Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/323830343a326639343a3a2f33322d3438203d3e20323634393030.roa
File:                     323830343a326639343a3a2f33322d3438203d3e20323634393030.roa (raw, json)
Hash identifier:          0kBJkgqBI71/7P8chFmley+BQfq9NC6GOYF7Y6hhT14=
Subject key identifier:   C3:5E:C3:82:8A:F6:12:AA:3F:10:D2:7A:8D:56:22:E7:ED:DA:46:EE
Certificate issuer:       /CN=CA558C51089618956B90BDD9D82B777E7C1FF52A
Certificate serial:       239E1C2AF019A754F3B4B800B9BAA1217C289ECF
Authority key identifier: CA:55:8C:51:08:96:18:95:6B:90:BD:D9:D8:2B:77:7E:7C:1F:F5:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA558C51089618956B90BDD9D82B777E7C1FF52A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/323830343a326639343a3a2f33322d3438203d3e20323634393030.roa
Signing time:             Mon 23 Oct 2023 16:28:00 +0000
ROA not before:           Mon 23 Oct 2023 16:23:00 +0000
ROA not after:            Mon 21 Oct 2024 16:28:00 +0000
asID:                     264900
IP address blocks:        2804:2f94::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:9e:1c:2a:f0:19:a7:54:f3:b4:b8:00:b9:ba:a1:21:7c:28:9e:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA558C51089618956B90BDD9D82B777E7C1FF52A
        Validity
            Not Before: Oct 23 16:23:00 2023 GMT
            Not After : Oct 21 16:28:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:03:1f:92:87:97:05:a1:b3:9b:30:f9:db:e0:
                    55:3d:17:df:0a:48:5d:f2:5b:c4:e4:88:26:41:f9:
                    16:19:d6:32:3c:d5:64:30:05:7d:79:81:ed:9c:9f:
                    a6:fd:cd:11:7b:0a:6e:5d:cf:13:d6:65:f1:6b:fa:
                    8c:3b:55:c0:d4:42:da:13:54:75:3d:b1:5f:3e:1f:
                    4f:d5:ed:83:18:b6:e1:0a:8d:33:76:f1:00:5c:e8:
                    3f:62:97:2d:b7:2b:8e:fa:05:9d:86:1a:cd:4c:b0:
                    54:4e:c3:94:50:47:0e:a0:9f:d8:2b:8e:51:3f:e9:
                    f3:24:3f:12:28:f4:60:73:ad:5e:8a:89:57:d1:2a:
                    8e:c8:4f:0f:7e:91:08:50:fd:e9:90:3e:58:f6:77:
                    5b:58:1d:81:f4:b6:19:e5:36:17:94:25:7a:b4:a9:
                    6e:49:61:67:04:85:47:cb:ff:25:46:77:b9:23:08:
                    cd:67:20:84:12:a3:b7:b1:a9:99:b5:62:14:83:56:
                    27:db:5d:0d:d5:14:b7:b6:8a:5f:cc:72:b9:98:4e:
                    f0:6b:7c:f0:44:87:3f:e5:43:4b:a5:cd:04:6f:60:
                    54:ee:43:ce:02:a7:6f:18:ce:65:91:e4:9b:a7:eb:
                    d3:f5:37:5f:88:cf:06:43:f5:bd:99:5d:ad:a1:3e:
                    0e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:5E:C3:82:8A:F6:12:AA:3F:10:D2:7A:8D:56:22:E7:ED:DA:46:EE
            X509v3 Authority Key Identifier:
                keyid:CA:55:8C:51:08:96:18:95:6B:90:BD:D9:D8:2B:77:7E:7C:1F:F5:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CA558C51089618956B90BDD9D82B777E7C1FF52A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA558C51089618956B90BDD9D82B777E7C1FF52A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/323830343a326639343a3a2f33322d3438203d3e20323634393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f94::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:34:b3:3e:0f:92:dc:e1:21:a8:b9:17:7d:68:67:71:45:9d:
         ca:cd:c7:81:b3:bf:8b:f6:e4:4f:45:c8:24:d3:c4:85:b1:45:
         32:af:a1:cf:80:93:21:aa:98:9e:b3:e7:7e:1f:2e:e6:0d:5c:
         69:bf:4d:b0:c1:41:dd:60:09:cf:91:18:cc:c3:a3:4e:57:b3:
         ce:56:4c:03:fe:81:a3:d0:4e:26:02:ad:45:8f:04:c0:fe:4e:
         52:91:a3:0c:9a:8c:e0:22:ba:93:68:ca:2d:06:d5:51:99:54:
         ed:2e:68:50:48:e9:23:dc:55:0f:13:c2:92:cf:43:8a:28:2e:
         01:ef:d0:94:36:03:4c:e1:76:3b:25:3e:f4:72:6e:46:9c:9b:
         59:01:47:41:61:0a:64:3c:50:d3:48:02:27:99:8c:a2:fd:6d:
         7d:0d:05:f3:87:f4:8c:5d:e0:1c:ef:8e:4e:92:70:b8:99:25:
         79:7d:ae:9f:99:ae:0f:9a:14:a0:fb:88:1d:73:75:b3:c8:26:
         78:59:b2:73:04:93:7e:26:e0:1c:07:0d:3e:c9:21:96:6d:dd:
         65:59:b2:84:6f:ea:f4:78:2b:cc:bd:f8:c6:36:9b:af:0d:92:
         f3:3a:c5:71:2f:17:dd:b7:ab:4e:fc:cb:b0:99:09:85:f2:c7:
         86:8d:e2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----