Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/323830343a326264633a313a3a2f34382d3438203d3e20323635313831.roa
File:                     323830343a326264633a313a3a2f34382d3438203d3e20323635313831.roa (raw, json)
Hash identifier:          QZDtQOex63Nmq1A8I+WYVCE4zD5Ko07aebWQy/MqaiI=
Subject key identifier:   01:B8:B3:BB:5F:FB:ED:82:91:AF:2F:1A:03:3D:1C:D2:09:AF:E3:87
Certificate issuer:       /CN=D62223BCA44D4E6ABCF86B0FAA1734C037B11445
Certificate serial:       3FF8713CF17AA355EE2A863F7BB6CF9D856E4DFE
Authority key identifier: D6:22:23:BC:A4:4D:4E:6A:BC:F8:6B:0F:AA:17:34:C0:37:B1:14:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/323830343a326264633a313a3a2f34382d3438203d3e20323635313831.roa
Signing time:             Fri 02 Feb 2024 00:15:28 +0000
ROA not before:           Fri 02 Feb 2024 00:10:28 +0000
ROA not after:            Fri 31 Jan 2025 00:15:28 +0000
asID:                     265181
IP address blocks:        2804:2bdc:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:f8:71:3c:f1:7a:a3:55:ee:2a:86:3f:7b:b6:cf:9d:85:6e:4d:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D62223BCA44D4E6ABCF86B0FAA1734C037B11445
        Validity
            Not Before: Feb  2 00:10:28 2024 GMT
            Not After : Jan 31 00:15:28 2025 GMT
        Subject: CN=01B8B3BB5FFBED8291AF2F1A033D1CD209AFE387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:97:3b:43:40:c9:28:d6:b3:af:67:b4:68:65:
                    61:9c:5e:d2:71:7b:48:b1:e8:7b:b2:c9:66:90:30:
                    17:73:e9:4c:cf:59:19:6b:ce:7e:55:d7:9c:c3:d4:
                    98:b7:a9:8b:ca:7d:0f:ee:ac:91:21:a5:e6:1e:cd:
                    81:4c:48:50:84:da:03:f1:20:06:a1:86:5e:9c:2a:
                    5a:7d:1b:39:fd:75:3a:cb:c6:b7:8f:29:4a:a8:b2:
                    ad:eb:f1:3e:e8:4c:48:b4:1f:d3:61:e7:92:a9:c9:
                    27:37:65:bb:de:d4:60:78:df:80:05:5a:be:68:98:
                    cd:19:8a:ea:5f:63:79:27:ef:07:26:cc:70:5d:98:
                    5f:07:a3:c9:66:af:1e:46:c0:08:76:56:f4:38:9e:
                    c7:a6:92:20:bf:87:ce:24:d6:90:bf:9a:d2:67:f6:
                    48:a6:e3:3d:b1:2e:a1:c8:d3:cf:97:74:b0:81:0f:
                    62:11:83:34:65:a8:37:5a:63:70:dc:13:eb:ad:86:
                    4b:64:6f:b0:af:0a:06:08:12:33:48:56:c4:e5:11:
                    74:b0:93:64:b1:cc:32:72:b1:a9:59:f3:9f:0d:b1:
                    79:50:24:bd:03:c8:ca:7a:e8:26:6b:80:79:df:5e:
                    92:1d:f3:ae:2b:b7:f4:f9:56:e0:3b:fd:40:56:6d:
                    bb:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B8:B3:BB:5F:FB:ED:82:91:AF:2F:1A:03:3D:1C:D2:09:AF:E3:87
            X509v3 Authority Key Identifier:
                keyid:D6:22:23:BC:A4:4D:4E:6A:BC:F8:6B:0F:AA:17:34:C0:37:B1:14:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/323830343a326264633a313a3a2f34382d3438203d3e20323635313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bdc:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:5b:82:8f:5c:74:97:03:33:d6:83:d2:32:50:78:d9:a3:5c:
         89:f9:25:1b:28:48:a7:86:a1:c0:8d:48:59:fc:bd:9d:2d:f2:
         35:cd:25:1b:80:86:ea:50:55:e2:62:e2:4e:ad:9a:37:2e:5b:
         2f:82:57:0d:c4:ff:ec:f4:de:91:e1:db:12:e6:fa:4d:e6:06:
         a6:8d:22:81:e6:62:1f:6d:13:48:c5:02:f1:e3:f1:52:5f:a1:
         d8:cb:84:eb:95:96:ef:0b:43:81:a4:bb:7f:77:f9:64:c9:fd:
         8b:85:a9:54:5d:57:17:79:68:d0:6b:b1:8f:30:a7:97:2b:57:
         f2:3d:d4:5b:35:14:12:14:8d:f4:e4:56:08:b6:51:c5:e3:98:
         9f:b1:44:b3:8e:4b:f7:5a:5d:8f:8e:ed:48:62:d4:2b:e8:cd:
         89:df:40:7b:ed:94:aa:96:ce:d1:5f:57:db:01:50:23:0a:2e:
         cd:c1:2d:6a:59:66:4c:99:6f:57:43:4f:3c:0b:5e:06:59:02:
         ba:c0:43:e6:71:67:b2:e7:bb:ec:9c:64:6b:69:9a:59:44:d4:
         d0:d0:97:c0:1f:8e:52:4a:0b:b9:eb:4b:86:97:6d:7d:3c:bd:
         d1:90:61:ca:0f:12:2d:bc:19:0e:af:a8:53:59:8a:b5:f2:8b:
         4e:84:98:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----