Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/0/323830343a326461343a383030303a3a2f33332d3333203d3e20323635323934.roa
File:                     323830343a326461343a383030303a3a2f33332d3333203d3e20323635323934.roa (raw, json)
Hash identifier:          xNAT+qT69NTk5zRb+XyKFc7pgAXUXvB1EvWzWY92jzQ=
Subject key identifier:   03:B9:2A:CB:1B:CD:CF:7E:29:E5:1A:C4:C0:C8:F6:CB:C0:B8:80:39
Certificate issuer:       /CN=1E94701DD600A862C548840197A22D5CEE4B2FDA
Certificate serial:       32265D7030D5C33F73A2367A4AA80951841E7DD9
Authority key identifier: 1E:94:70:1D:D6:00:A8:62:C5:48:84:01:97:A2:2D:5C:EE:4B:2F:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E94701DD600A862C548840197A22D5CEE4B2FDA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/0/323830343a326461343a383030303a3a2f33332d3333203d3e20323635323934.roa
Signing time:             Thu 15 Feb 2024 18:00:00 +0000
ROA not before:           Thu 15 Feb 2024 17:55:00 +0000
ROA not after:            Thu 13 Feb 2025 18:00:00 +0000
asID:                     265294
IP address blocks:        2804:2da4:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:26:5d:70:30:d5:c3:3f:73:a2:36:7a:4a:a8:09:51:84:1e:7d:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E94701DD600A862C548840197A22D5CEE4B2FDA
        Validity
            Not Before: Feb 15 17:55:00 2024 GMT
            Not After : Feb 13 18:00:00 2025 GMT
        Subject: CN=03B92ACB1BCDCF7E29E51AC4C0C8F6CBC0B88039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9e:07:13:8e:05:6c:d2:36:89:9f:e1:fd:e0:
                    ee:a0:60:c7:bc:de:14:78:d9:dc:30:98:f4:24:63:
                    69:ce:59:58:f9:ff:c1:58:be:e9:a9:07:16:37:58:
                    5b:7f:16:39:e7:4c:e9:2d:c9:80:6c:82:3e:02:e5:
                    78:34:7d:c8:66:13:4e:30:1e:63:85:33:99:2a:22:
                    a9:59:b1:eb:b0:ec:fb:58:aa:a2:ce:b9:a5:7d:2b:
                    4a:d2:f4:58:8c:42:0c:01:55:f7:4d:ee:a3:fe:3f:
                    81:55:c7:fb:d4:1e:75:89:77:eb:97:5e:8c:d6:05:
                    4f:27:03:b2:16:51:42:26:69:99:8b:b8:9c:de:43:
                    6b:c0:78:36:7f:1a:33:3c:aa:07:14:96:95:68:54:
                    30:54:fc:ee:62:89:80:f5:66:46:0f:74:04:f9:54:
                    c2:0f:b9:89:60:0a:08:63:c7:cb:2b:88:89:e0:69:
                    f8:42:b0:44:40:fc:75:74:a8:1c:fc:8a:da:32:4a:
                    59:cf:bf:49:f3:5f:01:16:a1:92:8b:c4:0b:2b:f3:
                    3b:ee:f3:e2:a2:70:3c:64:8e:0c:fd:18:91:85:22:
                    3c:0b:32:dc:cc:82:41:39:a8:fa:94:f5:1b:80:ca:
                    3c:33:0c:d9:41:1f:2f:7a:c7:71:42:a0:38:71:7c:
                    54:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B9:2A:CB:1B:CD:CF:7E:29:E5:1A:C4:C0:C8:F6:CB:C0:B8:80:39
            X509v3 Authority Key Identifier:
                keyid:1E:94:70:1D:D6:00:A8:62:C5:48:84:01:97:A2:2D:5C:EE:4B:2F:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/0/1E94701DD600A862C548840197A22D5CEE4B2FDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E94701DD600A862C548840197A22D5CEE4B2FDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/0/323830343a326461343a383030303a3a2f33332d3333203d3e20323635323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2da4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         00:a7:12:d3:b5:a9:0f:2c:0b:7e:ed:b5:9d:d5:e9:f0:f3:24:
         29:93:5f:17:ff:f3:62:f1:9e:b8:a8:2d:bf:dc:3a:92:6b:7c:
         32:44:16:7e:69:be:40:1a:3f:b8:ce:65:d8:e2:4f:7e:6b:ed:
         c2:67:2f:e0:ed:ad:5f:71:0f:d1:66:5e:f6:a8:2e:be:43:8c:
         15:e1:a8:9e:6b:3b:7b:35:04:58:5f:41:c5:39:25:97:56:11:
         15:56:1b:3e:ae:01:e9:df:ec:17:86:f4:5a:9e:d8:e6:c8:61:
         9b:96:9e:af:13:8b:89:84:09:b4:17:bd:55:38:d0:3b:b7:4d:
         77:76:bc:e6:02:2d:14:fd:66:42:37:a5:95:59:40:26:6f:84:
         bb:fa:ad:1c:2c:25:15:e5:84:d4:d3:8e:7d:b9:38:0a:db:b8:
         36:df:41:6d:9a:bb:3d:29:18:d0:43:6d:20:45:f6:18:3d:39:
         96:a7:16:df:66:cc:b1:71:32:2b:ac:99:af:85:51:e3:1f:28:
         59:a6:97:fa:6b:ae:0a:3f:0d:2d:0d:8d:b2:01:68:b9:7d:ac:
         98:f1:89:22:c4:4d:ab:04:15:af:6f:1e:5b:6e:9f:ca:8c:1a:
         62:65:2c:01:67:fd:e1:fd:f8:6d:f0:e4:8a:8e:25:77:70:ea:
         93:d0:6b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----