Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/323830343a346335303a3a2f33322d3332203d3e20323637333633.roa
File:                     323830343a346335303a3a2f33322d3332203d3e20323637333633.roa (raw, json)
Hash identifier:          hzAiyapm6SJo5gmWkEBvhjqmyM6QYaIqgobPbtr7LEk=
Subject key identifier:   5F:3A:EB:7F:6E:39:E9:4B:25:85:49:8F:FC:A0:A3:29:54:A1:19:A0
Certificate issuer:       /CN=2AC986C39C68AAADAAD9F87F750E123A8F5A265F
Certificate serial:       7C11B447CF82BE6290625AC6762B7A9EC1AAD911
Authority key identifier: 2A:C9:86:C3:9C:68:AA:AD:AA:D9:F8:7F:75:0E:12:3A:8F:5A:26:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2AC986C39C68AAADAAD9F87F750E123A8F5A265F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/323830343a346335303a3a2f33322d3332203d3e20323637333633.roa
Signing time:             Wed 20 Mar 2024 19:26:21 +0000
ROA not before:           Wed 20 Mar 2024 19:21:21 +0000
ROA not after:            Wed 19 Mar 2025 19:26:21 +0000
asID:                     267363
IP address blocks:        2804:4c50::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:11:b4:47:cf:82:be:62:90:62:5a:c6:76:2b:7a:9e:c1:aa:d9:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AC986C39C68AAADAAD9F87F750E123A8F5A265F
        Validity
            Not Before: Mar 20 19:21:21 2024 GMT
            Not After : Mar 19 19:26:21 2025 GMT
        Subject: CN=5F3AEB7F6E39E94B2585498FFCA0A32954A119A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e5:ea:89:36:1c:e2:cf:bc:23:0e:d0:9c:26:
                    9b:cf:49:87:8a:1d:2c:48:35:1b:9c:99:06:9c:fb:
                    d1:6e:e3:36:c6:2c:72:dc:61:2a:af:44:55:cb:f8:
                    0e:fa:06:6c:f4:82:68:59:15:2b:16:f8:38:e1:b9:
                    e6:91:7e:32:56:75:b4:6a:bc:d8:1e:6f:10:11:94:
                    66:8d:b1:62:62:dc:77:2b:95:7d:d7:79:94:1b:39:
                    74:55:c2:05:ef:42:43:df:75:23:43:2a:d4:dc:76:
                    27:6d:37:3a:18:19:53:e1:5c:7b:73:f5:9c:63:d3:
                    d5:f7:9a:41:dd:88:af:63:2e:6a:7e:4e:54:45:fa:
                    9b:84:0c:b0:8d:05:ff:5f:4c:b6:6c:d3:c5:da:81:
                    6a:6e:a7:75:74:56:48:1f:af:db:51:91:a2:70:f4:
                    41:4a:10:a5:5d:01:0a:c7:4c:6c:b7:25:93:0c:ff:
                    1a:04:d4:d6:5e:60:91:83:90:92:01:f4:37:f0:6f:
                    b6:11:52:39:57:ef:da:57:18:17:7d:24:99:df:56:
                    4a:8a:b9:0b:46:f2:bb:e1:dc:40:cb:f5:07:ae:47:
                    90:b5:8e:55:76:46:16:85:45:bf:e4:e2:72:8a:06:
                    e2:3b:40:87:67:f5:22:60:a2:49:13:0e:75:bc:68:
                    29:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:3A:EB:7F:6E:39:E9:4B:25:85:49:8F:FC:A0:A3:29:54:A1:19:A0
            X509v3 Authority Key Identifier:
                keyid:2A:C9:86:C3:9C:68:AA:AD:AA:D9:F8:7F:75:0E:12:3A:8F:5A:26:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/2AC986C39C68AAADAAD9F87F750E123A8F5A265F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2AC986C39C68AAADAAD9F87F750E123A8F5A265F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/323830343a346335303a3a2f33322d3332203d3e20323637333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c50::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:f5:29:d0:e9:1e:b4:41:a6:da:37:9d:43:06:34:42:e4:4c:
         4f:80:cf:b7:cd:41:1f:3e:c1:5b:62:c7:26:8c:9f:a0:6f:47:
         43:25:aa:78:70:4c:ee:fd:b1:eb:df:dd:89:60:9a:27:27:87:
         a6:1b:f2:7c:5c:bd:63:8d:2c:a1:f1:af:d4:2b:92:6b:cb:09:
         18:6f:48:22:34:1b:d3:67:0d:2e:d7:27:cf:92:c6:80:0d:ed:
         65:c5:5b:52:cb:41:c0:33:7b:18:d6:51:5a:0c:6a:3d:42:27:
         7f:83:42:64:b8:58:af:49:79:9b:7b:95:8a:a7:e3:f0:c0:06:
         8a:ba:44:d1:fe:82:07:dd:a2:4b:2c:f7:a0:de:0a:1a:8a:74:
         f8:ba:ee:35:9b:17:31:e1:c0:dc:44:36:c0:b6:d5:02:ed:07:
         48:aa:39:1a:00:92:a8:ad:8b:d7:bd:a7:af:9b:4b:31:1e:2e:
         63:66:74:55:34:5d:9b:9a:86:fd:b6:00:e9:6d:f4:b0:3d:6d:
         ca:e2:05:03:f4:9c:62:f6:c7:a9:2a:a6:9d:b8:c8:d7:13:c5:
         b6:8a:87:83:75:ff:f3:51:02:e7:47:77:be:07:7e:e7:c5:fe:
         d1:29:29:54:dc:75:9c:c7:13:8f:d1:07:16:36:f6:22:60:c3:
         aa:92:46:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----