Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/1/323830343a326233343a383030303a3a2f33332d3333203d3e20323635313430.roa
File:                     323830343a326233343a383030303a3a2f33332d3333203d3e20323635313430.roa (raw, json)
Hash identifier:          fFlNNQZi/wKK6SkSBVbeC/sDAHAPaMDo/64lHxNJctQ=
Subject key identifier:   14:84:76:FE:97:65:71:88:96:E1:15:C2:19:50:1D:81:F8:1B:82:39
Certificate issuer:       /CN=AB74D1409E020E9FC44ACD2821DE9138F94DD415
Certificate serial:       5FE7EE654065957F65E7161F51F98C77DB52983D
Authority key identifier: AB:74:D1:40:9E:02:0E:9F:C4:4A:CD:28:21:DE:91:38:F9:4D:D4:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB74D1409E020E9FC44ACD2821DE9138F94DD415.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/1/323830343a326233343a383030303a3a2f33332d3333203d3e20323635313430.roa
Signing time:             Thu 04 Apr 2024 15:20:52 +0000
ROA not before:           Thu 04 Apr 2024 15:15:52 +0000
ROA not after:            Thu 03 Apr 2025 15:20:52 +0000
asID:                     265140
IP address blocks:        2804:2b34:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:e7:ee:65:40:65:95:7f:65:e7:16:1f:51:f9:8c:77:db:52:98:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB74D1409E020E9FC44ACD2821DE9138F94DD415
        Validity
            Not Before: Apr  4 15:15:52 2024 GMT
            Not After : Apr  3 15:20:52 2025 GMT
        Subject: CN=148476FE9765718896E115C219501D81F81B8239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2a:aa:06:0c:95:45:2d:b0:32:e1:3a:93:f3:
                    7e:38:13:76:8e:3d:b7:bc:39:f4:59:41:ba:8d:29:
                    a8:20:3f:db:c6:87:91:90:8e:19:53:b4:d5:62:b7:
                    b9:07:3b:2a:7f:2a:7a:42:52:e6:87:45:95:ed:07:
                    10:c3:e4:16:c9:96:2e:c2:82:e4:1b:8f:4e:ef:7e:
                    27:cb:1b:a3:f8:05:9a:9b:4e:61:15:5a:79:75:18:
                    dd:d7:f6:02:f3:fd:e3:ec:dc:5c:ac:73:47:a3:99:
                    f9:14:37:00:4f:e1:e9:27:b4:b8:ea:f0:fe:3f:7b:
                    53:f7:84:50:f7:ed:1f:c1:b3:da:1f:e0:7b:23:28:
                    aa:a0:6f:d9:54:d4:52:99:8c:aa:d3:f8:4d:cf:c4:
                    d6:d7:8e:1c:99:6d:77:ff:f1:7e:e4:0f:9b:9b:94:
                    08:5d:97:ea:e2:38:b9:9b:2a:c4:81:05:ea:4c:d7:
                    4d:67:7b:b8:74:e8:dd:bc:89:da:e9:49:72:93:b2:
                    35:12:a4:e5:61:eb:3c:a7:31:c2:48:da:b9:ae:06:
                    81:62:5f:5c:1c:79:e9:ea:ce:89:43:94:59:a6:6a:
                    91:1e:c5:4d:40:6a:dd:67:e9:33:8f:b6:0f:e3:f2:
                    e1:c1:bb:7e:5a:fc:fb:75:90:f2:33:ed:4a:ad:10:
                    f7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:84:76:FE:97:65:71:88:96:E1:15:C2:19:50:1D:81:F8:1B:82:39
            X509v3 Authority Key Identifier:
                keyid:AB:74:D1:40:9E:02:0E:9F:C4:4A:CD:28:21:DE:91:38:F9:4D:D4:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/1/AB74D1409E020E9FC44ACD2821DE9138F94DD415.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB74D1409E020E9FC44ACD2821DE9138F94DD415.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/1/323830343a326233343a383030303a3a2f33332d3333203d3e20323635313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b34:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         65:64:ae:bb:fe:36:ee:a9:0b:46:db:95:26:90:0c:4d:6e:41:
         a5:7e:9d:25:32:6f:16:aa:8a:fb:6d:88:3c:01:7d:68:1c:72:
         82:04:97:1c:54:24:8f:d7:c4:10:b9:64:7c:5c:fe:d8:ad:fe:
         b8:64:b5:15:e1:64:55:f9:7c:02:d1:92:ed:e2:a6:b4:74:4a:
         78:56:68:7a:68:e1:cf:a9:a3:6e:48:51:a1:5f:7e:a5:20:53:
         47:a9:08:9d:5b:f9:70:0c:10:d7:0e:68:3b:64:02:af:5c:76:
         39:36:a4:51:ab:7e:df:58:ca:21:fc:c5:4b:6a:f7:79:4b:4d:
         ad:06:51:c3:2e:18:e2:c8:d3:57:2a:e6:51:20:f2:79:f1:e2:
         af:f8:3f:a3:77:6e:e2:61:da:20:bb:78:f8:eb:90:5b:75:e0:
         38:93:a7:d2:82:eb:50:3f:fb:c3:d7:53:85:d3:b6:72:41:37:
         f5:9c:70:ae:12:0e:c2:3e:3a:33:28:c3:15:62:cf:18:d1:19:
         8d:eb:6b:57:82:09:a0:55:bb:a8:c3:c8:3b:48:9c:e1:00:c0:
         38:94:4a:fe:d3:06:41:3e:6d:87:43:76:4b:74:b3:da:d4:fb:
         f3:7b:a7:35:5e:83:66:2e:dd:fe:66:1f:75:a0:6d:c1:8b:ce:
         4d:22:ea:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----