Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/323830343a373935303a3a2f33332d3438203d3e20323731323938.roa
File:                     323830343a373935303a3a2f33332d3438203d3e20323731323938.roa (raw, json)
Hash identifier:          9DswWsq6hj3A/xOc+MkGCO3NSqGESR7rY6bz7SvqCtA=
Subject key identifier:   34:24:A7:AD:91:93:BC:39:C4:E5:51:D0:28:CE:27:C2:E6:31:CD:20
Certificate issuer:       /CN=0B7E676BF893065665A524EBE293E999020CF3E1
Certificate serial:       39084257966415AFBF9124B29D723E4047B5E4CC
Authority key identifier: 0B:7E:67:6B:F8:93:06:56:65:A5:24:EB:E2:93:E9:99:02:0C:F3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B7E676BF893065665A524EBE293E999020CF3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/323830343a373935303a3a2f33332d3438203d3e20323731323938.roa
Signing time:             Tue 30 Jan 2024 19:55:15 +0000
ROA not before:           Tue 30 Jan 2024 19:50:15 +0000
ROA not after:            Tue 28 Jan 2025 19:55:15 +0000
asID:                     271298
IP address blocks:        2804:7950::/33 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:08:42:57:96:64:15:af:bf:91:24:b2:9d:72:3e:40:47:b5:e4:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B7E676BF893065665A524EBE293E999020CF3E1
        Validity
            Not Before: Jan 30 19:50:15 2024 GMT
            Not After : Jan 28 19:55:15 2025 GMT
        Subject: CN=3424A7AD9193BC39C4E551D028CE27C2E631CD20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e8:fd:70:39:cc:fb:fc:1a:dc:d2:d6:83:09:
                    95:a4:4c:e7:10:9b:1e:c1:92:a5:b8:11:69:b5:b8:
                    2e:d3:22:d8:3e:4e:7b:21:20:d6:9f:2c:28:a0:bb:
                    f7:27:bb:0e:8f:68:7e:f9:4f:7c:eb:d0:12:a5:33:
                    4a:4a:5a:d3:95:80:63:6f:ef:7b:38:f5:33:f6:f4:
                    e7:38:12:19:65:f7:1e:2e:e4:14:44:c2:91:5d:eb:
                    d0:06:b8:b0:ef:6f:32:29:b7:c8:1f:4e:b4:f6:dd:
                    54:be:c8:3a:a4:e4:05:9f:5c:ca:05:17:38:bc:a2:
                    6e:96:5d:0b:e5:d0:b4:89:87:a1:41:7c:37:70:16:
                    4a:50:c6:c9:14:8d:a2:b6:5e:00:44:c1:d5:c3:f0:
                    3f:a8:8b:8a:f8:2f:87:ce:d8:12:43:45:1f:fd:c8:
                    1d:47:f1:2b:2a:9c:9b:45:0b:64:44:99:f7:8a:a6:
                    69:0d:e8:05:7b:a8:28:0d:86:d7:a4:0a:67:eb:c7:
                    46:7e:4f:15:af:c0:22:13:f2:b4:21:af:e1:15:7c:
                    96:d9:ec:17:0f:2f:0e:6e:a6:76:82:3f:1f:1f:ce:
                    fd:97:5e:21:c7:07:40:a4:a9:40:57:a1:d9:2c:06:
                    9a:58:e3:ac:26:64:76:2a:34:21:59:33:42:db:b7:
                    97:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:24:A7:AD:91:93:BC:39:C4:E5:51:D0:28:CE:27:C2:E6:31:CD:20
            X509v3 Authority Key Identifier:
                keyid:0B:7E:67:6B:F8:93:06:56:65:A5:24:EB:E2:93:E9:99:02:0C:F3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/0B7E676BF893065665A524EBE293E999020CF3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B7E676BF893065665A524EBE293E999020CF3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/323830343a373935303a3a2f33332d3438203d3e20323731323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7950::/33

    Signature Algorithm: sha256WithRSAEncryption
         b2:21:dc:99:2a:6f:39:b0:df:69:06:d4:24:1e:ba:58:10:79:
         32:92:9f:9e:ca:a4:85:03:85:ec:87:78:ed:ed:74:81:53:b6:
         c3:35:c4:a0:91:76:fb:bf:44:b3:7b:63:15:9f:79:49:17:3a:
         c3:ea:6d:39:67:15:50:cd:09:d7:7e:cc:a5:a2:7d:ed:92:b0:
         53:c7:57:26:ab:44:67:59:e5:19:70:4d:cd:20:0a:fc:21:ee:
         cb:72:ff:65:62:d8:52:0d:a1:88:d1:47:a2:1f:55:c0:3c:d3:
         e9:1f:25:79:cf:96:cc:2e:8c:d1:69:0c:ab:7f:8c:1a:ae:e2:
         6d:92:9a:fb:30:4a:fb:14:b3:4f:6d:3a:2f:e0:41:79:bd:56:
         3b:bd:21:11:79:14:d6:f1:18:8a:7d:af:f0:64:d3:83:fb:1e:
         f8:d1:5e:71:90:da:3d:50:ab:89:9e:2b:b0:a7:db:25:fc:ba:
         59:c9:00:d6:db:59:e5:64:4e:7f:09:53:fa:0b:98:a2:40:a0:
         b0:63:94:ad:ff:58:04:fe:80:d3:28:5f:00:85:2d:67:fc:56:
         b8:6b:c6:b4:ce:00:98:6c:60:3a:1c:25:aa:93:34:84:ea:40:
         1c:53:06:ae:1a:50:07:e5:2a:2a:75:b7:97:ef:1d:6a:87:85:
         1d:0e:a3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----