Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/323830343a323136343a3a2f33322d3438203d3e20323634353532.roa
File:                     323830343a323136343a3a2f33322d3438203d3e20323634353532.roa (raw, json)
Hash identifier:          fqIFfyF9CwpXEpHa1myR83ZRhyVbNe89PTcXEBFFdsY=
Subject key identifier:   55:5B:3C:74:0B:3F:68:12:71:89:FD:19:C2:33:7F:19:A8:39:3C:F6
Certificate issuer:       /CN=A2E9A763EC2BC4693E8DDF87382BE4193DA4696D
Certificate serial:       0D6F5740627C91579CE29D2772D9D7CE711CBC1C
Authority key identifier: A2:E9:A7:63:EC:2B:C4:69:3E:8D:DF:87:38:2B:E4:19:3D:A4:69:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A2E9A763EC2BC4693E8DDF87382BE4193DA4696D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/323830343a323136343a3a2f33322d3438203d3e20323634353532.roa
Signing time:             Thu 23 Mar 2023 17:14:30 +0000
ROA not before:           Thu 23 Mar 2023 17:09:30 +0000
ROA not after:            Thu 21 Mar 2024 17:14:30 +0000
asID:                     264552
IP address blocks:        2804:2164::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:6f:57:40:62:7c:91:57:9c:e2:9d:27:72:d9:d7:ce:71:1c:bc:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2E9A763EC2BC4693E8DDF87382BE4193DA4696D
        Validity
            Not Before: Mar 23 17:09:30 2023 GMT
            Not After : Mar 21 17:14:30 2024 GMT
        Subject: CN=555B3C740B3F68127189FD19C2337F19A8393CF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e8:61:7a:4f:35:e0:e8:22:fd:7f:f7:71:46:
                    e5:ff:34:2b:2c:ce:50:b1:45:43:31:5e:e8:fc:c4:
                    e1:15:1b:e3:56:1e:2c:cf:d5:ff:79:73:57:08:5a:
                    f0:31:ff:ac:77:5c:75:4b:9b:a4:72:97:4b:ff:83:
                    67:be:63:41:10:0b:5d:fe:6a:8b:9e:73:3e:f4:13:
                    7d:be:17:a8:0b:e1:26:00:c9:e8:d6:73:87:77:b8:
                    7f:ce:3d:e2:e6:b5:02:f8:29:2d:07:b3:9f:9b:c2:
                    84:0a:05:a0:09:3b:6a:69:3e:53:45:61:49:e1:b1:
                    65:fb:b7:8a:c8:35:d0:32:7f:e7:14:20:b6:a5:6f:
                    0f:5a:ad:9f:8f:b3:63:9f:d9:ac:81:1b:74:b5:9d:
                    2e:f5:d1:fc:40:3f:56:19:1a:37:a5:75:18:8b:34:
                    1b:9f:8e:f8:69:27:ae:4a:33:6b:b3:c1:70:3c:e4:
                    4e:15:59:44:bc:2e:2c:fd:8d:d3:f4:48:a8:8d:ad:
                    5f:e0:1f:b1:97:c8:9f:c7:d4:3a:b1:9c:d5:90:d9:
                    c3:3c:53:09:f5:22:d6:45:66:e6:c3:aa:93:d0:c1:
                    ae:84:89:7f:aa:81:b2:06:17:ef:61:d7:30:21:63:
                    bc:d5:6c:9d:a7:a8:8a:8c:04:6e:10:29:ea:9a:15:
                    81:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:5B:3C:74:0B:3F:68:12:71:89:FD:19:C2:33:7F:19:A8:39:3C:F6
            X509v3 Authority Key Identifier:
                keyid:A2:E9:A7:63:EC:2B:C4:69:3E:8D:DF:87:38:2B:E4:19:3D:A4:69:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/A2E9A763EC2BC4693E8DDF87382BE4193DA4696D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A2E9A763EC2BC4693E8DDF87382BE4193DA4696D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/323830343a323136343a3a2f33322d3438203d3e20323634353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2164::/32

    Signature Algorithm: sha256WithRSAEncryption
         c3:99:32:45:75:81:14:be:cc:62:b6:d3:3d:d4:c0:38:c4:e3:
         b0:b9:6e:14:57:43:38:e8:e9:3c:d6:7d:2a:4b:ed:76:0c:23:
         cd:4b:be:06:4a:f9:d2:d2:1b:b0:7b:2c:f6:ec:d3:f0:d9:3c:
         8a:e3:fb:09:9f:11:bd:a5:e3:72:7f:60:dd:dc:25:b6:83:1c:
         d3:e8:8e:18:ff:fe:8e:19:98:e2:7a:f1:df:be:72:2c:ac:74:
         75:47:13:15:2b:fc:2d:56:36:e6:b5:f9:d4:1f:5d:ae:a7:38:
         7a:77:9e:6f:a3:0c:af:5b:48:07:d1:b5:89:cd:61:b9:ad:73:
         e3:4d:15:7d:4e:4d:37:8e:1f:a8:61:0b:7e:e4:15:0b:d9:84:
         f5:50:a6:1f:85:05:17:b2:72:6f:fb:6d:6c:d6:41:4b:9a:71:
         7e:6a:fa:86:f0:1f:c8:52:b8:06:94:4b:b8:c8:ce:bc:68:b9:
         30:5f:fd:6f:ed:92:b4:35:b4:1d:e8:6e:64:24:2e:f4:50:be:
         9b:e0:3f:7d:e9:cb:fe:fa:51:80:18:7d:4a:46:aa:06:ef:00:
         af:dd:3e:eb:2a:f1:19:4e:04:ff:09:63:cb:30:89:3c:4f:ad:
         74:75:c4:8e:c6:17:b7:88:43:c1:e4:83:46:3f:d3:9d:1c:c6:
         5f:c5:68:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----