Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0/323830343a333638343a3a2f33322d3332203d3e20323636333533.roa
File:                     323830343a333638343a3a2f33322d3332203d3e20323636333533.roa (raw, json)
Hash identifier:          lwjtHbVfuWqPt4O7FoIJPJpoAWUduWVekyZFYq0F+6g=
Subject key identifier:   A1:FE:3A:E1:30:85:59:50:BD:81:80:05:07:B1:90:12:8C:4F:C2:08
Certificate issuer:       /CN=4397BA36879D0CCC02611CE4E0C4F1812A3EC108
Certificate serial:       473266521A2646E2CAED0A61ECBC4BB6C81B052B
Authority key identifier: 43:97:BA:36:87:9D:0C:CC:02:61:1C:E4:E0:C4:F1:81:2A:3E:C1:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4397BA36879D0CCC02611CE4E0C4F1812A3EC108.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0/323830343a333638343a3a2f33322d3332203d3e20323636333533.roa
Signing time:             Wed 27 Mar 2024 20:00:00 +0000
ROA not before:           Wed 27 Mar 2024 19:55:00 +0000
ROA not after:            Wed 26 Mar 2025 20:00:00 +0000
asID:                     266353
IP address blocks:        2804:3684::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:32:66:52:1a:26:46:e2:ca:ed:0a:61:ec:bc:4b:b6:c8:1b:05:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4397BA36879D0CCC02611CE4E0C4F1812A3EC108
        Validity
            Not Before: Mar 27 19:55:00 2024 GMT
            Not After : Mar 26 20:00:00 2025 GMT
        Subject: CN=3082010A0282010100D795DADF2EA63F4C02573BF82BAD0A9E1ACA02E84008B5FFE87EE71EEB65607587F28A3D8A1499290FC086BD5E89DEE509ADD5DC1BFC7A99FA7FFA8B777650A254275D123ECCCA3B972858F5EBF2AC35C78917AD7CCFADFE3C0984DCBDC801733B3076AE0F142CF8A08119477720B6B1CDF3F790E5234850FF5D4E792492BF2BC41CECD505E11D731239DF64C2DB151B0E3751611B53DBA76BBA0D20F25602CA45AD50FC6B5AB19F536C73074D2A2A35EF8C4CF8D6EC5B5D54D7B82B8355C7F9365A7171BE4E96A34CE25A878499B6FF6DA30BE23AC1D069F87883165C7DCEFF6148DB8725FF6AD66C9D55CDF2D003437505126D3F41F45B1B44F84F1AF0B8470203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:95:da:df:2e:a6:3f:4c:02:57:3b:f8:2b:ad:
                    0a:9e:1a:ca:02:e8:40:08:b5:ff:e8:7e:e7:1e:eb:
                    65:60:75:87:f2:8a:3d:8a:14:99:29:0f:c0:86:bd:
                    5e:89:de:e5:09:ad:d5:dc:1b:fc:7a:99:fa:7f:fa:
                    8b:77:76:50:a2:54:27:5d:12:3e:cc:ca:3b:97:28:
                    58:f5:eb:f2:ac:35:c7:89:17:ad:7c:cf:ad:fe:3c:
                    09:84:dc:bd:c8:01:73:3b:30:76:ae:0f:14:2c:f8:
                    a0:81:19:47:77:20:b6:b1:cd:f3:f7:90:e5:23:48:
                    50:ff:5d:4e:79:24:92:bf:2b:c4:1c:ec:d5:05:e1:
                    1d:73:12:39:df:64:c2:db:15:1b:0e:37:51:61:1b:
                    53:db:a7:6b:ba:0d:20:f2:56:02:ca:45:ad:50:fc:
                    6b:5a:b1:9f:53:6c:73:07:4d:2a:2a:35:ef:8c:4c:
                    f8:d6:ec:5b:5d:54:d7:b8:2b:83:55:c7:f9:36:5a:
                    71:71:be:4e:96:a3:4c:e2:5a:87:84:99:b6:ff:6d:
                    a3:0b:e2:3a:c1:d0:69:f8:78:83:16:5c:7d:ce:ff:
                    61:48:db:87:25:ff:6a:d6:6c:9d:55:cd:f2:d0:03:
                    43:75:05:12:6d:3f:41:f4:5b:1b:44:f8:4f:1a:f0:
                    b8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:FE:3A:E1:30:85:59:50:BD:81:80:05:07:B1:90:12:8C:4F:C2:08
            X509v3 Authority Key Identifier:
                keyid:43:97:BA:36:87:9D:0C:CC:02:61:1C:E4:E0:C4:F1:81:2A:3E:C1:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0/4397BA36879D0CCC02611CE4E0C4F1812A3EC108.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4397BA36879D0CCC02611CE4E0C4F1812A3EC108.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0/323830343a333638343a3a2f33322d3332203d3e20323636333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3684::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:66:e0:4b:5c:e9:1c:48:f2:32:8d:9e:79:6c:fd:5d:e2:ef:
         5b:2e:f2:dc:fd:49:58:23:f4:09:e0:e6:d2:1c:85:b3:49:af:
         20:67:ec:05:3b:d0:25:79:28:35:21:ac:ac:26:7b:17:42:75:
         7d:71:92:be:a0:d1:b5:39:b5:f9:3b:0a:0d:7a:b1:94:19:58:
         78:7b:c4:a1:75:f3:21:97:45:cf:5b:1a:2a:84:07:a8:1b:b5:
         74:d2:be:3f:5c:7d:2d:4d:ba:10:ec:a6:16:c3:f2:d0:21:f1:
         55:69:35:57:82:af:f8:94:8e:96:b6:f8:a1:36:9c:90:1e:b1:
         73:c1:2c:76:1a:15:eb:bc:3d:93:36:a7:53:cf:d3:bd:c4:d6:
         93:4d:7e:be:4e:a2:38:38:bf:48:86:87:05:f1:f9:25:e4:2d:
         ba:29:39:73:7a:97:9d:c2:b4:2a:35:18:55:e5:89:9f:11:d1:
         b5:af:a9:68:52:a7:db:a6:45:3e:76:60:7f:22:f9:28:fb:e8:
         67:8a:32:71:6f:e0:3c:c8:05:06:30:0e:70:0a:df:7c:76:1e:
         e6:40:d8:5b:62:09:9c:74:74:ba:f1:20:39:8a:97:5d:53:1e:
         e2:96:46:d9:80:77:a2:35:8d:29:ec:b9:80:44:65:22:38:a8:
         2b:0a:35:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----