Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/323830343a3363383a3a2f33322d3332203d3e20323632393038.roa
File:                     323830343a3363383a3a2f33322d3332203d3e20323632393038.roa (raw, json)
Hash identifier:          pKDwPvmjZNuUqgc7WJy0/1RUiaigAtQnR0wrQkSKwZk=
Subject key identifier:   8A:1C:C1:35:04:50:3D:46:A0:E6:0B:3E:8A:D8:20:3A:3E:60:E5:F3
Certificate issuer:       /CN=380AE62845C4468F9462327C41A0D22DA68054FD
Certificate serial:       674CFF3574A336B2142949B88D458737860C5045
Authority key identifier: 38:0A:E6:28:45:C4:46:8F:94:62:32:7C:41:A0:D2:2D:A6:80:54:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/380AE62845C4468F9462327C41A0D22DA68054FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/323830343a3363383a3a2f33322d3332203d3e20323632393038.roa
Signing time:             Mon 22 Jan 2024 19:49:31 +0000
ROA not before:           Mon 22 Jan 2024 19:44:31 +0000
ROA not after:            Mon 20 Jan 2025 19:49:31 +0000
asID:                     262908
IP address blocks:        2804:3c8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:4c:ff:35:74:a3:36:b2:14:29:49:b8:8d:45:87:37:86:0c:50:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=380AE62845C4468F9462327C41A0D22DA68054FD
        Validity
            Not Before: Jan 22 19:44:31 2024 GMT
            Not After : Jan 20 19:49:31 2025 GMT
        Subject: CN=8A1CC13504503D46A0E60B3E8AD8203A3E60E5F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5a:ce:1e:de:34:ab:4d:72:11:b9:6a:f3:a2:
                    c0:31:73:8f:7f:31:d3:dd:bd:f8:4d:3f:76:0e:6e:
                    b6:74:58:54:50:25:c1:a4:73:19:24:bd:cb:ac:c2:
                    6b:24:8f:db:cd:b8:5a:42:d8:07:a8:2b:de:38:64:
                    30:2b:5b:a9:9c:c9:59:c0:49:2a:62:5f:15:3b:05:
                    a2:f3:59:06:6a:09:00:f5:28:fb:8c:20:07:04:eb:
                    cb:03:c7:4d:91:8d:5e:b3:cf:72:3c:bc:1a:c9:e1:
                    42:79:2d:de:e4:30:fe:ab:a4:0a:cf:4c:8c:05:5a:
                    0b:c7:76:ca:ce:c2:de:d3:a1:fc:e9:ad:16:74:96:
                    41:c6:5b:27:33:1d:de:96:f4:65:c7:9f:c0:94:88:
                    59:5d:5b:b3:eb:de:d4:f6:6b:cb:34:91:fd:8c:f9:
                    3b:fe:13:fc:40:91:3d:2c:07:51:ee:d2:c4:85:9d:
                    db:d9:b6:02:a1:f6:92:8a:3f:0f:9d:42:bf:63:1e:
                    4d:46:70:75:a2:4a:22:5f:a7:27:d7:41:34:2d:c4:
                    9a:af:68:01:5a:78:b1:e4:32:2b:99:c6:c1:fe:bc:
                    f4:29:c8:ba:15:8b:8c:cf:d6:6e:fc:8a:f3:7c:74:
                    97:fa:4f:a9:9e:7b:0d:65:2b:98:23:c5:21:b2:cd:
                    df:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:1C:C1:35:04:50:3D:46:A0:E6:0B:3E:8A:D8:20:3A:3E:60:E5:F3
            X509v3 Authority Key Identifier:
                keyid:38:0A:E6:28:45:C4:46:8F:94:62:32:7C:41:A0:D2:2D:A6:80:54:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/380AE62845C4468F9462327C41A0D22DA68054FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/380AE62845C4468F9462327C41A0D22DA68054FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/323830343a3363383a3a2f33322d3332203d3e20323632393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:76:b2:b8:c7:c9:f8:e9:82:a3:7d:b5:4b:ec:3a:fd:21:4a:
         46:7c:36:47:c8:e4:f6:50:89:60:2c:0f:6e:c2:49:e1:c6:82:
         fe:d5:a5:65:48:63:f0:76:1c:d3:60:46:a9:1d:ee:79:24:dd:
         2e:06:fd:b2:51:5d:59:f0:21:1d:3b:f9:5d:ee:8d:9e:34:1d:
         03:09:f5:2f:72:64:78:5b:a3:5c:5a:08:b6:39:4f:a2:56:74:
         14:c6:57:e0:9e:aa:c8:db:a5:d4:2a:db:ae:64:c7:d7:59:66:
         b5:1b:84:41:a2:2f:59:95:c5:40:e9:ff:c5:f6:72:ed:85:66:
         0b:40:34:46:60:8e:a5:93:b0:b5:a7:c1:f1:b9:50:f3:38:c4:
         9e:ac:bb:44:45:c1:57:e8:06:55:ad:52:e6:99:b4:2d:24:40:
         44:0a:52:1b:45:06:05:b2:5e:7a:9a:41:7a:fb:81:3c:64:94:
         11:b2:ab:2a:ba:02:fc:a3:54:1e:54:3a:9f:99:1d:7f:7c:e8:
         e3:8c:22:c8:ee:cd:29:7f:a6:8e:02:f6:e4:e7:a2:cc:5e:58:
         5b:49:e4:86:ed:29:07:40:92:e8:42:4a:c5:fe:6f:1e:61:8c:
         74:58:19:e7:35:04:96:59:67:18:2f:9a:a3:3c:85:8e:c0:d9:
         e1:ea:c3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----