Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9oV3uvReVxtqSEKudAwKVMKYABjc3Ckq68cx1SU1ZPz2/0/323830343a343861303a3a2f33322d3336203d3e20323637313334.roa
File:                     323830343a343861303a3a2f33322d3336203d3e20323637313334.roa (raw, json)
Hash identifier:          pfRzPoZhYbMMaNzKFMKaPeX7LM0v0Ltmnrezla5NfRc=
Subject key identifier:   25:CB:7F:94:14:73:57:F9:7D:E1:4A:BF:B0:71:81:AF:5A:D2:1B:EE
Certificate issuer:       /CN=66775EAB8F67655AD1B053DCA28B715E914840DB
Certificate serial:       7E0FCB9F43BC138A3F47AB8EA861782E70B080C4
Authority key identifier: 66:77:5E:AB:8F:67:65:5A:D1:B0:53:DC:A2:8B:71:5E:91:48:40:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66775EAB8F67655AD1B053DCA28B715E914840DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9oV3uvReVxtqSEKudAwKVMKYABjc3Ckq68cx1SU1ZPz2/0/323830343a343861303a3a2f33322d3336203d3e20323637313334.roa
Signing time:             Fri 29 Dec 2023 17:00:00 +0000
ROA not before:           Fri 29 Dec 2023 16:55:00 +0000
ROA not after:            Fri 27 Dec 2024 17:00:00 +0000
asID:                     267134
IP address blocks:        2804:48a0::/32 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:0f:cb:9f:43:bc:13:8a:3f:47:ab:8e:a8:61:78:2e:70:b0:80:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66775EAB8F67655AD1B053DCA28B715E914840DB
        Validity
            Not Before: Dec 29 16:55:00 2023 GMT
            Not After : Dec 27 17:00:00 2024 GMT
        Subject: CN=3082010A0282010100BFA562B3E0D20C6F4683BAAF059970C86A16058958B7C1EFEF7B3440903BAE64FC399AB6CDC7A43888D61861C546995A47C66411946580A1600F46DD460A521AABB81C936E26140BC4BEB46AC4FF6A6354FCBE2CF0CC0A3AA59860C6D467D2F7D5A254CFF9436CD0A09607D6CE5955FBCDC9D8D98E2CDDF97BAA9C32BDB7CA4BC5AD5C9340D9AF71CFC92A778D8C3F484E843659B4869D3A84EF3399F5B0C609EB78380487EC4673BEB4AC1B6D49CF6655169720F1CC9165A45D245C26C8C59B259241E573D52FAF2EC1D203DE5B82B5E2D61FA059CC5D809133C6BDA0EF9E8B09F9FEC6A2F884A507EC7ED3B6EC276D2B98A0209BF7F613D352D45A9A7AB2C70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a5:62:b3:e0:d2:0c:6f:46:83:ba:af:05:99:
                    70:c8:6a:16:05:89:58:b7:c1:ef:ef:7b:34:40:90:
                    3b:ae:64:fc:39:9a:b6:cd:c7:a4:38:88:d6:18:61:
                    c5:46:99:5a:47:c6:64:11:94:65:80:a1:60:0f:46:
                    dd:46:0a:52:1a:ab:b8:1c:93:6e:26:14:0b:c4:be:
                    b4:6a:c4:ff:6a:63:54:fc:be:2c:f0:cc:0a:3a:a5:
                    98:60:c6:d4:67:d2:f7:d5:a2:54:cf:f9:43:6c:d0:
                    a0:96:07:d6:ce:59:55:fb:cd:c9:d8:d9:8e:2c:dd:
                    f9:7b:aa:9c:32:bd:b7:ca:4b:c5:ad:5c:93:40:d9:
                    af:71:cf:c9:2a:77:8d:8c:3f:48:4e:84:36:59:b4:
                    86:9d:3a:84:ef:33:99:f5:b0:c6:09:eb:78:38:04:
                    87:ec:46:73:be:b4:ac:1b:6d:49:cf:66:55:16:97:
                    20:f1:cc:91:65:a4:5d:24:5c:26:c8:c5:9b:25:92:
                    41:e5:73:d5:2f:af:2e:c1:d2:03:de:5b:82:b5:e2:
                    d6:1f:a0:59:cc:5d:80:91:33:c6:bd:a0:ef:9e:8b:
                    09:f9:fe:c6:a2:f8:84:a5:07:ec:7e:d3:b6:ec:27:
                    6d:2b:98:a0:20:9b:f7:f6:13:d3:52:d4:5a:9a:7a:
                    b2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:CB:7F:94:14:73:57:F9:7D:E1:4A:BF:B0:71:81:AF:5A:D2:1B:EE
            X509v3 Authority Key Identifier:
                keyid:66:77:5E:AB:8F:67:65:5A:D1:B0:53:DC:A2:8B:71:5E:91:48:40:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9oV3uvReVxtqSEKudAwKVMKYABjc3Ckq68cx1SU1ZPz2/0/66775EAB8F67655AD1B053DCA28B715E914840DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66775EAB8F67655AD1B053DCA28B715E914840DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oV3uvReVxtqSEKudAwKVMKYABjc3Ckq68cx1SU1ZPz2/0/323830343a343861303a3a2f33322d3336203d3e20323637313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:48a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:e5:78:e6:8f:3a:aa:46:f8:55:fe:68:7b:79:f7:aa:64:43:
         ec:a6:37:81:35:cc:2f:ab:07:66:b6:f0:6c:5f:9a:2d:55:a6:
         dc:e7:0b:a6:ac:12:26:5c:0f:7b:bf:1c:d1:23:e7:ef:93:ba:
         c2:cd:7c:29:66:d2:d9:67:23:3f:0c:db:ad:18:0a:0e:bf:87:
         e3:4e:c5:8e:2a:0d:73:61:ca:1b:fc:5c:c6:b4:b5:6a:22:04:
         86:9a:90:eb:c2:c1:da:b5:d7:f1:22:53:db:37:63:d2:0a:00:
         5b:54:27:14:c7:e0:35:48:01:01:1e:78:f7:69:da:d5:91:ce:
         8e:2d:3e:7a:d4:e7:5e:84:b3:ef:9c:a6:2c:76:2f:6f:6f:e7:
         e2:4b:3e:d0:06:ff:69:04:70:1d:5c:c6:5c:53:c1:73:0f:0b:
         7c:cb:b5:94:63:b5:6a:47:68:9a:94:19:f3:cf:d3:55:de:42:
         4b:7e:fb:5d:37:1d:3f:c1:2c:cc:5d:fb:53:2f:b7:c3:80:68:
         d3:c6:fb:20:67:b3:f0:db:79:95:d5:5b:a4:76:9f:46:42:9d:
         98:1d:8c:1d:f5:40:b4:89:68:0f:e6:b1:07:81:37:6d:23:1f:
         63:6c:69:7a:c4:21:39:2c:8a:d8:b2:07:50:29:c8:02:2c:db:
         35:45:bb:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----