59:3b:cb:a0:ac:b8:3e:05:
                    ac:8b:a5:0c:81:5d:8e:21:5a:1b:83:a0:9c:04:72:
                    ec:96:01:9c:5e:b7:91:ae:da:cd:1d:9f:f0:20:ae:
                    df:82:13:bf:66:eb:cb:35:69:a7:03:ff:c1:53:59:
                    16:a8:4e:62:b7:82:9e:fd:3e:0e:45:61:e0:61:32:
                    94:7c:e3:66:28:de:6a:05:7c:ab:be:59:60:fc:4e:
                    93:9e:e7:33:3e:d9:57:49:c1:4d:ad:3d:43:db:6d:
                    68:4a:e9:e5:99:6a:c1:0f:e8:ce:9b:2c:db:7a:7c:
                    5e:58:3a:cb:ef:3c:97:30:7b:e5:37:c2:de:a7:34:
                    9d:50:70:51:ee:3b:d1:41:e2:fa:41:20:f0:26:97:
                    40:12:f6:b1:db:68:b2:0d:6c:fb:48:bc:3e:d1:bd:
                    53:cf:53:56:6e:22:3c:4f:93:0e:5e:0b:99:45:73:
                    ed:ed:30:e3:69:50:df:56:15:70:f8:4c:77:d2:7b:
                    f8:a8:79:84:d6:3b:ae:1e:e3:d2:a0:3d:e4:dc:8a:
                    99:50:08:8d:0e:ac:59:58:24:bc:a6:39:93:c9:9f:
                    e0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:8B:60:E0:84:D4:00:8B:E9:4B:40:C5:0D:FA:73:D0:04:50:17:5B
            X509v3 Authority Key Identifier:
                keyid:10:55:E7:9A:D1:F4:0A:10:96:5E:ED:0F:D0:76:26:1B:F1:A0:3B:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2jmfJfq5kmtXTePEeRdgEjH44LnTcpTAfJJGcCi6Rgok/0/1055E79AD1F40A10965EED0FD076261BF1A03BB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1055E79AD1F40A10965EED0FD076261BF1A03BB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2jmfJfq5kmtXTePEeRdgEjH44LnTcpTAfJJGcCi6Rgok/0/323830343a363635383a3a2f33322d3438203d3e20323639353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6658::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:33:0f:7e:f9:d1:44:f4:0f:25:a0:77:40:87:b0:9d:21:b4:
         77:61:16:67:2c:29:c6:56:9e:80:f8:2c:07:f5:dc:0f:58:4d:
         6a:42:55:22:86:13:74:c4:28:d6:b6:94:38:1a:c8:3b:80:31:
         75:7f:94:b1:59:a8:77:35:32:e4:0d:55:a0:5a:58:ad:1e:82:
         03:84:76:da:67:0b:c0:dd:61:22:df:49:7f:51:9b:99:b1:19:
         25:cf:f8:ed:9b:0f:f0:7b:37:66:53:86:f0:88:7a:03:2e:fa:
         db:fd:1b:05:dc:fd:36:1b:18:2c:96:08:68:69:de:eb:28:d7:
         86:15:c3:3a:fa:ee:9e:aa:9b:c5:1b:a4:2f:99:64:9d:4e:fe:
         35:b4:7c:ba:ea:af:c1:66:5a:55:6a:b6:2c:a0:dd:5b:e2:6c:
         af:b5:73:52:c5:73:98:96:a8:ef:cc:bf:f4:19:bd:25:99:71:
         30:99:93:c3:40:31:01:7a:bc:e6:51:ee:ce:47:ef:0d:7c:54:
         c8:26:8f:02:8e:77:24:6a:d8:f4:c9:78:ee:d2:93:ef:c0:dd:
         9f:ee:47:75:8e:4e:8d:86:fd:b7:a0:15:d2:09:3b:8f:e6:67:
         03:d5:fa:03:65:42:57:0f:23:6b:51:a2:f6:80:45:00:8c:07:
         06:62:11:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----