Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/323830343a6266383a343030303a3a2f33342d3334203d3e203532363533.roa
File:                     323830343a6266383a343030303a3a2f33342d3334203d3e203532363533.roa (raw, json)
Hash identifier:          apz4+2YMbksWGDN7pVLTy7QfDSp27YT+A3qmO0V1ygs=
Subject key identifier:   42:DF:58:B9:8E:0D:FF:3E:9F:13:C7:80:D4:51:11:35:77:F9:D4:64
Certificate issuer:       /CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
Certificate serial:       2F23D793EEA653B64D55D45DA5A6D41634AE7130
Authority key identifier: 49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/323830343a6266383a343030303a3a2f33342d3334203d3e203532363533.roa
Signing time:             Tue 16 May 2023 14:24:00 +0000
ROA not before:           Tue 16 May 2023 14:19:00 +0000
ROA not after:            Tue 14 May 2024 14:24:00 +0000
asID:                     52653
IP address blocks:        2804:bf8:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:23:d7:93:ee:a6:53:b6:4d:55:d4:5d:a5:a6:d4:16:34:ae:71:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
        Validity
            Not Before: May 16 14:19:00 2023 GMT
            Not After : May 14 14:24:00 2024 GMT
        Subject: CN=42DF58B98E0DFF3E9F13C780D451113577F9D464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2e:b5:06:06:a0:c6:6f:b6:b6:d9:a5:b3:91:
                    c6:97:a6:5f:29:34:1e:ea:c8:dd:d5:f4:62:5d:62:
                    a4:05:42:cf:d2:f4:0c:1c:a5:89:9d:f8:73:08:5d:
                    7a:52:88:9d:98:b6:31:bc:90:3f:83:c2:96:f5:e6:
                    f8:3c:e6:f2:02:5f:6a:b4:5c:7a:a2:e1:c0:47:70:
                    7c:83:94:72:4b:ee:ba:97:6f:0d:5e:2d:45:6e:33:
                    13:ed:5f:49:0c:a8:d5:11:d0:73:99:2b:bf:33:4d:
                    93:f2:6e:02:54:76:b5:a0:30:a2:53:02:63:0c:2f:
                    78:0b:e2:c1:07:f6:f2:49:29:df:58:75:a0:f6:33:
                    3a:56:bf:55:40:2f:7f:34:ec:04:13:64:f4:44:e4:
                    7d:d2:e8:d7:01:c5:4e:c7:ac:67:40:de:66:ea:88:
                    45:09:17:17:a9:82:9d:4c:f0:52:91:80:63:3a:b0:
                    59:8c:a0:db:2b:e8:05:75:ff:30:a8:0d:5e:e0:0b:
                    8f:85:7b:ed:ee:3c:0c:65:d7:26:e1:b4:34:97:d9:
                    da:34:76:c3:75:cc:d7:fc:9f:e6:9a:82:7e:e3:9d:
                    5b:b6:c5:62:22:05:f8:37:d5:14:9d:1a:df:b1:3c:
                    d9:96:75:a3:3d:58:94:2a:63:99:dd:b2:04:80:a7:
                    06:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:DF:58:B9:8E:0D:FF:3E:9F:13:C7:80:D4:51:11:35:77:F9:D4:64
            X509v3 Authority Key Identifier:
                keyid:49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/323830343a6266383a343030303a3a2f33342d3334203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:bf8:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         76:69:4c:63:bd:27:61:64:ba:f7:bd:94:0e:fa:d4:80:ed:3e:
         d6:ae:63:9b:a0:84:58:ea:ee:77:c3:fe:99:a7:68:ba:13:bd:
         9e:42:8d:32:d8:e3:a5:f8:2d:27:55:93:2d:36:51:1d:cc:d2:
         d0:2d:d0:00:f9:95:c0:71:a5:59:4d:5f:13:3f:cc:b1:84:d3:
         c4:c6:8e:7d:b5:1b:e9:00:53:48:8a:50:3c:74:ca:d9:67:56:
         fa:78:63:a9:82:a5:44:08:4d:23:82:9f:b1:ec:d6:fa:99:36:
         76:2d:df:59:c0:b1:ad:ac:b2:df:c9:59:66:cd:b8:08:a9:0e:
         1b:68:be:5c:14:39:11:f6:5f:26:f5:bf:39:13:1b:ee:f5:f3:
         d6:15:71:66:7a:b3:a0:6a:8b:6d:a5:07:f5:e1:95:04:de:23:
         c8:79:c5:87:7a:97:6e:60:3d:66:ca:03:9a:6c:23:83:a8:d0:
         91:c0:ab:5f:f6:35:4d:ed:5e:63:b0:7a:c7:48:6c:00:29:93:
         f5:3d:25:0e:23:c3:0d:1b:64:83:ce:bf:54:8e:d6:78:b6:b8:
         59:10:ef:bd:2e:ed:64:26:e7:62:ff:0c:d9:d7:f3:16:93:59:
         93:29:d6:4b:50:81:5c:87:c7:f4:16:ee:46:34:59:04:49:c5:
         c1:5e:ca:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----