Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/323830343a326566303a3a2f33332d3333203d3e20323634383632.roa
File:                     323830343a326566303a3a2f33332d3333203d3e20323634383632.roa (raw, json)
Hash identifier:          zJztPCLi/Ar/D47K3z5DLzu+xkVEyjRdqZC0wjNJpks=
Subject key identifier:   97:9C:4E:EA:2F:52:50:A1:5B:56:09:17:C2:73:2C:5E:C1:C7:EF:0E
Certificate issuer:       /CN=34510C8CD19CD2BA841BFCD90C3813E80D522A3F
Certificate serial:       18590AD9AAD8126831E13C2BF1B05B5275F0E9
Authority key identifier: 34:51:0C:8C:D1:9C:D2:BA:84:1B:FC:D9:0C:38:13:E8:0D:52:2A:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34510C8CD19CD2BA841BFCD90C3813E80D522A3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/323830343a326566303a3a2f33332d3333203d3e20323634383632.roa
Signing time:             Sat 19 Aug 2023 17:00:00 +0000
ROA not before:           Sat 19 Aug 2023 16:55:00 +0000
ROA not after:            Sat 17 Aug 2024 17:00:00 +0000
asID:                     264862
IP address blocks:        2804:2ef0::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:59:0a:d9:aa:d8:12:68:31:e1:3c:2b:f1:b0:5b:52:75:f0:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34510C8CD19CD2BA841BFCD90C3813E80D522A3F
        Validity
            Not Before: Aug 19 16:55:00 2023 GMT
            Not After : Aug 17 17:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:88:42:b0:8c:d9:e5:ea:ca:e9:90:50:42:d7:
                    62:c8:60:bc:c7:35:51:4d:cd:da:ff:84:ca:f0:7b:
                    bf:ee:17:0e:d9:77:1b:c2:e5:b8:fc:68:fd:05:6c:
                    45:6f:16:c5:80:c2:3e:fb:43:26:d2:c5:c0:b7:1c:
                    27:7d:9f:40:5b:12:00:f4:ac:99:ae:f4:77:4d:e0:
                    6e:00:12:06:60:a5:86:d6:f9:78:ae:e0:27:12:f7:
                    88:aa:bc:59:56:f2:c6:e8:5c:f0:3d:04:be:4e:de:
                    36:77:5d:ac:e3:95:c4:8d:67:87:08:d6:1b:8d:aa:
                    b1:46:ae:c1:d9:af:12:a7:15:0f:4a:50:f8:25:35:
                    16:7b:9d:f6:87:3f:9e:3f:16:5d:e0:d0:78:70:c3:
                    93:19:e6:41:41:c8:82:d5:c6:98:be:67:2c:8b:c0:
                    c0:4b:48:41:c3:97:9b:ea:17:d5:5e:3a:38:bd:b0:
                    fd:cf:25:24:04:81:09:f8:65:4f:11:d7:41:c4:73:
                    a8:37:75:76:3a:56:b5:4f:07:a6:ed:93:ff:5a:53:
                    1b:d5:ee:a7:2b:1f:15:14:60:d3:d8:ee:2d:33:52:
                    bb:10:d8:6a:0a:da:20:eb:72:05:0f:ff:45:37:b0:
                    58:9e:7d:2c:16:4b:0a:eb:85:08:50:a0:32:b9:3d:
                    84:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:9C:4E:EA:2F:52:50:A1:5B:56:09:17:C2:73:2C:5E:C1:C7:EF:0E
            X509v3 Authority Key Identifier:
                keyid:34:51:0C:8C:D1:9C:D2:BA:84:1B:FC:D9:0C:38:13:E8:0D:52:2A:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/34510C8CD19CD2BA841BFCD90C3813E80D522A3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34510C8CD19CD2BA841BFCD90C3813E80D522A3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/323830343a326566303a3a2f33332d3333203d3e20323634383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ef0::/33

    Signature Algorithm: sha256WithRSAEncryption
         0f:ca:fa:56:27:81:54:76:97:69:33:a5:71:3b:69:d0:3c:c9:
         a9:82:61:2b:ab:c1:a9:16:28:6a:5f:2a:65:ec:51:91:fa:98:
         48:23:5a:d8:da:9b:fd:76:54:51:38:76:9a:39:89:40:39:4c:
         1c:d4:fb:18:04:4e:76:2d:a2:81:be:a4:8c:d4:64:19:d5:51:
         02:7d:99:e8:6c:82:11:7d:57:02:42:38:08:87:37:96:0e:1a:
         ff:76:26:d2:39:64:43:a1:d4:94:9f:6b:3e:f9:ac:8f:49:58:
         0f:d0:79:e1:c4:b7:bf:be:4c:a4:53:75:1d:63:98:70:47:44:
         5e:44:d9:0e:6b:e9:59:20:41:3d:6c:31:15:d6:58:e6:5d:43:
         fc:b9:f7:86:5f:f1:34:76:83:a3:32:c9:40:75:9a:0b:d6:3b:
         0c:9c:e9:62:ef:cc:52:ea:3d:36:fd:0e:77:4a:6d:28:b2:ba:
         87:1d:fa:4e:c2:d4:d8:ba:13:d5:14:05:9b:9b:df:cc:bb:0f:
         c5:fe:f9:d8:cd:ae:f9:02:4a:31:ed:49:80:13:78:54:e7:b1:
         8f:46:ce:f0:5a:c0:14:87:5f:68:52:c6:2d:35:1c:95:f0:73:
         da:b4:48:8f:ff:22:7c:30:6b:65:0a:61:c2:0a:25:25:c0:b4:
         0c:20:79:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----