Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3N4fYrG9tE9XrQPzpKmsyw8wLqdgzq4nY7vsoDKzcEwE/0/323830343a373762383a3a2f33322d3438203d3e20323731313935.roa
File:                     323830343a373762383a3a2f33322d3438203d3e20323731313935.roa (raw, json)
Hash identifier:          iva4OcN3dRAzAh4hNtmHr2KnZ7UXbCY3u5P5mraZDTU=
Subject key identifier:   FF:DC:9C:F8:9B:D0:56:3A:31:EA:1A:74:C4:92:98:C3:52:B0:13:B5
Certificate issuer:       /CN=08DE034B9C48C28A3FE65ED192908212FFC402A7
Certificate serial:       418A2E33DB39186B72EA8982A900486F05A87D8A
Authority key identifier: 08:DE:03:4B:9C:48:C2:8A:3F:E6:5E:D1:92:90:82:12:FF:C4:02:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08DE034B9C48C28A3FE65ED192908212FFC402A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3N4fYrG9tE9XrQPzpKmsyw8wLqdgzq4nY7vsoDKzcEwE/0/323830343a373762383a3a2f33322d3438203d3e20323731313935.roa
Signing time:             Thu 15 Feb 2024 20:46:27 +0000
ROA not before:           Thu 15 Feb 2024 20:41:27 +0000
ROA not after:            Thu 13 Feb 2025 20:46:27 +0000
asID:                     271195
IP address blocks:        2804:77b8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:8a:2e:33:db:39:18:6b:72:ea:89:82:a9:00:48:6f:05:a8:7d:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08DE034B9C48C28A3FE65ED192908212FFC402A7
        Validity
            Not Before: Feb 15 20:41:27 2024 GMT
            Not After : Feb 13 20:46:27 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a5:52:f7:05:4b:05:1f:cb:67:11:b4:ad:74:
                    b9:39:91:c3:c0:97:bb:17:78:5f:14:2b:12:d9:dd:
                    d1:b3:cc:6c:cf:3a:13:f5:d8:43:ba:bb:76:56:f6:
                    ef:4c:55:f9:09:b1:c0:8f:70:a7:5b:5f:c8:58:fc:
                    4c:96:ca:e1:8f:59:78:a5:f2:07:67:44:8c:3f:f4:
                    e8:62:7b:1e:a3:b2:58:15:88:a8:62:80:42:24:49:
                    da:35:5c:1a:f5:dd:21:6d:41:fa:54:75:de:2d:9a:
                    f9:11:c4:f6:72:a5:a0:97:db:12:a7:0b:a0:66:c2:
                    7d:74:5f:29:e2:ae:ae:d5:dc:b2:7e:5d:2c:c2:46:
                    c5:c1:a0:b9:ff:dc:00:36:21:9e:e8:11:a1:93:bd:
                    bc:8e:a0:8b:c0:fc:48:45:33:ae:21:51:b8:75:fb:
                    17:6b:7d:18:f8:7a:33:21:ed:84:d5:67:9c:e4:e4:
                    f8:ed:de:8d:de:71:07:94:ca:2d:0a:26:c4:03:03:
                    4c:84:dc:99:93:96:f8:a6:e1:65:91:f5:75:6a:9d:
                    57:b1:d0:16:ed:bd:17:a9:28:2f:6d:d6:1f:21:ff:
                    0f:4d:9f:88:8d:2b:b6:80:98:66:69:3d:60:d4:33:
                    6a:4a:27:6f:cc:1e:ca:03:e5:da:a7:c7:14:ca:7b:
                    f1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:DC:9C:F8:9B:D0:56:3A:31:EA:1A:74:C4:92:98:C3:52:B0:13:B5
            X509v3 Authority Key Identifier:
                keyid:08:DE:03:4B:9C:48:C2:8A:3F:E6:5E:D1:92:90:82:12:FF:C4:02:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3N4fYrG9tE9XrQPzpKmsyw8wLqdgzq4nY7vsoDKzcEwE/0/08DE034B9C48C28A3FE65ED192908212FFC402A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08DE034B9C48C28A3FE65ED192908212FFC402A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3N4fYrG9tE9XrQPzpKmsyw8wLqdgzq4nY7vsoDKzcEwE/0/323830343a373762383a3a2f33322d3438203d3e20323731313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:77b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:e2:1f:aa:eb:8a:6f:1f:04:9d:fb:1c:99:de:b6:07:c1:cc:
         d7:be:e2:a9:8f:61:b3:ef:0e:4d:03:28:d8:d9:2d:12:5e:4f:
         8d:c2:8a:4b:47:82:26:36:09:b7:84:e2:c0:e4:b6:14:60:0f:
         df:e2:1a:47:69:3c:0d:c8:3e:72:98:9e:66:93:22:ce:b6:e7:
         e5:67:d6:9d:9e:f9:b9:f6:66:19:86:51:2a:db:0f:08:08:da:
         9c:fc:e4:aa:dc:d8:70:74:fc:82:22:9b:17:bb:d9:58:a8:b6:
         b0:bf:b6:ab:6e:70:73:46:8c:fe:01:18:03:9b:04:b4:b3:de:
         68:6c:5e:25:68:78:56:34:77:30:38:39:1e:bf:b6:03:7c:fb:
         9a:4e:d2:0f:7c:60:02:ea:ce:e7:55:6b:04:f1:93:7e:24:45:
         d3:37:29:c7:25:05:30:3a:92:64:a9:c8:ca:1c:f9:e5:2d:14:
         2c:f8:de:7d:56:45:2e:e8:88:a6:a2:3a:ac:19:71:fd:02:fc:
         89:eb:81:19:94:28:50:f0:93:99:f2:1a:52:58:2a:70:ae:3c:
         a0:4e:ce:04:1f:7b:bd:18:79:e7:ef:fa:68:6d:56:97:70:bf:
         4b:71:0c:55:60:58:b1:8e:79:0d:dd:81:55:fb:4b:50:a0:b6:
         04:80:4d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----