Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a3a2f33342d3334203d3e20323638363738.roa
File:                     323830343a353465633a3a2f33342d3334203d3e20323638363738.roa (raw, json)
Hash identifier:          MfPXgZu/rfJDIMOrg37Flk1U2wIoBe9MWEnqOSCgsoU=
Subject key identifier:   D3:40:82:CD:78:95:6F:EE:F3:62:64:70:20:F4:77:26:98:63:2E:DE
Certificate issuer:       /CN=16E394B7AD89042F1F54B813EC0DA6DE112EC0D1
Certificate serial:       474849A410CB658E731F3DC17E7CC0BE87BA6E24
Authority key identifier: 16:E3:94:B7:AD:89:04:2F:1F:54:B8:13:EC:0D:A6:DE:11:2E:C0:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16E394B7AD89042F1F54B813EC0DA6DE112EC0D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a3a2f33342d3334203d3e20323638363738.roa
Signing time:             Wed 14 Feb 2024 20:09:47 +0000
ROA not before:           Wed 14 Feb 2024 20:04:47 +0000
ROA not after:            Wed 12 Feb 2025 20:09:47 +0000
asID:                     268678
IP address blocks:        2804:54ec::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:48:49:a4:10:cb:65:8e:73:1f:3d:c1:7e:7c:c0:be:87:ba:6e:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16E394B7AD89042F1F54B813EC0DA6DE112EC0D1
        Validity
            Not Before: Feb 14 20:04:47 2024 GMT
            Not After : Feb 12 20:09:47 2025 GMT
        Subject: CN=D34082CD78956FEEF362647020F4772698632EDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f1:d1:7f:8f:77:43:28:4d:cf:28:4b:b0:b9:
                    0d:7c:2a:70:87:ca:c7:07:68:17:9d:73:67:e6:29:
                    9c:a9:1e:f7:c5:f0:8e:d8:82:14:8f:d3:27:12:54:
                    ab:de:24:0b:8a:37:1b:b0:0d:86:82:7f:99:05:fd:
                    17:e4:d6:c6:a6:4a:c0:82:68:97:ff:d4:cc:5a:20:
                    6d:3c:1d:63:8b:a3:e0:e5:83:a8:09:db:6e:63:d5:
                    f7:dc:10:cc:9a:19:67:8f:7b:00:cb:87:d5:a1:cd:
                    01:bc:d5:14:6d:e1:e3:93:50:fc:2a:61:2a:5c:9c:
                    be:dc:d3:a2:06:d8:76:07:3b:92:07:91:e1:dc:28:
                    d4:29:b8:4a:4e:2c:b3:52:1c:be:0a:d7:7b:7c:4a:
                    9e:15:85:ab:41:2d:87:27:3d:d9:89:2c:11:89:43:
                    e2:6a:6a:5b:05:5b:a9:9e:98:33:3b:f9:4b:04:8e:
                    cf:64:27:8f:c4:26:97:5d:ea:b2:76:3d:a5:4f:5e:
                    3f:18:66:a4:d8:26:92:29:7c:ae:6b:eb:41:80:8b:
                    d3:ff:70:19:31:51:f1:da:77:8d:2c:25:cd:2a:91:
                    f7:b3:95:d5:1c:b1:b2:f7:1e:3a:59:0d:76:39:33:
                    4a:e1:b4:42:f8:0c:ff:6d:c8:d9:9a:f4:b6:59:46:
                    af:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:40:82:CD:78:95:6F:EE:F3:62:64:70:20:F4:77:26:98:63:2E:DE
            X509v3 Authority Key Identifier:
                keyid:16:E3:94:B7:AD:89:04:2F:1F:54:B8:13:EC:0D:A6:DE:11:2E:C0:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/16E394B7AD89042F1F54B813EC0DA6DE112EC0D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16E394B7AD89042F1F54B813EC0DA6DE112EC0D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a3a2f33342d3334203d3e20323638363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54ec::/34

    Signature Algorithm: sha256WithRSAEncryption
         69:0e:90:14:9d:40:7d:9f:80:8b:e7:9b:8a:08:7b:f7:64:06:
         1f:a5:53:98:d7:d9:5a:ee:0e:60:e9:75:af:d4:42:b3:3d:5b:
         fd:29:ff:6c:f3:24:7b:08:30:e7:70:d2:46:82:cc:58:75:a5:
         03:b8:c6:96:58:7b:d8:03:15:19:c5:bf:bc:60:af:86:ec:6e:
         db:48:c1:11:06:50:4e:54:9a:b4:3e:ec:a5:b3:b0:83:30:a0:
         d5:db:b0:3f:fd:de:44:40:74:c9:4c:ba:41:34:c6:2e:ea:b8:
         b3:e6:33:91:07:fe:70:93:2d:e7:b5:f1:a5:69:a4:4a:60:ee:
         fb:06:d8:3a:74:97:44:9b:1f:ed:11:f5:3b:3a:cf:b6:ff:a5:
         51:b6:00:06:0b:a8:a6:dc:c3:7d:fe:41:e7:ea:de:6c:da:33:
         f9:c3:33:c7:d6:fb:74:0f:1d:0a:bd:86:ea:ec:5f:0a:5d:a5:
         b0:3d:c3:4b:7e:78:62:eb:0c:0f:51:7e:dc:ec:2a:5a:cd:ef:
         b2:9c:81:b3:09:05:91:81:f5:5c:e0:07:50:a2:84:48:84:3c:
         b9:1f:bc:27:2a:ed:1a:18:83:b6:d3:d6:23:ed:f0:93:04:1e:
         ad:53:c3:04:14:80:f3:53:5b:c8:55:0c:dd:48:ff:8a:84:76:
         30:36:0a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----