Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/0/323830343a376562303a3a2f33322d313238203d3e20323731363431.roa
File:                     323830343a376562303a3a2f33322d313238203d3e20323731363431.roa (raw, json)
Hash identifier:          gJ67qE9+fEsQsKkPBB1j46+B/aELUQRPZ5GK2CrTGEI=
Subject key identifier:   37:1B:B9:94:63:92:33:C7:39:97:20:93:A8:E4:6F:13:C5:F6:A9:FD
Certificate issuer:       /CN=D2F7452DD5564A2585DD665D38AD7886662B208D
Certificate serial:       0E6F78883E163E4740C995AAC623E89D7D9081
Authority key identifier: D2:F7:45:2D:D5:56:4A:25:85:DD:66:5D:38:AD:78:86:66:2B:20:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2F7452DD5564A2585DD665D38AD7886662B208D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/0/323830343a376562303a3a2f33322d313238203d3e20323731363431.roa
Signing time:             Fri 20 Oct 2023 01:33:03 +0000
ROA not before:           Fri 20 Oct 2023 01:28:03 +0000
ROA not after:            Fri 18 Oct 2024 01:33:03 +0000
asID:                     271641
IP address blocks:        2804:7eb0::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:6f:78:88:3e:16:3e:47:40:c9:95:aa:c6:23:e8:9d:7d:90:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2F7452DD5564A2585DD665D38AD7886662B208D
        Validity
            Not Before: Oct 20 01:28:03 2023 GMT
            Not After : Oct 18 01:33:03 2024 GMT
        Subject: CN=371BB994639233C739972093A8E46F13C5F6A9FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:48:ab:40:10:73:3e:4c:f8:37:ef:21:e6:53:
                    22:23:02:b7:c2:00:c3:9d:98:46:72:b6:41:bd:ed:
                    ff:47:0b:e5:6c:b3:22:33:4e:94:fd:cd:2e:e8:3c:
                    9b:9f:58:a9:42:e9:62:f1:fb:5a:15:a7:51:27:bf:
                    40:24:a7:94:8c:58:75:2c:99:ff:24:9b:30:7d:ae:
                    a0:41:41:c5:95:73:27:41:1d:3a:fd:30:a1:64:ba:
                    2c:0f:58:fc:f0:e6:61:e4:d4:06:45:2e:2f:3b:aa:
                    55:e0:a9:d2:36:75:41:1c:e9:07:05:9f:a1:4e:54:
                    76:af:75:29:68:18:7c:ab:eb:d1:a3:de:6f:4c:04:
                    85:e5:52:22:40:26:01:ed:84:91:7e:93:f7:5b:44:
                    d7:ab:c9:bb:2a:6f:10:62:0e:cd:29:36:92:df:39:
                    f1:aa:e1:f7:46:74:88:2a:50:ab:4b:67:22:fa:40:
                    bc:67:6c:50:3e:39:dc:e0:03:da:92:81:ce:1f:b8:
                    64:50:75:de:af:46:46:4f:43:4f:44:35:87:55:52:
                    ca:24:6c:30:55:6f:b0:fa:d0:06:f9:d3:dc:86:d8:
                    f5:68:ad:c3:40:fe:99:a1:c2:da:be:0c:18:75:22:
                    82:4a:5a:6f:7e:87:1b:c8:94:a4:b3:4c:4a:b9:00:
                    2d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:1B:B9:94:63:92:33:C7:39:97:20:93:A8:E4:6F:13:C5:F6:A9:FD
            X509v3 Authority Key Identifier:
                keyid:D2:F7:45:2D:D5:56:4A:25:85:DD:66:5D:38:AD:78:86:66:2B:20:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/0/D2F7452DD5564A2585DD665D38AD7886662B208D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2F7452DD5564A2585DD665D38AD7886662B208D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/0/323830343a376562303a3a2f33322d313238203d3e20323731363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7eb0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:41:6b:5a:8d:9d:93:6d:6b:33:b9:6a:ca:3b:d4:a2:53:2e:
         b6:16:3b:27:08:7c:3c:b9:4d:6b:38:d2:44:60:c0:94:62:dc:
         cb:05:78:a2:ac:74:08:00:9f:11:ab:6f:a7:d9:61:97:c1:cc:
         7a:f8:6b:a0:da:23:6b:39:73:7a:19:5c:ea:c1:20:22:52:1e:
         db:48:7a:d6:36:fa:26:56:8c:8e:fa:cc:93:97:68:6d:3b:2b:
         93:3c:c4:f2:0d:f0:eb:a5:97:1a:a5:ba:16:f0:75:1c:fa:c2:
         f3:97:06:9f:c3:0b:78:59:35:a2:ed:45:81:d4:56:d4:da:e9:
         3c:ba:c2:c9:f5:7f:69:10:45:a5:24:48:7e:ec:7e:88:11:49:
         fc:fa:ab:1f:b2:a3:e6:ee:b8:fd:a2:31:d8:d6:e1:41:b1:45:
         45:ec:48:93:29:eb:12:93:bd:b6:39:8f:a9:74:b5:dc:3f:9a:
         7f:17:27:c2:41:0f:58:4d:6e:96:b3:b6:0d:d7:6d:5f:ce:79:
         a5:32:72:08:e2:71:2a:ca:1d:cd:59:e9:52:e3:18:6d:14:fb:
         68:33:06:fe:83:f0:3c:b2:10:37:3d:20:0a:c9:b7:be:b0:d2:
         b3:6c:60:74:ff:73:05:f1:aa:41:c3:da:8f:d6:e9:fb:b4:20:
         68:90:19:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----