Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/323830343a37343a383030303a3a2f33332d3333203d3e203532343638.roa
File:                     323830343a37343a383030303a3a2f33332d3333203d3e203532343638.roa (raw, json)
Hash identifier:          NGrMRcaqlfSmM4vzXro49WeBbji0KWTxCvdrirADqJE=
Subject key identifier:   87:4B:B2:D6:31:6D:A9:28:33:FA:2E:78:35:57:4E:37:19:ED:7E:79
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       304241ECC9AB3E84D720F7F9AB665B69FB435DCA
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/323830343a37343a383030303a3a2f33332d3333203d3e203532343638.roa
Signing time:             Wed 29 May 2024 18:17:17 +0000
ROA not before:           Wed 29 May 2024 18:12:17 +0000
ROA not after:            Wed 28 May 2025 18:17:17 +0000
asID:                     52468
IP address blocks:        2804:74:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:42:41:ec:c9:ab:3e:84:d7:20:f7:f9:ab:66:5b:69:fb:43:5d:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: May 29 18:12:17 2024 GMT
            Not After : May 28 18:17:17 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7c:47:40:c4:9e:fd:13:7d:79:5c:df:63:ac:
                    cf:1c:04:5d:1a:e5:50:98:5c:2e:16:26:44:67:57:
                    9c:46:dc:62:bf:d5:ba:c0:ae:ab:34:08:b0:06:a7:
                    dc:e5:10:22:35:b6:be:1a:ca:d9:24:cb:c0:9a:b7:
                    0a:c3:03:54:b2:2c:60:10:09:69:07:0d:60:db:c6:
                    83:89:02:24:c0:d4:3e:47:eb:ab:3b:4f:ba:33:db:
                    49:cc:7a:d0:43:85:ce:94:7d:82:63:df:34:1d:ae:
                    47:90:cf:e0:9a:a1:6c:ae:9d:3e:bb:64:cd:dd:15:
                    34:c4:8d:d3:ed:b0:0b:24:e2:3f:e8:5f:3c:61:ba:
                    67:aa:13:80:43:3a:47:05:ac:cd:1e:e3:69:1a:d9:
                    ce:5b:b7:f1:27:cd:2d:24:6a:b6:62:c2:e8:b5:f4:
                    db:18:a1:19:90:e9:ab:ed:2e:41:da:4b:df:02:11:
                    b6:bb:7e:39:c2:9a:b3:77:f2:68:06:c2:7c:7f:1d:
                    78:33:21:a6:44:c7:b6:05:d9:2c:42:78:f8:e4:66:
                    8b:fb:17:38:f8:f8:52:1c:5e:70:7e:f3:c7:e1:29:
                    36:80:ea:a2:6d:83:f7:fd:12:17:94:b0:36:23:bf:
                    ed:cf:10:48:ad:29:6e:fa:a7:fa:61:86:f4:56:d3:
                    64:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:4B:B2:D6:31:6D:A9:28:33:FA:2E:78:35:57:4E:37:19:ED:7E:79
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/323830343a37343a383030303a3a2f33332d3333203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         9d:63:e7:6b:af:97:95:f4:e3:7a:40:b6:dc:87:cc:43:d4:95:
         eb:e4:80:be:87:d3:e1:2c:4f:28:54:09:be:9b:8b:35:d9:55:
         a3:23:6b:3b:5d:4b:b3:92:91:7d:f8:eb:4d:58:a7:a3:dd:2b:
         ae:18:42:d4:66:b4:3a:33:27:70:43:1c:bc:28:af:e0:22:ef:
         0c:33:bc:e0:e0:0e:d6:41:3a:ff:32:85:bd:66:0c:51:11:e0:
         7d:ef:f2:24:a1:86:93:dc:bb:08:54:b5:25:42:f0:e9:42:12:
         a7:d3:d3:cc:cf:a5:c2:34:6d:88:fc:6b:a1:50:88:8d:91:da:
         17:31:33:a6:5e:95:e0:cc:b0:8b:d1:89:5d:fe:e8:fa:b0:94:
         08:27:16:72:98:cf:39:3e:50:5d:a4:15:76:b0:f3:f4:aa:ae:
         44:ea:e3:bd:6e:d0:94:1b:49:d6:b0:04:96:38:b3:59:c2:f6:
         e6:63:a5:f6:0e:fd:d9:bc:61:ba:1f:df:1b:5c:13:1f:30:40:
         fd:f0:ff:9f:5e:f8:08:62:c2:4a:88:77:34:1a:7d:6f:06:ce:
         4c:37:dc:4d:36:69:5e:3c:a9:9d:a9:7b:93:42:52:5b:46:c3:
         f6:14:4c:16:bd:8d:53:e6:d5:0e:e1:14:ab:e0:b2:51:33:56:
         ef:11:f4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----