Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8n6ZpAJjqNbEwbWMuCkXFHD4ja1v38KS829WcADpd2pn/0/323830343a336634303a3a2f33322d313238203d3e20323636363438.roa
File:                     323830343a336634303a3a2f33322d313238203d3e20323636363438.roa (raw, json)
Hash identifier:          8z5OfVRpCmUPQSgV5JnRCZTg9WHM3UeEnDXnC6g/Q6c=
Subject key identifier:   1A:23:EE:B6:6F:BF:AF:D7:AE:A6:55:E7:99:F3:48:9C:94:DB:CA:AE
Certificate issuer:       /CN=BCB5CD719F47B32C85039FC1EB6F7EDED3CDD5B4
Certificate serial:       7165DED88083BD13A0EF0749EF555A12AE2E2AAD
Authority key identifier: BC:B5:CD:71:9F:47:B3:2C:85:03:9F:C1:EB:6F:7E:DE:D3:CD:D5:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCB5CD719F47B32C85039FC1EB6F7EDED3CDD5B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8n6ZpAJjqNbEwbWMuCkXFHD4ja1v38KS829WcADpd2pn/0/323830343a336634303a3a2f33322d313238203d3e20323636363438.roa
Signing time:             Tue 26 Mar 2024 18:42:39 +0000
ROA not before:           Tue 26 Mar 2024 18:37:39 +0000
ROA not after:            Tue 25 Mar 2025 18:42:39 +0000
asID:                     266648
IP address blocks:        2804:3f40::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:65:de:d8:80:83:bd:13:a0:ef:07:49:ef:55:5a:12:ae:2e:2a:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCB5CD719F47B32C85039FC1EB6F7EDED3CDD5B4
        Validity
            Not Before: Mar 26 18:37:39 2024 GMT
            Not After : Mar 25 18:42:39 2025 GMT
        Subject: CN=1A23EEB66FBFAFD7AEA655E799F3489C94DBCAAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:28:0e:97:bd:47:a0:24:56:79:77:e0:c1:96:
                    56:77:17:42:7c:12:d4:d3:94:a6:57:f6:18:c9:39:
                    d4:dd:29:68:6d:ff:3d:36:30:0b:2c:48:41:47:c3:
                    d6:fa:a0:0b:54:ea:79:ad:32:b3:ac:f1:9f:38:67:
                    b7:1b:f2:58:91:7f:9b:91:12:c9:c7:36:14:14:18:
                    98:fa:d3:49:ac:0b:3a:d4:62:8f:c9:f9:76:40:55:
                    e2:a5:a3:66:95:48:73:9f:65:52:1b:f0:4c:a0:01:
                    58:22:23:40:13:a7:87:47:4e:eb:8d:8b:0f:52:b7:
                    7d:50:33:a9:8f:88:ab:4c:af:00:2d:63:47:4c:5a:
                    8f:0e:5f:7e:e1:e3:62:e2:f9:91:15:c9:d6:3a:1e:
                    32:73:ff:be:b4:52:55:59:c2:08:d1:e7:de:09:2f:
                    a5:c0:7c:09:6d:98:57:7c:40:4c:fc:98:ed:06:95:
                    75:04:7f:d0:b1:23:af:a8:aa:89:f1:23:35:3a:32:
                    c2:8f:09:9b:a4:65:ed:68:9b:ab:37:17:91:8d:cb:
                    d3:3b:24:1f:88:8c:72:81:22:6b:5d:0c:f7:63:e5:
                    dd:ed:51:04:9b:25:11:a2:fa:d8:18:01:a8:82:28:
                    89:20:51:10:1a:1d:a8:74:14:6a:7e:66:3a:23:03:
                    a8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:23:EE:B6:6F:BF:AF:D7:AE:A6:55:E7:99:F3:48:9C:94:DB:CA:AE
            X509v3 Authority Key Identifier:
                keyid:BC:B5:CD:71:9F:47:B3:2C:85:03:9F:C1:EB:6F:7E:DE:D3:CD:D5:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8n6ZpAJjqNbEwbWMuCkXFHD4ja1v38KS829WcADpd2pn/0/BCB5CD719F47B32C85039FC1EB6F7EDED3CDD5B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCB5CD719F47B32C85039FC1EB6F7EDED3CDD5B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8n6ZpAJjqNbEwbWMuCkXFHD4ja1v38KS829WcADpd2pn/0/323830343a336634303a3a2f33322d313238203d3e20323636363438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f40::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:d9:3a:33:69:7b:d1:82:09:c1:5b:a8:82:6f:cb:ce:68:91:
         7b:65:cf:6a:45:6e:90:ab:fc:08:71:7a:ac:8f:e2:4e:dc:dd:
         f2:17:4d:ce:82:68:42:b3:0f:07:94:42:12:86:a9:64:09:ab:
         12:cd:68:10:4d:c7:a6:aa:b2:9c:f8:61:00:94:ec:40:d3:03:
         9f:d5:df:91:a2:ad:80:c2:d8:21:50:4a:42:20:2e:b7:5a:38:
         dd:5c:94:7a:af:6d:2c:1c:62:87:5c:84:d2:97:d1:d3:4b:ac:
         61:5e:aa:3f:03:40:51:c1:f6:69:a4:90:25:56:b4:f6:fa:88:
         aa:59:71:99:e1:3a:a4:71:72:c9:8b:c9:ee:db:55:39:80:b2:
         fa:0e:c4:4b:ba:3d:4f:98:68:d7:ae:8d:77:07:4d:71:80:78:
         b2:84:27:cf:41:45:43:94:5c:69:41:c5:f1:ea:ad:2e:35:70:
         37:ff:5a:1d:a6:ef:e1:9b:ff:6a:1e:1c:ae:c9:57:1c:bc:34:
         1c:57:dd:f8:14:63:1d:f3:d6:4b:52:95:58:7b:23:cd:98:17:
         ea:c0:10:d7:65:84:f3:a5:18:9e:fe:b7:50:e4:ff:9e:06:94:
         13:1e:d9:c9:a4:54:e3:1b:9c:2b:3e:ee:4a:68:21:da:69:74:
         a3:08:82:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----