Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/323830343a363762633a3a2f33322d3438203d3e20323639363437.roa
File:                     323830343a363762633a3a2f33322d3438203d3e20323639363437.roa (raw, json)
Hash identifier:          Dt6b/mHQZiBxqRsONPLcna75yk42Jh+DmoV6IxYV7XY=
Subject key identifier:   64:AF:EA:AD:BA:67:80:69:28:36:5E:85:62:49:B5:E3:83:C3:65:2A
Certificate issuer:       /CN=00835FE3B3B65459D0B1F496CF7277321403C989
Certificate serial:       35F857C570C1BD9DD032B45F065E7249136AD113
Authority key identifier: 00:83:5F:E3:B3:B6:54:59:D0:B1:F4:96:CF:72:77:32:14:03:C9:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00835FE3B3B65459D0B1F496CF7277321403C989.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/323830343a363762633a3a2f33322d3438203d3e20323639363437.roa
Signing time:             Tue 12 Mar 2024 12:24:28 +0000
ROA not before:           Tue 12 Mar 2024 12:19:28 +0000
ROA not after:            Tue 11 Mar 2025 12:24:28 +0000
asID:                     269647
IP address blocks:        2804:67bc::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:f8:57:c5:70:c1:bd:9d:d0:32:b4:5f:06:5e:72:49:13:6a:d1:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00835FE3B3B65459D0B1F496CF7277321403C989
        Validity
            Not Before: Mar 12 12:19:28 2024 GMT
            Not After : Mar 11 12:24:28 2025 GMT
        Subject: CN=64AFEAADBA67806928365E856249B5E383C3652A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ca:74:5b:20:32:94:dc:3d:0b:9c:e4:fa:e5:
                    c7:f9:27:4f:ed:a9:3d:8c:20:6f:1f:2c:3c:bc:9e:
                    cf:1c:da:3c:fa:c2:03:81:e1:7e:a2:90:77:70:d2:
                    05:35:bf:ce:1c:d9:c8:73:c5:7b:b9:09:d0:4d:cb:
                    4a:91:4b:cb:52:9c:4b:b3:e7:b5:f4:db:62:a8:5a:
                    0f:49:df:07:27:7e:0f:97:be:19:66:ab:1c:20:8d:
                    98:0c:50:37:9f:ca:97:77:20:a1:98:9d:32:50:0d:
                    19:9e:38:e3:45:07:e2:fb:db:92:a7:9a:1d:eb:f5:
                    a4:92:75:00:08:c5:b4:3e:fb:d7:5f:b2:d2:1a:55:
                    75:d4:e8:87:47:c0:4c:92:a4:76:1e:6d:71:ac:f2:
                    79:23:0f:9d:69:09:c6:3b:7e:26:ab:b7:2f:b4:13:
                    89:71:72:4f:e6:71:bd:e6:61:5b:36:11:c8:9f:e3:
                    db:fb:e1:7c:f7:78:80:ce:e2:ec:1c:81:23:30:7b:
                    60:69:08:21:ef:87:e0:03:0f:41:21:8f:06:8d:ea:
                    7d:e9:55:8b:39:11:25:1a:36:af:1b:f9:10:d9:63:
                    0c:41:0a:3f:96:ac:83:b9:40:99:c8:10:0e:b8:8f:
                    00:38:97:57:93:19:0e:ee:50:ac:1f:60:11:b3:87:
                    ce:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:AF:EA:AD:BA:67:80:69:28:36:5E:85:62:49:B5:E3:83:C3:65:2A
            X509v3 Authority Key Identifier:
                keyid:00:83:5F:E3:B3:B6:54:59:D0:B1:F4:96:CF:72:77:32:14:03:C9:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/00835FE3B3B65459D0B1F496CF7277321403C989.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00835FE3B3B65459D0B1F496CF7277321403C989.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/323830343a363762633a3a2f33322d3438203d3e20323639363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:c2:74:74:d2:f6:a2:d9:d6:1e:9e:b4:f5:88:5d:57:48:09:
         4f:bf:bd:43:db:0d:f4:99:56:b4:93:a3:60:0f:18:42:ae:37:
         4e:a2:f9:cc:b1:46:b7:7b:8d:68:1c:e0:54:07:82:b0:5a:46:
         40:f3:75:1e:f5:5d:44:f5:7d:b5:8a:91:ae:f3:5f:bd:ae:bf:
         b9:20:5b:2a:ce:d5:e2:7d:06:f3:9e:34:24:1c:35:29:f1:06:
         0c:99:57:3f:06:57:ca:29:a6:5c:92:f2:6e:f9:ae:b0:71:98:
         88:83:0a:e1:39:6c:14:c1:8d:79:4a:2d:de:b3:22:c7:32:da:
         ee:27:d8:65:27:b1:99:33:07:75:04:2e:9d:3f:ff:c1:e2:41:
         33:f1:75:87:8e:40:e7:b5:1b:16:89:a8:61:18:32:95:36:f0:
         36:6d:c4:13:b9:8b:ac:9a:60:c4:8d:fd:7f:7a:20:82:8b:c6:
         17:fb:a0:0e:d3:4e:63:d5:55:a0:d1:4d:68:73:f9:38:e3:a6:
         54:92:25:32:c8:bf:12:6b:81:33:87:76:ae:90:4e:9f:29:7e:
         6a:b7:0f:93:54:51:e5:7d:aa:98:39:7e:e3:c6:4e:a7:c4:53:
         7d:dc:81:4f:e0:f5:10:31:d8:a2:cd:dd:14:61:9c:d8:0e:74:
         b3:5d:dd:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----