Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HBh2AEbEFB6rWMdHLYS4tYza1MbYNK4x79riwawvZ9e/0/323830343a323238633a633030303a3a2f34382d3438203d3e20323634313037.roa
File:                     323830343a323238633a633030303a3a2f34382d3438203d3e20323634313037.roa (raw, json)
Hash identifier:          XKrkzNwCRS2FuA4C5goaUkN36gMH8xJkQ5grX7vGXvU=
Subject key identifier:   2A:8D:96:C3:49:C6:70:4A:54:07:04:B8:B8:3B:66:55:66:A7:E0:69
Certificate issuer:       /CN=EFAFB1EB50066E12838301F26F7B2DF7B736A78F
Certificate serial:       50A7D34339AFCCEAD78663A9AA697F7F6186D3BC
Authority key identifier: EF:AF:B1:EB:50:06:6E:12:83:83:01:F2:6F:7B:2D:F7:B7:36:A7:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAFB1EB50066E12838301F26F7B2DF7B736A78F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HBh2AEbEFB6rWMdHLYS4tYza1MbYNK4x79riwawvZ9e/0/323830343a323238633a633030303a3a2f34382d3438203d3e20323634313037.roa
Signing time:             Thu 26 Sep 2024 20:36:47 +0000
ROA not before:           Thu 26 Sep 2024 20:31:47 +0000
ROA not after:            Thu 25 Sep 2025 20:36:47 +0000
asID:                     264107
IP address blocks:        2804:228c:c000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:a7:d3:43:39:af:cc:ea:d7:86:63:a9:aa:69:7f:7f:61:86:d3:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFAFB1EB50066E12838301F26F7B2DF7B736A78F
        Validity
            Not Before: Sep 26 20:31:47 2024 GMT
            Not After : Sep 25 20:36:47 2025 GMT
        Subject: CN=2A8D96C349C6704A540704B8B83B665566A7E069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:55:d3:63:23:f2:6d:80:a4:5d:8e:e5:fd:9b:
                    c0:eb:21:4c:24:96:92:66:3d:20:2c:cd:24:e4:b6:
                    e3:d4:55:d3:85:a8:59:7f:f8:b8:09:8c:43:04:93:
                    e2:2d:5f:27:f9:5f:55:1e:91:a8:38:46:d3:ab:5f:
                    ce:d8:a6:48:37:18:e3:9e:48:36:b7:e8:95:a8:53:
                    19:9d:2c:d9:62:a8:9c:7e:9b:2c:dc:f9:ff:6f:98:
                    c4:79:57:62:8c:1e:de:c6:a7:ec:de:e1:45:f8:e3:
                    63:ac:b8:8d:7c:3e:31:5d:11:5b:d4:ed:4d:b1:5d:
                    1c:91:9a:74:bc:ef:2e:25:ed:49:18:4a:0a:ba:21:
                    d7:3c:a2:72:2a:8f:79:fe:bb:55:4a:25:58:b4:c6:
                    27:eb:a2:37:da:c3:b5:9a:86:bd:b3:44:2f:89:6e:
                    6c:cb:f8:4a:d2:30:47:f2:5d:ee:cd:72:53:0d:16:
                    c2:f0:b2:71:4a:57:21:88:95:b4:75:11:73:46:a0:
                    f9:61:62:6c:46:a9:1a:ee:f8:8b:6b:6e:6a:59:cb:
                    ad:64:be:1d:d9:66:45:55:6b:98:5b:fd:62:c2:d5:
                    73:07:67:95:4b:07:bc:2b:d5:ce:8a:d2:25:d9:a6:
                    00:52:69:60:39:22:4d:f7:ee:65:10:ea:f7:ac:79:
                    08:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:8D:96:C3:49:C6:70:4A:54:07:04:B8:B8:3B:66:55:66:A7:E0:69
            X509v3 Authority Key Identifier:
                keyid:EF:AF:B1:EB:50:06:6E:12:83:83:01:F2:6F:7B:2D:F7:B7:36:A7:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HBh2AEbEFB6rWMdHLYS4tYza1MbYNK4x79riwawvZ9e/0/EFAFB1EB50066E12838301F26F7B2DF7B736A78F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAFB1EB50066E12838301F26F7B2DF7B736A78F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HBh2AEbEFB6rWMdHLYS4tYza1MbYNK4x79riwawvZ9e/0/323830343a323238633a633030303a3a2f34382d3438203d3e20323634313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:228c:c000::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:32:a7:56:55:e1:44:64:ae:c4:4c:da:55:07:6a:06:27:1e:
         f3:3f:3f:fe:03:e9:de:68:3e:37:bb:7c:d9:54:a2:cc:2c:dc:
         a4:6c:c4:b1:28:d8:7b:ff:e4:9f:6f:f4:b5:00:80:14:35:ba:
         46:40:5e:42:94:e4:29:28:e9:c8:92:64:66:17:a3:93:69:85:
         b7:0d:90:71:1e:bc:c7:2d:65:8e:40:94:aa:d8:b6:ba:b7:02:
         02:c0:b7:86:e1:3c:12:c9:49:a1:5e:6a:a1:69:c8:02:16:d9:
         17:1f:db:ce:26:48:b3:3d:78:0b:1a:0b:46:a1:89:ef:56:91:
         94:01:08:38:9c:20:82:f2:34:1b:02:7f:b4:19:90:1e:ce:91:
         c5:1f:30:32:ae:7c:7e:52:f4:29:2e:f1:60:d9:4e:7b:17:d8:
         b4:9b:0d:fb:65:9f:25:e8:b3:9c:25:f6:d4:fd:9a:7c:64:bb:
         f7:f5:a8:d1:81:29:a8:ad:85:5b:d1:eb:e1:93:76:2b:f9:7e:
         90:7c:da:a0:f4:61:cf:6a:d0:99:25:6d:bc:86:d6:32:33:f5:
         a8:9a:29:5e:b8:81:93:9a:64:70:65:46:b6:81:a8:cd:54:86:
         ab:0a:25:0f:ba:c2:23:af:22:fc:e9:45:3b:bd:37:39:57:55:
         7a:8f:5b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----