Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6E9EddmdqcWcGuEiL7vwDQBmZDDe32MvD9d1Pe9NoeTC/1/323830343a353537633a3a2f33332d3333203d3e20323637393337.roa
File:                     323830343a353537633a3a2f33332d3333203d3e20323637393337.roa (raw, json)
Hash identifier:          rn1uqtzDTU1XXcnUOx4rRojIwoYfuWtGr2JmOxo0I3E=
Subject key identifier:   A3:C8:E8:0D:E6:FE:37:7B:0E:F6:A5:07:D1:9C:39:97:B6:9C:6B:79
Certificate issuer:       /CN=0E03DE5B21FA28BB4B3A9BDC02F32773D343AB08
Certificate serial:       350EA0037B30E3657CE51EAAEAD0E07DAB00743E
Authority key identifier: 0E:03:DE:5B:21:FA:28:BB:4B:3A:9B:DC:02:F3:27:73:D3:43:AB:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E03DE5B21FA28BB4B3A9BDC02F32773D343AB08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6E9EddmdqcWcGuEiL7vwDQBmZDDe32MvD9d1Pe9NoeTC/1/323830343a353537633a3a2f33332d3333203d3e20323637393337.roa
Signing time:             Thu 04 Apr 2024 08:24:02 +0000
ROA not before:           Thu 04 Apr 2024 08:19:02 +0000
ROA not after:            Thu 03 Apr 2025 08:24:02 +0000
asID:                     267937
IP address blocks:        2804:557c::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:0e:a0:03:7b:30:e3:65:7c:e5:1e:aa:ea:d0:e0:7d:ab:00:74:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E03DE5B21FA28BB4B3A9BDC02F32773D343AB08
        Validity
            Not Before: Apr  4 08:19:02 2024 GMT
            Not After : Apr  3 08:24:02 2025 GMT
        Subject: CN=A3C8E80DE6FE377B0EF6A507D19C3997B69C6B79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b6:5e:23:0c:e6:b7:df:c2:68:5a:fc:d0:80:
                    fc:f4:a8:69:8a:c5:74:64:0f:e9:c6:ef:de:05:39:
                    3b:60:be:80:ee:d0:5a:46:74:39:9a:4f:50:40:a9:
                    e9:86:74:db:be:4c:76:5c:16:60:bc:d6:f7:3f:6d:
                    54:a3:11:00:ff:04:e3:ff:bf:60:b4:8a:75:c6:98:
                    0c:5a:d9:30:8e:73:da:2d:9b:5e:23:ce:7f:1d:64:
                    e5:8c:27:99:d8:34:d1:37:e9:d5:06:c8:37:b6:de:
                    0b:d9:77:a2:3e:08:3c:8e:ef:ac:a8:66:aa:61:52:
                    b7:9a:82:20:42:72:7c:b4:76:4b:f2:d8:8d:07:46:
                    b8:d9:5f:1e:48:54:e9:dd:56:9f:7c:49:cc:77:5a:
                    4e:36:a5:e7:a4:9b:50:38:a1:a5:e5:79:7c:9c:f8:
                    2f:20:85:f7:e6:fc:82:fe:6d:02:d0:c0:9f:c5:51:
                    ef:6e:8b:2c:60:54:b4:7a:ca:3e:66:2f:ff:0a:2f:
                    2a:f0:80:fe:ed:1c:a0:38:db:81:cb:78:ac:8e:3a:
                    e5:2c:02:36:0c:f4:23:7e:a8:7a:a0:37:5d:be:4a:
                    3b:ef:09:72:7e:db:36:3f:0c:02:cd:0b:c9:81:00:
                    a5:46:ac:fa:93:15:d1:5e:09:d8:3e:3e:1e:9e:12:
                    e2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C8:E8:0D:E6:FE:37:7B:0E:F6:A5:07:D1:9C:39:97:B6:9C:6B:79
            X509v3 Authority Key Identifier:
                keyid:0E:03:DE:5B:21:FA:28:BB:4B:3A:9B:DC:02:F3:27:73:D3:43:AB:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6E9EddmdqcWcGuEiL7vwDQBmZDDe32MvD9d1Pe9NoeTC/1/0E03DE5B21FA28BB4B3A9BDC02F32773D343AB08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E03DE5B21FA28BB4B3A9BDC02F32773D343AB08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6E9EddmdqcWcGuEiL7vwDQBmZDDe32MvD9d1Pe9NoeTC/1/323830343a353537633a3a2f33332d3333203d3e20323637393337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:557c::/33

    Signature Algorithm: sha256WithRSAEncryption
         6e:15:2c:70:0d:08:ab:83:0c:53:5d:4d:eb:97:48:1b:71:07:
         dc:25:24:a6:bc:59:61:33:25:bc:a0:b9:44:43:7a:11:4f:fc:
         84:7e:7e:3f:bb:1c:b7:d1:37:4e:cd:4d:3a:27:f9:47:6e:a2:
         60:11:ed:ee:21:be:cf:62:8f:df:fb:73:a9:93:c5:b6:49:fd:
         dd:f2:d7:2e:0f:95:4e:ec:9f:b5:7c:76:db:e3:0a:91:b0:af:
         29:23:43:d7:e1:9d:2d:3d:ac:a0:67:01:53:c2:08:65:f0:cd:
         2b:e2:7f:32:0a:c2:f8:cc:83:d6:42:49:78:08:78:5c:fe:ca:
         63:ec:3c:dc:e0:ce:31:94:e3:2d:b0:d5:89:f5:7a:53:3b:c9:
         ca:58:fe:d9:0c:26:b3:b6:22:9f:7b:13:45:60:47:c8:0b:ce:
         80:e7:de:ac:ab:24:a2:45:9e:79:96:9f:db:46:2e:bb:88:0c:
         dd:9c:12:76:6f:7f:20:42:b7:06:89:8b:7f:47:86:a0:55:4e:
         1d:20:e8:66:90:3d:54:98:94:82:ae:a4:a1:b4:9f:21:be:c2:
         9c:4a:50:04:e0:69:1e:44:d7:49:b6:81:95:6b:f0:aa:85:fc:
         f0:b3:50:e2:87:2a:e5:1f:22:6d:5c:da:5c:70:6c:d2:c2:df:
         83:c8:e3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----