Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/323830343a336430303a3a2f33322d3332203d3e20323636323437.roa
File:                     323830343a336430303a3a2f33322d3332203d3e20323636323437.roa (raw, json)
Hash identifier:          La4ZM08r1nuRq+fiXpJQTvZt4HyEaAvUWS41wOodvxs=
Subject key identifier:   E3:3C:B5:14:E0:FB:DD:8C:5A:0C:C4:5F:F7:B9:E5:C7:B4:D4:9B:22
Certificate issuer:       /CN=0FF897150A721E543538D1FB1C6A7C5017A68480
Certificate serial:       2C95A28083F2286B362800B603D1381E0BD4128C
Authority key identifier: 0F:F8:97:15:0A:72:1E:54:35:38:D1:FB:1C:6A:7C:50:17:A6:84:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0FF897150A721E543538D1FB1C6A7C5017A68480.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/323830343a336430303a3a2f33322d3332203d3e20323636323437.roa
Signing time:             Sun 14 May 2023 17:10:46 +0000
ROA not before:           Sun 14 May 2023 17:05:46 +0000
ROA not after:            Sun 12 May 2024 17:10:46 +0000
asID:                     266247
IP address blocks:        2804:3d00::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:95:a2:80:83:f2:28:6b:36:28:00:b6:03:d1:38:1e:0b:d4:12:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FF897150A721E543538D1FB1C6A7C5017A68480
        Validity
            Not Before: May 14 17:05:46 2023 GMT
            Not After : May 12 17:10:46 2024 GMT
        Subject: CN=E33CB514E0FBDD8C5A0CC45FF7B9E5C7B4D49B22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4a:8a:b0:0b:de:7f:ef:2f:cf:ca:21:96:80:
                    0b:0f:65:82:34:66:32:22:63:0d:81:a7:33:35:24:
                    70:08:43:78:90:b7:8b:9d:d8:c0:05:d0:df:93:59:
                    99:65:a5:a1:89:6c:db:3d:d7:0b:b9:4b:4e:7b:9f:
                    ef:a4:b9:93:a6:4f:90:13:0d:ed:c0:6b:26:b9:02:
                    d3:52:62:3b:fa:02:ac:2a:aa:db:d3:f1:d4:7d:fe:
                    81:4c:3a:3b:d8:60:10:90:d9:8f:7d:29:d8:15:a4:
                    56:db:ae:a8:6b:a6:90:cf:ba:3f:e9:47:cc:ae:af:
                    1c:d2:c0:e8:2b:28:2e:85:06:46:45:e2:da:e9:73:
                    5c:6e:d4:6e:80:18:5b:71:60:e6:8d:08:01:16:0b:
                    ff:e5:bf:fa:67:cf:89:89:d9:a3:94:19:75:0e:ad:
                    6a:84:04:9d:3f:90:41:83:7a:c4:8e:fb:02:e3:8f:
                    d5:dc:e9:b1:ce:7c:0f:44:48:a4:19:07:e6:b9:28:
                    2c:70:9c:7a:bb:15:7a:6b:df:56:e5:5a:ed:f8:df:
                    5e:cc:c4:96:1f:85:ac:ae:73:ee:78:6a:76:b0:3b:
                    c5:ba:b6:41:a1:11:57:04:1f:09:1b:3c:27:2e:35:
                    23:ff:7b:bb:91:75:48:91:9a:64:ed:fb:43:50:db:
                    b3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:3C:B5:14:E0:FB:DD:8C:5A:0C:C4:5F:F7:B9:E5:C7:B4:D4:9B:22
            X509v3 Authority Key Identifier:
                keyid:0F:F8:97:15:0A:72:1E:54:35:38:D1:FB:1C:6A:7C:50:17:A6:84:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/0FF897150A721E543538D1FB1C6A7C5017A68480.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0FF897150A721E543538D1FB1C6A7C5017A68480.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/323830343a336430303a3a2f33322d3332203d3e20323636323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d00::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:e5:00:a8:7a:bd:7a:a3:c7:2d:cc:8e:87:7c:e5:ef:76:3c:
         2f:ab:b7:e5:49:6b:96:08:77:11:59:f6:92:72:50:b5:8d:2b:
         b1:af:15:fe:5c:05:7a:2d:2a:64:e3:ce:8b:c9:47:df:11:a7:
         77:0f:4b:f9:ee:65:f7:e7:ad:73:12:e7:79:fa:79:e0:ed:e6:
         5f:d9:11:f1:f0:18:e9:bf:79:73:a8:2e:ed:db:76:32:da:db:
         d9:e4:30:37:85:86:e1:80:08:fd:e0:d2:7b:7b:19:a9:87:7e:
         27:b9:40:aa:83:b6:b4:8d:c0:ba:ab:89:3e:37:81:91:ec:fa:
         27:b7:df:27:8e:86:fb:47:5c:3d:04:0d:18:67:00:b8:fb:78:
         fe:83:2d:b4:b3:1c:22:ac:48:b9:2e:72:da:7f:a5:b2:ad:08:
         5a:98:d3:76:74:3e:c3:5f:26:21:89:76:fc:fd:21:2f:92:54:
         cf:c3:e9:0f:9e:b0:bf:88:e0:2f:99:79:92:8e:d9:14:a8:83:
         ac:a6:e5:2a:32:6c:48:e9:60:38:cb:95:65:61:ca:23:49:f7:
         ae:42:94:f1:21:af:b0:1a:88:2e:e6:35:bc:7e:5b:00:c9:e7:
         25:b4:70:66:15:68:c7:bc:da:f7:9e:38:83:90:10:d6:85:04:
         e6:01:06:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----