Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a653030303a3a2f33352d3335203d3e20323635343936.roa
File:                     323830343a333530383a653030303a3a2f33352d3335203d3e20323635343936.roa (raw, json)
Hash identifier:          W+u0gd/sob0FESkefkytgI8iG8jRpx7JJOERQ8Cy1aY=
Subject key identifier:   AC:49:B8:EA:5C:42:FB:F2:2A:BC:D4:04:77:73:6C:8F:7C:D2:58:BC
Certificate issuer:       /CN=1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517
Certificate serial:       590EE05516CA8DC4868417FE2064C970680C7C02
Authority key identifier: 14:53:E0:F3:4C:FC:80:20:A8:BB:A2:A1:7C:CD:B7:CA:BC:9C:05:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a653030303a3a2f33352d3335203d3e20323635343936.roa
Signing time:             Mon 03 Apr 2023 10:56:40 +0000
ROA not before:           Mon 03 Apr 2023 10:51:40 +0000
ROA not after:            Mon 01 Apr 2024 10:56:40 +0000
asID:                     265496
IP address blocks:        2804:3508:e000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:0e:e0:55:16:ca:8d:c4:86:84:17:fe:20:64:c9:70:68:0c:7c:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517
        Validity
            Not Before: Apr  3 10:51:40 2023 GMT
            Not After : Apr  1 10:56:40 2024 GMT
        Subject: CN=AC49B8EA5C42FBF22ABCD40477736C8F7CD258BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e3:54:69:28:85:64:53:9d:08:01:b2:de:77:
                    14:45:ff:96:bf:c9:c3:f4:50:4d:43:9a:1f:f2:28:
                    10:19:98:bc:c0:0a:b5:f4:bf:0a:ce:43:27:45:af:
                    e1:31:a5:a2:1e:df:88:92:5d:62:9f:00:8c:68:bf:
                    ae:fd:05:4b:4f:bc:ac:f4:3f:4b:fa:f8:69:7c:52:
                    57:85:02:38:82:ff:d7:15:95:e4:7a:bc:21:db:c3:
                    f7:1f:49:ec:c9:89:3b:16:e8:79:74:0f:22:d3:f0:
                    91:94:82:12:39:d5:7b:69:43:4c:80:cd:93:d3:a5:
                    ee:a8:a3:62:4f:e7:f7:88:a6:4a:06:b1:3f:ef:d3:
                    69:f3:2a:dd:97:b0:9c:6f:1d:75:f0:ab:eb:6d:13:
                    23:3c:fa:b5:d7:bc:4d:9e:4a:d2:e9:28:0b:74:2e:
                    e6:c3:b3:4d:3a:af:93:e6:90:72:41:22:af:ab:ce:
                    8e:0f:fd:fe:9f:6a:8f:55:cf:2f:1e:81:95:9f:92:
                    0f:e7:ce:e8:ef:ba:ec:d6:b6:ae:bf:a8:39:40:25:
                    dc:68:14:d2:5d:06:20:79:c7:b1:42:46:87:56:e8:
                    b6:05:8c:9b:06:ce:51:0b:91:35:c6:80:e1:81:3d:
                    30:f5:c4:3e:de:38:89:f0:7f:58:eb:ce:0f:11:a7:
                    fa:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:49:B8:EA:5C:42:FB:F2:2A:BC:D4:04:77:73:6C:8F:7C:D2:58:BC
            X509v3 Authority Key Identifier:
                keyid:14:53:E0:F3:4C:FC:80:20:A8:BB:A2:A1:7C:CD:B7:CA:BC:9C:05:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a653030303a3a2f33352d3335203d3e20323635343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3508:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         9b:32:0e:54:00:bc:3b:6e:7c:09:bc:7b:4a:29:ef:b8:55:97:
         3b:f2:0a:60:13:d6:36:9f:19:c0:09:9a:c2:1b:6c:8f:f2:8a:
         ea:eb:9f:8e:bb:bf:24:11:d8:4e:82:ae:cf:e8:1c:96:75:52:
         e7:3a:d8:91:37:31:38:58:6d:c0:b3:17:9b:36:6c:b8:05:b1:
         c0:38:5b:e8:d8:e4:42:0e:54:5e:77:ee:cd:47:18:18:cb:2e:
         3f:d5:7a:24:a6:5b:f3:f1:c5:04:a8:94:47:68:26:c7:bb:7e:
         8a:cc:5f:a6:b1:b1:ec:20:82:b5:5a:0b:f2:5b:61:e6:a5:34:
         f7:62:a2:81:25:31:a9:4d:3e:43:a9:20:de:43:68:f1:20:6a:
         c7:a2:a6:ad:d0:27:36:5b:1f:f3:46:c0:6c:db:99:ce:d6:14:
         30:34:fa:24:78:ab:d6:0a:37:78:dc:a9:e0:2a:ff:11:20:b6:
         ba:3a:52:64:1c:31:8a:f6:21:ed:9f:fc:f9:6b:62:96:54:c7:
         3b:63:f5:1f:1b:e5:d4:5a:31:53:1e:05:cc:af:db:19:c2:d4:
         55:35:5d:8a:e3:4c:7d:e0:7c:e7:9d:c5:c3:a9:f4:57:61:a3:
         6f:3e:83:71:3e:ed:62:71:ed:b0:7f:89:6a:8e:52:0f:85:29:
         23:0f:ce:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----