Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/323830343a386538343a3a2f33322d3438203d3e20323733343331.roa
File:                     323830343a386538343a3a2f33322d3438203d3e20323733343331.roa (raw, json)
Hash identifier:          77wbj+uTmMC6WC8rgAYg5mqgOPclQ68Fm9w9WtVJ1xU=
Subject key identifier:   4D:0D:DC:0D:B3:BA:8F:7B:C6:C2:6B:CD:50:F7:60:63:18:80:C6:6E
Certificate issuer:       /CN=8DEE0F8E4CDFFE10FD1E009BCBA0B7375FECBF6C
Certificate serial:       48644136DACAAB8C0E4ADAC3DBAE82FB74126DB9
Authority key identifier: 8D:EE:0F:8E:4C:DF:FE:10:FD:1E:00:9B:CB:A0:B7:37:5F:EC:BF:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DEE0F8E4CDFFE10FD1E009BCBA0B7375FECBF6C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/323830343a386538343a3a2f33322d3438203d3e20323733343331.roa
Signing time:             Wed 17 Apr 2024 18:11:49 +0000
ROA not before:           Wed 17 Apr 2024 18:06:49 +0000
ROA not after:            Wed 16 Apr 2025 18:11:49 +0000
asID:                     273431
IP address blocks:        2804:8e84::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:64:41:36:da:ca:ab:8c:0e:4a:da:c3:db:ae:82:fb:74:12:6d:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DEE0F8E4CDFFE10FD1E009BCBA0B7375FECBF6C
        Validity
            Not Before: Apr 17 18:06:49 2024 GMT
            Not After : Apr 16 18:11:49 2025 GMT
        Subject: CN=4D0DDC0DB3BA8F7BC6C26BCD50F760631880C66E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:91:34:f9:02:66:50:d7:24:c1:16:da:7d:67:
                    44:dc:74:7d:07:aa:f7:a1:eb:82:5f:f5:6f:65:37:
                    87:f5:98:ee:a7:b0:c3:63:bd:21:ab:de:88:5a:12:
                    d1:c7:5f:8d:b4:15:1b:bf:27:29:7e:0e:10:c2:06:
                    fb:f4:42:a7:bc:13:7a:64:21:d9:c8:ea:39:d5:1b:
                    6e:da:c1:f3:7e:4a:24:ff:fc:5a:c8:34:1d:c9:f8:
                    43:c4:9a:92:c5:b1:5a:61:1a:a6:a5:6e:30:0b:e0:
                    3a:e4:fa:2c:d6:15:a7:89:41:68:43:12:59:10:67:
                    d1:99:67:ea:03:b9:dc:54:2d:4e:63:35:1f:94:5a:
                    2a:fe:91:46:dd:b0:a6:c7:58:b1:7e:a2:1e:23:92:
                    9f:9c:e3:e2:21:0b:ae:57:9c:ab:0d:0b:5b:f6:57:
                    a8:ed:03:ba:47:e0:63:94:be:c8:fe:fa:9d:9b:37:
                    2c:3c:42:fe:33:ef:b9:cb:e5:58:fa:5b:72:ff:3f:
                    d4:b2:89:08:4a:08:df:3d:de:dd:64:1b:6c:37:d0:
                    49:f5:67:87:5a:2a:0f:d1:19:31:60:24:85:b8:22:
                    91:29:2f:ca:eb:75:01:a5:67:d4:08:62:e8:c4:10:
                    91:97:5e:fe:fa:47:28:4d:ec:93:22:75:de:fc:28:
                    83:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:0D:DC:0D:B3:BA:8F:7B:C6:C2:6B:CD:50:F7:60:63:18:80:C6:6E
            X509v3 Authority Key Identifier:
                keyid:8D:EE:0F:8E:4C:DF:FE:10:FD:1E:00:9B:CB:A0:B7:37:5F:EC:BF:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/8DEE0F8E4CDFFE10FD1E009BCBA0B7375FECBF6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DEE0F8E4CDFFE10FD1E009BCBA0B7375FECBF6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/323830343a386538343a3a2f33322d3438203d3e20323733343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e84::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:67:6a:ad:36:c6:e2:a8:10:4b:76:f3:5e:c0:42:ff:5e:45:
         32:58:e5:2e:07:3d:69:1a:2e:c8:05:51:e5:f9:a0:0f:36:7b:
         18:5d:0c:30:62:df:1d:0c:b1:ca:5f:87:a5:5c:9d:82:53:d6:
         f8:18:69:fe:12:18:a7:fb:dc:eb:26:67:e4:fd:74:e0:55:0c:
         0f:76:66:50:3f:8a:ee:33:fb:e8:bb:54:30:8a:6b:01:22:d1:
         8e:5d:1b:b0:3f:3c:f7:71:e6:5a:45:11:e8:6c:c4:bd:55:ff:
         a2:34:15:51:ac:60:e4:5b:2f:cf:18:ce:1f:1d:4e:b8:c0:63:
         55:ee:45:6d:bb:63:e5:b8:f7:19:93:2f:18:fc:a9:89:eb:1a:
         df:5b:32:8f:8d:78:7c:11:3e:d3:a0:1c:4f:98:d2:02:2e:73:
         4b:8a:e3:34:ae:ea:89:56:82:cf:ed:56:f1:17:77:ff:c2:d8:
         2d:20:2c:05:08:26:8b:35:51:17:a1:38:e9:79:da:80:9d:60:
         40:7a:8a:e8:df:0c:29:5a:89:61:11:12:5e:c5:9e:58:46:20:
         d2:5c:d9:e8:2c:93:af:19:8f:13:3d:f6:14:0d:8f:80:21:d3:
         0c:36:94:4a:7f:cc:f8:89:16:ae:11:1b:5d:fb:4a:73:df:35:
         0e:ad:59:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----