Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a3a2f33322d3438203d3e203238323032.roa
File:                     323830343a3837633a3a2f33322d3438203d3e203238323032.roa (raw, json)
Hash identifier:          CxZxc5iLPrqxS2jCTZ4mj7/MO/VQTdB+0J01UkmJiwY=
Subject key identifier:   A5:9D:05:17:B3:21:B8:5B:2E:53:27:C6:1F:65:50:98:D5:93:DA:ED
Certificate issuer:       /CN=EE2CA5226BA54EB97440397DC62AB9F75B58FA95
Certificate serial:       49BE47E8555D77482070ABCD56EEC8907B76C8EC
Authority key identifier: EE:2C:A5:22:6B:A5:4E:B9:74:40:39:7D:C6:2A:B9:F7:5B:58:FA:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE2CA5226BA54EB97440397DC62AB9F75B58FA95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a3a2f33322d3438203d3e203238323032.roa
Signing time:             Wed 13 Dec 2023 12:37:05 +0000
ROA not before:           Wed 13 Dec 2023 12:32:05 +0000
ROA not after:            Wed 11 Dec 2024 12:37:05 +0000
asID:                     28202
IP address blocks:        2804:87c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:be:47:e8:55:5d:77:48:20:70:ab:cd:56:ee:c8:90:7b:76:c8:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE2CA5226BA54EB97440397DC62AB9F75B58FA95
        Validity
            Not Before: Dec 13 12:32:05 2023 GMT
            Not After : Dec 11 12:37:05 2024 GMT
        Subject: CN=A59D0517B321B85B2E5327C61F655098D593DAED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:73:45:73:f5:b7:ae:85:d4:30:58:fb:e9:5c:
                    20:15:f6:8e:ce:36:df:0c:3e:15:9a:e3:59:40:76:
                    6d:e0:78:05:c7:eb:c5:1f:4c:04:78:0e:ee:bc:1a:
                    91:8f:09:91:37:67:56:3b:b2:4c:df:3d:13:1b:55:
                    6b:c1:73:29:21:a5:f2:5c:f6:ac:04:40:ca:d5:04:
                    b4:bb:99:28:b5:70:c6:43:1f:cf:f6:1f:d5:fb:ed:
                    07:e0:e8:69:a3:e5:c0:c2:90:c8:b1:f6:3e:0f:3e:
                    31:a1:9d:02:8a:46:5b:00:99:c0:a3:3e:ce:b9:cd:
                    e5:c8:44:c0:7e:f5:cb:d6:4c:37:64:b9:98:83:d8:
                    f8:f1:ca:41:88:31:14:8b:b1:3e:d3:ab:2f:43:f2:
                    fa:be:8e:85:88:f6:8d:65:46:d7:bd:8e:c5:f4:a1:
                    32:b6:0b:1f:fd:28:9e:ce:c8:8b:f1:1c:2b:62:29:
                    eb:3f:df:34:0b:25:52:d9:90:91:64:de:97:1a:7f:
                    4a:5f:2a:51:5e:6a:72:b3:f2:39:cc:99:03:71:44:
                    5b:38:17:49:24:bf:15:0f:dc:ac:a8:b7:87:a2:6a:
                    c0:15:c1:73:b9:cb:57:5a:5b:d6:00:f6:7a:ce:55:
                    bd:2a:31:9c:ac:b2:61:fe:24:ff:0e:3f:79:85:6e:
                    e0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:9D:05:17:B3:21:B8:5B:2E:53:27:C6:1F:65:50:98:D5:93:DA:ED
            X509v3 Authority Key Identifier:
                keyid:EE:2C:A5:22:6B:A5:4E:B9:74:40:39:7D:C6:2A:B9:F7:5B:58:FA:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/EE2CA5226BA54EB97440397DC62AB9F75B58FA95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE2CA5226BA54EB97440397DC62AB9F75B58FA95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a3a2f33322d3438203d3e203238323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:87c::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:4a:bd:da:e9:11:ca:ee:dd:8d:0c:63:f7:09:fa:82:31:7f:
         71:fe:93:d7:50:8e:c3:64:f1:65:25:fe:dd:2b:50:81:33:ac:
         d3:bd:00:e6:f7:2c:af:53:f4:7e:66:5c:a8:d4:e0:c9:03:64:
         6f:3e:5f:be:22:4b:27:64:5f:5f:1f:8c:44:f7:b2:8b:e6:26:
         4f:14:49:36:6b:aa:4d:8f:e6:9f:7e:af:6c:ec:3d:bc:0b:c8:
         ba:3c:ef:71:7c:88:40:2f:85:d9:40:86:8f:8c:a1:0e:11:54:
         d8:12:2f:a0:7e:01:93:ca:8f:9b:3a:ea:fe:e8:f2:9d:b7:5e:
         b1:75:e4:a7:f5:d6:46:c4:61:6e:b9:a5:c4:1f:87:cb:b0:8b:
         0d:b3:77:d2:e1:61:ae:e4:ec:5d:26:45:1f:da:cd:c7:94:5e:
         66:c8:98:bd:c8:94:68:47:d3:2c:36:01:3c:35:bf:9b:d7:17:
         f0:a8:a8:21:7d:8d:2c:36:81:d2:50:ff:54:26:2b:68:63:a4:
         78:a5:81:4e:f3:7a:3c:ac:8a:c5:d1:67:ca:e6:8b:b0:c0:36:
         56:16:95:64:3f:ea:3f:62:68:3d:bf:b3:a0:c6:d4:dc:f9:88:
         40:e5:1a:6e:47:75:6c:e3:26:ad:8f:6b:fa:34:f9:fa:fe:92:
         0d:4f:c9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----