Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/323830343a356266303a3a2f33322d313238203d3e20323638383738.roa
File:                     323830343a356266303a3a2f33322d313238203d3e20323638383738.roa (raw, json)
Hash identifier:          NQw3XxVRO6itRxQwM+91pR7grxoer5w/AF6ch5o8jn0=
Subject key identifier:   58:8E:EA:BE:B4:2B:D2:DA:30:F1:68:36:6B:3B:58:A7:AB:FB:0F:C9
Certificate issuer:       /CN=1C51832A02CFF58C26F9309C52477BBF3C03E47E
Certificate serial:       4891FC40D80BD07F1DAFA247C839BF4E7CFE5973
Authority key identifier: 1C:51:83:2A:02:CF:F5:8C:26:F9:30:9C:52:47:7B:BF:3C:03:E4:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C51832A02CFF58C26F9309C52477BBF3C03E47E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/323830343a356266303a3a2f33322d313238203d3e20323638383738.roa
Signing time:             Mon 18 Mar 2024 10:42:15 +0000
ROA not before:           Mon 18 Mar 2024 10:37:15 +0000
ROA not after:            Mon 17 Mar 2025 10:42:15 +0000
asID:                     268878
IP address blocks:        2804:5bf0::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:91:fc:40:d8:0b:d0:7f:1d:af:a2:47:c8:39:bf:4e:7c:fe:59:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C51832A02CFF58C26F9309C52477BBF3C03E47E
        Validity
            Not Before: Mar 18 10:37:15 2024 GMT
            Not After : Mar 17 10:42:15 2025 GMT
        Subject: CN=588EEABEB42BD2DA30F168366B3B58A7ABFB0FC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fe:30:b4:a6:c5:40:c8:2c:0c:f9:f4:fe:e4:
                    32:10:76:13:9e:fc:93:e9:b6:03:ad:ee:76:c6:0f:
                    00:d7:65:f9:88:9f:98:06:7c:89:2b:b9:85:57:6f:
                    9d:94:ff:1b:fe:c4:89:f2:fa:26:c6:ec:8f:9c:d2:
                    a5:e5:aa:6a:96:c3:2a:96:19:ae:53:b0:b2:c4:47:
                    8e:d8:1b:69:63:5f:ef:c6:f3:2a:af:49:6c:11:77:
                    21:e1:c7:a6:2f:dc:b9:8a:25:b4:6f:e0:77:ac:65:
                    49:40:ac:db:62:61:ef:3c:3d:b5:c2:9c:0a:d5:26:
                    af:58:de:76:47:9f:dd:0a:57:0c:f7:de:46:fb:d4:
                    71:6a:a0:f9:9f:fa:8b:63:be:be:47:dc:ea:35:86:
                    42:46:04:bc:16:19:4e:a4:1f:de:67:f5:6a:b8:56:
                    51:76:53:56:50:08:e0:40:4c:61:f3:f0:7b:f9:eb:
                    78:47:d3:ee:cb:3b:64:09:e5:a5:c8:eb:79:fa:20:
                    06:64:12:44:19:3a:31:12:2f:be:cb:19:35:c9:45:
                    5f:e5:e7:13:42:50:fc:a3:17:b8:4e:ce:e9:d6:bd:
                    81:3e:2c:0f:05:a3:db:b1:fe:97:e2:4c:d6:52:f0:
                    c5:35:e6:41:70:84:d0:c2:b0:34:84:4b:bd:89:e7:
                    33:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:8E:EA:BE:B4:2B:D2:DA:30:F1:68:36:6B:3B:58:A7:AB:FB:0F:C9
            X509v3 Authority Key Identifier:
                keyid:1C:51:83:2A:02:CF:F5:8C:26:F9:30:9C:52:47:7B:BF:3C:03:E4:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/1C51832A02CFF58C26F9309C52477BBF3C03E47E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C51832A02CFF58C26F9309C52477BBF3C03E47E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/323830343a356266303a3a2f33322d313238203d3e20323638383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5bf0::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:71:33:d9:c1:73:46:d3:c4:62:f5:ee:f4:42:b8:11:de:64:
         db:6a:b9:a6:24:21:2a:df:71:00:c6:06:0f:30:9c:65:71:2c:
         52:f9:ac:b3:9d:9a:3d:19:33:bb:08:d1:d6:03:1e:8b:cf:4b:
         30:ff:a2:63:58:00:e9:7c:ae:6c:dd:d4:00:c1:ca:30:83:c2:
         40:78:41:6e:f3:2f:83:f6:b9:f2:de:e8:01:f5:92:3f:38:fa:
         4c:dc:d0:31:9c:36:fa:ca:64:16:38:8b:10:a8:5c:b4:13:d0:
         8d:e3:9c:49:44:c9:fa:78:0c:39:f0:58:73:6e:71:f9:50:54:
         54:c5:ab:f7:d8:75:de:d5:1f:43:45:59:7b:e2:0b:75:cc:e6:
         db:b4:05:e5:15:31:79:45:2b:ac:4f:b6:80:74:16:82:fc:6a:
         9a:77:15:4e:63:24:a3:5a:54:2b:2f:29:56:2f:e0:03:37:14:
         ae:01:95:a3:fc:4d:23:72:db:56:24:bb:54:12:41:8e:82:8e:
         27:75:4e:da:22:0e:3c:c0:db:eb:dc:4e:e6:3a:2b:38:dd:2b:
         4f:99:de:22:7d:a8:3a:38:5d:bf:98:0d:64:b4:a1:82:3d:8f:
         2c:ec:0d:bf:33:b5:8d:20:c0:26:eb:86:42:98:90:74:f2:40:
         e6:73:56:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----