Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/323830343a3838303a3a2f33322d3332203d3e203238323730.roa
File:                     323830343a3838303a3a2f33322d3332203d3e203238323730.roa (raw, json)
Hash identifier:          rGs/9fDx1cPfPrVZScGRPcxYEid+YH5Jqb/IH43H3q0=
Subject key identifier:   0F:BB:10:1E:FF:5A:BE:79:6F:13:76:7D:5F:03:10:6B:7D:45:2D:41
Certificate issuer:       /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial:       0A659178B55A6ECC19DEF47C378DD0FA4E763A8A
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/323830343a3838303a3a2f33322d3332203d3e203238323730.roa
Signing time:             Thu 07 Nov 2024 20:40:15 +0000
ROA not before:           Thu 07 Nov 2024 20:35:15 +0000
ROA not after:            Thu 06 Nov 2025 20:40:15 +0000
asID:                     28270
IP address blocks:        2804:880::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:65:91:78:b5:5a:6e:cc:19:de:f4:7c:37:8d:d0:fa:4e:76:3a:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
        Validity
            Not Before: Nov  7 20:35:15 2024 GMT
            Not After : Nov  6 20:40:15 2025 GMT
        Subject: CN=0FBB101EFF5ABE796F13767D5F03106B7D452D41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1b:f7:b1:37:bb:65:99:2d:cb:2c:9c:f9:8c:
                    9c:1f:bf:ce:4d:a9:8a:28:10:88:b2:d7:ef:7f:35:
                    26:db:32:43:68:f4:68:3c:6f:c4:34:b4:95:50:a5:
                    38:18:e7:2c:69:9d:90:09:dc:5e:d3:f0:d0:00:55:
                    0c:e7:50:37:04:af:54:4f:60:23:ae:a0:bf:dd:c2:
                    20:a0:8c:c8:73:fa:14:19:f1:b9:8f:1c:63:b4:66:
                    7d:f6:e7:78:43:9c:71:d9:81:f1:c9:d3:9c:5f:b6:
                    d7:60:c4:da:f0:2d:e5:46:32:d8:dc:54:54:86:08:
                    fd:73:de:2c:8f:71:43:ce:bb:2d:a5:07:95:7c:2f:
                    21:32:7d:2a:1d:e3:df:a8:51:24:1e:e3:0b:21:40:
                    70:5c:9a:53:fc:7e:1b:08:f5:71:37:a8:50:9e:e8:
                    24:d3:2f:ef:5c:b8:53:d6:12:73:11:ee:b8:47:b1:
                    f4:27:d2:f1:64:84:0f:7e:93:99:08:6f:98:19:af:
                    8a:d0:56:fd:76:82:38:67:f0:ca:bb:39:98:64:56:
                    dd:b2:85:a3:44:00:af:37:e7:ef:f5:14:4d:14:ef:
                    f0:c3:d7:a4:9b:af:b5:08:f6:72:5e:c1:d5:bf:54:
                    3c:b3:b6:9d:69:2d:16:71:d6:fc:64:c3:fc:5a:b9:
                    82:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:BB:10:1E:FF:5A:BE:79:6F:13:76:7D:5F:03:10:6B:7D:45:2D:41
            X509v3 Authority Key Identifier:
                keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/323830343a3838303a3a2f33322d3332203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:880::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:2e:61:27:8d:82:1e:b3:e6:a3:da:0b:99:b5:4e:ea:03:0c:
         2e:e5:65:46:f6:61:8c:09:0f:7e:c8:de:d5:e2:25:b0:43:dd:
         a6:45:96:f4:1d:1c:12:56:0c:32:77:af:f4:69:14:ad:27:45:
         57:08:71:fb:d3:4d:b2:ec:94:c3:11:e9:52:03:ad:8c:ac:93:
         58:d4:71:7e:97:2d:2e:b6:6e:86:7f:13:99:41:34:24:15:4e:
         3f:06:95:29:43:08:c0:65:61:c2:de:79:1a:37:9c:42:f0:3a:
         cb:55:c7:8b:fc:ed:89:53:5a:f3:35:e0:71:08:14:94:21:24:
         fc:ef:08:ea:d5:09:f5:98:b2:c7:19:d2:82:3a:89:f3:2e:12:
         c1:d2:d8:0c:49:76:cc:90:56:b8:25:49:f2:68:bf:2a:c3:9a:
         2d:35:6f:20:dd:26:af:1f:08:69:81:34:f2:3d:95:88:ad:e6:
         f1:12:11:b7:e9:59:6c:b1:7b:7b:b5:ff:d1:22:d0:2b:f1:6e:
         ba:7d:9f:8d:26:0c:a3:f6:69:7d:cb:3f:2b:2b:da:61:b2:43:
         20:5e:b4:fe:b3:9b:07:7f:c0:04:b5:65:da:cc:6c:ad:a0:35:
         18:5c:6e:0a:d3:f6:98:5b:51:a6:00:46:87:fa:bd:74:37:d9:
         29:c2:aa:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----