Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/1/323830343a316432633a3a2f33322d3332203d3e20323634333532.roa
File:                     323830343a316432633a3a2f33322d3332203d3e20323634333532.roa (raw, json)
Hash identifier:          eroKXjOHockyOL9bPUaOHr1WtB6bq/aMpHTBSb1tMjs=
Subject key identifier:   C3:05:A1:32:20:38:73:99:F8:AB:8D:A2:03:88:70:08:97:D1:DC:F4
Certificate issuer:       /CN=C9A14D4A938C75D13CCE50DD4B1E6B64A80A4153
Certificate serial:       31719D913CA3BB6D453401BF3217E2934122561E
Authority key identifier: C9:A1:4D:4A:93:8C:75:D1:3C:CE:50:DD:4B:1E:6B:64:A8:0A:41:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9A14D4A938C75D13CCE50DD4B1E6B64A80A4153.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/1/323830343a316432633a3a2f33322d3332203d3e20323634333532.roa
Signing time:             Mon 08 Apr 2024 20:14:47 +0000
ROA not before:           Mon 08 Apr 2024 20:09:47 +0000
ROA not after:            Mon 07 Apr 2025 20:14:47 +0000
asID:                     264352
IP address blocks:        2804:1d2c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:71:9d:91:3c:a3:bb:6d:45:34:01:bf:32:17:e2:93:41:22:56:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9A14D4A938C75D13CCE50DD4B1E6B64A80A4153
        Validity
            Not Before: Apr  8 20:09:47 2024 GMT
            Not After : Apr  7 20:14:47 2025 GMT
        Subject: CN=C305A13220387399F8AB8DA20388700897D1DCF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:99:9c:00:6a:59:17:b7:e7:00:73:bc:c1:c3:
                    0f:27:41:6f:63:5c:b5:03:17:b3:f8:58:14:57:af:
                    42:57:a9:24:bc:59:c0:dc:e6:62:b4:42:d1:a6:6c:
                    8c:d7:40:0b:13:dc:e2:6f:02:82:df:fb:53:55:7e:
                    f0:35:2f:8c:db:0c:90:18:9a:b9:ec:8f:00:80:43:
                    75:8f:eb:ae:5c:54:59:e5:2f:0f:d3:ee:df:c8:7b:
                    bf:7e:c6:79:10:22:88:83:72:2d:0b:b1:2a:62:a2:
                    e6:2b:f6:f9:03:7e:d5:2e:54:1f:ea:1c:3c:f5:58:
                    4d:c0:dd:05:af:86:70:a1:09:ce:66:b7:d5:b1:f5:
                    10:c9:c2:e7:da:61:8e:fb:39:88:c3:cf:9b:4b:d7:
                    ce:c1:0c:90:6c:51:7e:97:b0:4b:f7:9d:e9:90:8e:
                    37:25:85:fd:eb:84:ef:fd:33:b5:e0:15:7b:1a:e9:
                    5b:f7:54:ff:de:9c:ba:39:8c:08:1a:d0:1b:b1:6b:
                    b1:95:bd:15:68:ac:4a:85:12:bf:ef:a2:79:06:45:
                    0d:2b:41:19:60:af:58:e7:03:52:28:5f:f5:a8:cd:
                    18:49:0c:1c:38:9c:1a:73:ad:00:7b:61:11:9d:06:
                    71:33:9b:cb:ee:b7:21:e0:d7:51:8e:d6:34:c9:1d:
                    48:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:05:A1:32:20:38:73:99:F8:AB:8D:A2:03:88:70:08:97:D1:DC:F4
            X509v3 Authority Key Identifier:
                keyid:C9:A1:4D:4A:93:8C:75:D1:3C:CE:50:DD:4B:1E:6B:64:A8:0A:41:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/1/C9A14D4A938C75D13CCE50DD4B1E6B64A80A4153.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9A14D4A938C75D13CCE50DD4B1E6B64A80A4153.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/1/323830343a316432633a3a2f33322d3332203d3e20323634333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:a5:55:97:7c:e6:cb:f6:a0:c9:0b:8f:36:f6:08:7b:2e:e1:
         62:63:15:b8:dc:47:c6:68:d5:8f:1b:2c:11:1b:1e:f4:ed:a4:
         55:c8:c2:c4:48:93:b9:7d:dc:91:d5:42:c8:e1:de:69:9b:f8:
         3f:74:40:94:7a:a9:71:5a:3d:61:6e:b0:97:13:4f:87:e9:61:
         04:f3:4a:a7:b1:b2:53:ef:2b:7a:53:25:c3:80:7d:46:46:a3:
         a1:69:e4:84:e9:6e:0f:85:37:e2:62:68:32:9e:3c:42:ab:d8:
         2e:ea:48:3d:be:81:47:f2:56:19:69:94:5f:85:bd:08:0f:ee:
         d8:b4:a3:50:d2:74:5e:ee:d0:2e:39:32:8a:97:e9:30:bd:b2:
         75:91:dc:48:c5:50:4b:04:2b:70:62:23:29:1f:6e:3b:a0:9c:
         3c:28:de:a1:f1:8f:80:c9:26:1f:08:b4:30:66:74:29:68:af:
         1b:df:f1:cf:84:0e:c5:67:89:3a:01:b4:da:87:6d:f7:a9:56:
         7f:ab:02:86:bc:a5:07:43:95:57:63:7f:6b:f7:d1:68:63:6a:
         01:16:68:3a:bf:91:69:75:b6:ff:2f:11:83:80:21:1c:a3:a9:
         ba:ef:78:8e:00:aa:5e:53:6b:71:59:de:71:7c:c7:e3:d0:c0:
         c8:7d:61:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----