Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a383239653a3a2f34382d3438203d3e20323632343934.roa
File:                     323830343a6164383a383239653a3a2f34382d3438203d3e20323632343934.roa (raw, json)
Hash identifier:          bn3tW9st2/8AQqw9nCAhGvbIZCT7l+DJtszRt5HfGY4=
Subject key identifier:   38:B0:34:49:DD:13:6C:68:2C:33:BB:A8:08:83:9E:3E:46:50:F7:36
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       097E4A8F11C315BC55CC7549211EBE6E03C963DF
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a383239653a3a2f34382d3438203d3e20323632343934.roa
Signing time:             Sat 24 Feb 2024 01:15:20 +0000
ROA not before:           Sat 24 Feb 2024 01:10:20 +0000
ROA not after:            Mon 24 Feb 2025 01:15:20 +0000
asID:                     262494
IP address blocks:        2804:ad8:829e::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:7e:4a:8f:11:c3:15:bc:55:cc:75:49:21:1e:be:6e:03:c9:63:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Feb 24 01:10:20 2024 GMT
            Not After : Feb 24 01:15:20 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d9:15:b5:0e:2f:f1:43:cc:56:3d:17:1d:de:
                    0e:dc:3d:97:7a:20:af:cf:c4:31:7a:5e:d2:36:73:
                    32:2b:c4:1c:d0:1d:e3:54:47:55:a2:fd:4a:14:2a:
                    f4:b9:67:83:3b:fc:d3:89:c6:e8:13:f2:69:5c:ba:
                    d3:2f:4c:1d:a9:f3:f1:7e:a9:1b:73:28:dd:1e:94:
                    44:aa:a7:83:62:03:d3:b7:b1:26:d7:1e:5e:03:df:
                    82:46:db:3d:b3:85:3a:a6:17:0c:0d:2a:d3:1f:9d:
                    70:26:5d:4a:be:37:aa:d8:b5:72:e5:08:a8:87:a7:
                    0f:e6:51:ea:10:de:66:8d:6e:c2:bb:2f:8d:45:83:
                    ae:55:e4:f8:23:d9:ca:6a:2f:7f:cc:4f:89:07:24:
                    c9:63:b0:de:fb:85:31:57:ea:da:c3:c5:5b:3c:12:
                    98:8a:21:fe:d4:46:97:58:5f:18:f8:80:34:ae:2d:
                    25:95:53:68:10:e8:e1:5f:03:c5:36:ea:57:e6:c8:
                    1c:66:05:8b:79:e6:73:3a:da:c2:1c:1c:42:a5:51:
                    14:1e:79:a3:e2:58:03:5b:5f:d3:b6:d0:80:ac:c8:
                    fd:38:00:51:1a:75:93:fe:b4:24:4c:e8:5a:d4:13:
                    73:87:cc:e6:da:32:e5:1a:50:6a:69:fe:52:d2:37:
                    d2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B0:34:49:DD:13:6C:68:2C:33:BB:A8:08:83:9E:3E:46:50:F7:36
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a383239653a3a2f34382d3438203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8:829e::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:f2:01:9d:d5:07:e8:e9:1b:b1:b0:6b:be:4c:c8:8e:7e:ab:
         35:ef:39:ff:e6:da:67:ee:58:2d:f1:4a:2a:53:a8:8c:13:2f:
         19:15:33:aa:ef:31:35:4f:4d:c2:35:71:07:9c:8d:b9:8b:f6:
         a6:1d:47:fb:4d:4e:81:60:f2:19:fb:7c:25:88:19:a0:21:43:
         dc:ef:b9:d6:80:a9:ad:0c:9b:cf:71:6c:99:10:99:a5:51:46:
         31:1c:6e:8f:e7:2b:67:27:cc:c3:6b:07:16:e0:21:6a:03:00:
         72:45:82:76:ca:09:89:7f:27:4e:15:85:ff:36:ac:d5:fb:6a:
         8f:b7:df:dc:b2:97:32:68:1d:59:e8:2f:dd:08:c5:09:b6:69:
         94:f1:91:c2:bd:42:a2:4c:f6:22:3b:4f:ff:73:3f:8e:28:e5:
         d8:92:c9:fc:78:a0:86:be:de:1a:3c:80:94:cf:db:5d:b5:be:
         4f:49:d5:97:17:af:f6:f1:19:34:20:78:fd:86:fc:db:d7:fe:
         44:a3:82:cf:9b:11:0e:6c:4a:d3:93:60:2d:8f:dc:b2:3c:fa:
         42:35:d1:eb:05:9b:a9:a5:9a:28:e0:a7:9a:63:64:41:a5:9f:
         c3:76:1d:78:30:b1:75:e2:b1:b9:90:56:fb:57:8f:da:42:95:
         2e:bc:1e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----