Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/0/323830343a336566383a3a2f33322d3332203d3e20323636363332.roa
File:                     323830343a336566383a3a2f33322d3332203d3e20323636363332.roa (raw, json)
Hash identifier:          DhTewN6GAxjJViaNM+WpaJkScofoSq4fgR4qJGGYofk=
Subject key identifier:   4B:CA:AC:5D:5C:DC:5E:D4:88:53:5D:BB:4B:B9:CF:DA:C3:1A:A2:3C
Certificate issuer:       /CN=74ED85142F26302A125E71A3E55B2063509E7AA3
Certificate serial:       386634537964E5A1B266A1AD0AD69E4F6513835E
Authority key identifier: 74:ED:85:14:2F:26:30:2A:12:5E:71:A3:E5:5B:20:63:50:9E:7A:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74ED85142F26302A125E71A3E55B2063509E7AA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/0/323830343a336566383a3a2f33322d3332203d3e20323636363332.roa
Signing time:             Tue 16 May 2023 12:22:49 +0000
ROA not before:           Tue 16 May 2023 12:17:49 +0000
ROA not after:            Tue 14 May 2024 12:22:49 +0000
asID:                     266632
IP address blocks:        2804:3ef8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:66:34:53:79:64:e5:a1:b2:66:a1:ad:0a:d6:9e:4f:65:13:83:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74ED85142F26302A125E71A3E55B2063509E7AA3
        Validity
            Not Before: May 16 12:17:49 2023 GMT
            Not After : May 14 12:22:49 2024 GMT
        Subject: CN=4BCAAC5D5CDC5ED488535DBB4BB9CFDAC31AA23C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:33:cf:4e:bb:66:88:88:d0:10:18:51:35:69:
                    a2:c2:f7:c4:22:08:14:67:86:e8:85:5e:c7:15:c8:
                    d0:25:19:cb:a1:09:b8:21:ae:bd:35:a2:be:8f:68:
                    f3:d9:bf:83:19:7a:26:a8:19:bb:1c:a3:26:3c:57:
                    d7:bf:c2:af:5f:12:65:9f:50:8b:9e:a7:f1:44:ca:
                    e6:35:15:d9:2d:bf:3a:b3:3e:19:a9:5c:b8:aa:35:
                    7e:f0:50:fc:33:13:fe:46:c7:4e:0b:b3:e9:83:e8:
                    c6:a9:6c:8f:fe:a5:8d:ba:e5:e2:92:51:0f:76:56:
                    53:08:1e:a0:5e:46:d3:d8:f6:c0:4b:4e:7f:b0:a4:
                    32:4f:76:7d:54:a9:6e:72:a6:b1:a0:17:45:bd:67:
                    00:80:3e:f6:2e:33:cc:26:66:09:58:56:dd:fc:87:
                    b1:f3:dd:1a:4a:cf:6a:8c:7b:c8:38:7f:01:33:6f:
                    41:61:cc:2f:ac:26:b7:32:3d:45:5b:40:ae:53:c1:
                    57:78:7b:04:d0:ba:75:f5:b9:8d:c9:87:6a:cd:7a:
                    5c:50:22:f7:4b:ad:90:e3:59:d0:1c:33:cc:57:56:
                    3d:4f:52:5a:75:c5:d5:82:0d:fb:39:e7:23:cc:b7:
                    e5:b4:30:c2:c2:4b:f8:a2:b8:34:1a:91:ba:28:b7:
                    de:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:CA:AC:5D:5C:DC:5E:D4:88:53:5D:BB:4B:B9:CF:DA:C3:1A:A2:3C
            X509v3 Authority Key Identifier:
                keyid:74:ED:85:14:2F:26:30:2A:12:5E:71:A3:E5:5B:20:63:50:9E:7A:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/0/74ED85142F26302A125E71A3E55B2063509E7AA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74ED85142F26302A125E71A3E55B2063509E7AA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/0/323830343a336566383a3a2f33322d3332203d3e20323636363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ef8::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:cb:6d:01:55:37:90:ea:fc:72:28:0d:64:96:46:be:a7:8b:
         6c:f9:3b:0d:c3:b1:92:30:5e:26:3c:ad:1c:f9:c9:1b:0a:11:
         50:70:7e:58:96:61:be:1c:a5:25:c2:6e:03:99:ca:9e:f6:fa:
         39:c3:4b:1c:cd:69:13:f1:f7:25:b5:23:1e:d1:20:90:5e:8a:
         c5:b7:d4:28:d9:bb:12:59:4b:a4:d6:a5:a6:87:0f:ae:94:59:
         d2:3e:5a:62:64:46:7e:ab:3e:c9:4c:2d:e9:bc:4d:5e:83:99:
         68:e9:8e:da:70:e8:78:93:26:88:b3:dd:98:b9:67:33:5a:92:
         7c:2a:c6:20:4e:8d:dc:9b:53:d9:b4:c5:3f:bd:32:9f:e4:92:
         75:4a:e3:58:3a:34:09:af:f3:d0:0a:91:55:d7:57:7f:3b:38:
         d2:64:15:32:32:61:c4:ff:13:3d:b3:62:80:e3:57:25:09:0b:
         03:89:9d:2f:2b:92:17:bc:f5:79:06:b3:7c:89:83:e5:a8:5b:
         99:d9:a4:83:e3:e7:82:7b:43:7d:46:e7:c8:b1:25:62:00:45:
         6b:81:73:cb:3f:f9:32:d1:58:47:68:bf:1c:ef:27:2a:a4:37:
         11:bf:92:5a:36:11:be:b7:f9:cf:98:02:97:fe:b6:c4:ef:dc:
         d5:23:cd:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----