Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/0/323830343a326461343a3a2f33352d3335203d3e20323635323934.roa
File:                     323830343a326461343a3a2f33352d3335203d3e20323635323934.roa (raw, json)
Hash identifier:          R1giaKC0sqqItEUPJxuuctAOVhoPjZFxiqre141DmZU=
Subject key identifier:   85:54:11:0F:5C:7B:28:54:D8:57:BC:22:33:E4:31:6E:80:EE:14:55
Certificate issuer:       /CN=1E94701DD600A862C548840197A22D5CEE4B2FDA
Certificate serial:       54C2C8C30455D6A3DB801A25CEE66D78549EBD57
Authority key identifier: 1E:94:70:1D:D6:00:A8:62:C5:48:84:01:97:A2:2D:5C:EE:4B:2F:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E94701DD600A862C548840197A22D5CEE4B2FDA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/0/323830343a326461343a3a2f33352d3335203d3e20323635323934.roa
Signing time:             Wed 13 Mar 2024 19:13:59 +0000
ROA not before:           Wed 13 Mar 2024 19:08:59 +0000
ROA not after:            Wed 12 Mar 2025 19:13:59 +0000
asID:                     265294
IP address blocks:        2804:2da4::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:c2:c8:c3:04:55:d6:a3:db:80:1a:25:ce:e6:6d:78:54:9e:bd:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E94701DD600A862C548840197A22D5CEE4B2FDA
        Validity
            Not Before: Mar 13 19:08:59 2024 GMT
            Not After : Mar 12 19:13:59 2025 GMT
        Subject: CN=8554110F5C7B2854D857BC2233E4316E80EE1455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:67:8b:cf:fa:94:aa:87:5c:dd:0d:b9:43:3c:
                    16:cc:f3:97:dc:23:86:2a:45:bd:3c:df:8e:4f:80:
                    db:a2:ca:5f:94:fa:a4:bb:a1:de:5f:ea:6f:c1:3a:
                    18:d9:39:d7:43:0a:ce:45:ec:f2:27:9c:1f:b7:26:
                    d9:49:d4:db:83:1d:23:16:38:86:94:a5:6e:95:d3:
                    8e:ca:7b:71:63:84:b8:d3:fc:1f:ca:16:f8:09:aa:
                    f6:aa:2c:52:d2:d2:96:05:e5:0e:d6:04:44:5f:c3:
                    82:46:c8:99:fd:26:01:b9:66:22:3d:00:22:9d:94:
                    28:bd:96:e6:53:7d:29:ab:32:b7:73:14:31:3d:a1:
                    90:7d:a3:ed:b6:04:f9:ec:ba:b3:f7:d4:c2:1f:3b:
                    0e:93:af:14:ae:f7:d1:0f:07:5c:32:44:59:a9:bc:
                    34:93:75:ba:05:a8:7e:16:0c:44:25:fc:77:53:d9:
                    16:e5:c5:fe:b1:4b:a8:c0:9f:cf:ef:99:a0:cb:4a:
                    59:6a:db:ea:11:6c:c7:56:9a:90:09:ab:27:fb:3b:
                    77:b1:1c:b6:a0:db:c6:de:99:b7:e7:04:a7:80:2a:
                    0a:b3:c2:18:72:26:16:4b:b4:f6:43:47:a8:57:ab:
                    03:41:1c:96:ca:7b:aa:16:69:34:0a:55:32:2a:81:
                    2a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:54:11:0F:5C:7B:28:54:D8:57:BC:22:33:E4:31:6E:80:EE:14:55
            X509v3 Authority Key Identifier:
                keyid:1E:94:70:1D:D6:00:A8:62:C5:48:84:01:97:A2:2D:5C:EE:4B:2F:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/0/1E94701DD600A862C548840197A22D5CEE4B2FDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E94701DD600A862C548840197A22D5CEE4B2FDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/0/323830343a326461343a3a2f33352d3335203d3e20323635323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2da4::/35

    Signature Algorithm: sha256WithRSAEncryption
         54:ce:af:cd:c8:98:53:de:b5:7d:e7:cf:19:bf:d6:e3:fb:01:
         7c:f8:5f:d9:81:82:2b:e7:1d:61:68:a3:b2:bb:da:07:33:65:
         c5:d1:4f:88:b9:a7:48:77:39:70:22:f1:56:9c:8a:59:b7:70:
         e3:20:8a:70:c3:53:ed:f9:64:9a:48:60:e6:2e:25:0b:35:7c:
         0b:76:c8:ae:01:a6:f6:d4:09:4f:b8:05:53:64:4e:8a:03:04:
         44:45:de:6d:77:94:bf:ae:af:a3:ce:0f:a3:21:94:16:f7:0a:
         3e:29:82:75:9a:1b:02:27:c8:33:53:ae:5a:84:86:c1:ea:f1:
         04:fc:ab:53:64:a9:9c:f2:29:1a:09:bf:21:fc:29:d2:3e:6b:
         6f:e7:5a:2b:62:b0:a2:85:05:48:9c:c6:57:a1:43:00:68:5a:
         44:57:4a:86:ca:dd:76:6c:9f:d3:48:ca:95:f9:18:90:f1:33:
         f8:ee:15:9f:81:52:e1:5f:0e:03:30:07:c3:04:c1:6d:ea:7f:
         32:92:d5:e7:c7:28:3f:9b:5a:8a:01:d7:77:24:16:d8:32:b3:
         27:a8:5a:4e:0b:5b:61:6e:c7:90:1c:28:8c:2a:f8:39:8b:ba:
         6a:ac:82:3f:d6:6b:78:31:70:59:b0:ca:cb:c2:42:13:7c:2f:
         d9:81:a8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----