Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/0/323830343a313539343a3a2f33322d3332203d3e20323633333936.roa
File:                     323830343a313539343a3a2f33322d3332203d3e20323633333936.roa (raw, json)
Hash identifier:          H4Nm19TK2PBhVL5DdBUC6otDsbr39o0f7yLZs0o/Ji0=
Subject key identifier:   43:02:F0:77:CC:10:FE:C3:42:F4:7A:35:62:66:7F:05:87:47:3B:FA
Certificate issuer:       /CN=533B8335992AC24C92CD2553C5F62AC293DF880D
Certificate serial:       77BAC81D57815829402DE1EB9B2A1C9C9F792DF4
Authority key identifier: 53:3B:83:35:99:2A:C2:4C:92:CD:25:53:C5:F6:2A:C2:93:DF:88:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/533B8335992AC24C92CD2553C5F62AC293DF880D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/0/323830343a313539343a3a2f33322d3332203d3e20323633333936.roa
Signing time:             Thu 16 Nov 2023 13:58:30 +0000
ROA not before:           Thu 16 Nov 2023 13:53:30 +0000
ROA not after:            Thu 14 Nov 2024 13:58:30 +0000
asID:                     263396
IP address blocks:        2804:1594::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ba:c8:1d:57:81:58:29:40:2d:e1:eb:9b:2a:1c:9c:9f:79:2d:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533B8335992AC24C92CD2553C5F62AC293DF880D
        Validity
            Not Before: Nov 16 13:53:30 2023 GMT
            Not After : Nov 14 13:58:30 2024 GMT
        Subject: CN=4302F077CC10FEC342F47A3562667F0587473BFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ba:40:c5:3c:a6:8a:7e:7f:e7:95:09:3a:c7:
                    1e:73:f3:5e:60:26:31:5c:35:63:1b:48:d9:15:6a:
                    ce:95:ff:47:1a:5b:e9:e5:1b:25:5e:34:7a:a3:af:
                    56:48:4c:e7:d8:cc:23:23:fc:07:91:00:d8:55:82:
                    1a:c6:f4:7e:6c:3a:6d:ca:8e:57:a7:78:a6:81:8b:
                    1b:65:31:93:aa:9f:28:62:d1:f2:16:aa:36:d0:37:
                    c4:86:9f:75:54:10:be:6f:5d:2a:30:47:10:25:b2:
                    be:37:3b:6e:8e:f7:8e:e6:fe:57:38:9e:8a:19:4c:
                    9c:67:7a:ea:9b:51:30:13:dc:80:ac:8e:de:f4:78:
                    a2:e0:72:8c:fd:df:b7:2d:ae:f6:91:c9:42:6c:5a:
                    04:af:f6:2f:86:d7:10:71:c6:34:91:e8:19:55:2a:
                    db:3d:e9:21:29:d8:a9:04:44:02:10:1b:72:ab:fd:
                    1b:11:67:18:e3:f1:02:ba:c6:36:b2:ac:66:93:94:
                    8b:25:a6:7a:0a:58:70:9a:af:c3:08:1a:cd:3d:c9:
                    f7:ee:6c:59:19:7a:24:f1:15:1f:2e:ea:0a:37:25:
                    5b:7d:65:5d:28:f1:19:d5:95:22:ca:21:b0:83:32:
                    13:10:3a:79:dc:88:d3:e0:9c:6d:08:24:8d:06:04:
                    35:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:02:F0:77:CC:10:FE:C3:42:F4:7A:35:62:66:7F:05:87:47:3B:FA
            X509v3 Authority Key Identifier:
                keyid:53:3B:83:35:99:2A:C2:4C:92:CD:25:53:C5:F6:2A:C2:93:DF:88:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/0/533B8335992AC24C92CD2553C5F62AC293DF880D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/533B8335992AC24C92CD2553C5F62AC293DF880D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/0/323830343a313539343a3a2f33322d3332203d3e20323633333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1594::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:45:f7:f1:88:f8:99:29:88:fc:a7:6c:f2:c4:3d:f6:4f:54:
         a5:8e:8a:f0:9b:87:b9:13:e7:96:6c:cf:40:47:2b:6f:56:96:
         ba:ff:29:10:44:85:82:df:2f:f8:08:ec:42:a4:45:05:8c:79:
         d6:88:07:20:cb:b8:9f:8b:c8:dc:4b:11:be:c2:b1:14:cb:51:
         e1:8c:45:b9:52:12:ca:43:f3:57:03:7d:a1:c6:96:af:19:10:
         2f:49:d6:9c:1e:be:73:52:0b:cf:1a:ba:ac:51:d9:aa:c1:60:
         5b:c3:c4:78:b4:24:99:18:85:9c:ec:75:88:ad:b0:3a:bf:27:
         05:3c:e5:cd:42:bf:e1:4f:aa:75:58:7d:2b:1e:ba:a1:1f:35:
         11:d3:17:e3:b4:5d:9c:b3:a1:65:f9:a0:10:99:3b:f3:35:a1:
         0e:f9:76:99:36:c5:93:a2:02:2a:3c:0d:25:f6:4d:d0:07:67:
         fe:18:8a:2b:fd:45:ad:18:4d:9c:30:2b:5a:2a:d8:df:5e:9c:
         cb:f9:bc:b6:d2:44:22:7f:1e:f0:a6:63:6e:d8:8d:ea:04:7f:
         dc:dc:b2:3c:c6:66:06:bf:be:de:de:c6:93:ab:8d:67:95:c7:
         e1:42:a0:a9:f4:c7:8e:6e:d5:87:e1:99:10:49:6d:91:de:02:
         f2:38:96:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----