Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AGaHd24P3Dw81GNN7R7gzeBCQc6o3Q2Ax9QVC6dD7B6h/0/323830343a376338633a3a2f33322d3332203d3e20323731353033.roa
File:                     323830343a376338633a3a2f33322d3332203d3e20323731353033.roa (raw, json)
Hash identifier:          20ZEAP9F/ALOdJ6zAubXgXohbXU8/FBpNoht0Y1yz3g=
Subject key identifier:   51:1A:A0:89:88:CF:22:1A:08:8D:5E:CA:FE:0F:1A:C8:36:52:3D:B8
Certificate issuer:       /CN=8CAF265B3AFBDA95BC45DB4BC086681703F3A66C
Certificate serial:       3753F0A9FE97F9A3396DDD9CC70882C460996FB6
Authority key identifier: 8C:AF:26:5B:3A:FB:DA:95:BC:45:DB:4B:C0:86:68:17:03:F3:A6:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8CAF265B3AFBDA95BC45DB4BC086681703F3A66C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGaHd24P3Dw81GNN7R7gzeBCQc6o3Q2Ax9QVC6dD7B6h/0/323830343a376338633a3a2f33322d3332203d3e20323731353033.roa
Signing time:             Tue 29 Aug 2023 01:41:38 +0000
ROA not before:           Tue 29 Aug 2023 01:36:38 +0000
ROA not after:            Tue 27 Aug 2024 01:41:38 +0000
asID:                     271503
IP address blocks:        2804:7c8c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:53:f0:a9:fe:97:f9:a3:39:6d:dd:9c:c7:08:82:c4:60:99:6f:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CAF265B3AFBDA95BC45DB4BC086681703F3A66C
        Validity
            Not Before: Aug 29 01:36:38 2023 GMT
            Not After : Aug 27 01:41:38 2024 GMT
        Subject: CN=511AA08988CF221A088D5ECAFE0F1AC836523DB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:04:e3:d2:cc:fe:66:be:5e:48:e0:42:48:8e:
                    8a:09:3a:19:8e:34:54:e5:52:14:c7:6c:20:c9:16:
                    3a:5f:b8:b8:0f:a0:df:f2:0f:2c:fc:e6:e0:bd:8d:
                    ca:ec:47:08:ae:12:a9:4c:5d:0a:da:61:3b:6d:96:
                    e4:1a:2c:1d:0b:90:44:81:72:f2:05:1b:1c:6f:83:
                    c8:0b:6a:2c:0b:f5:6f:86:49:a3:bf:7c:d7:26:85:
                    39:8c:8e:84:59:cb:e5:b5:c4:9d:75:b3:bb:bf:9f:
                    f3:4f:50:fd:50:6f:63:42:63:14:30:f5:64:5c:c5:
                    25:e9:a0:1f:06:58:a1:28:f9:bb:92:47:6d:e0:fd:
                    d9:5f:f6:4d:53:38:c7:d8:3a:67:dc:5a:da:f0:14:
                    0d:db:97:bd:0f:3a:17:51:95:d1:72:de:e9:ef:bc:
                    8e:d9:56:ec:5e:89:ca:b2:a9:25:67:a8:95:ae:1b:
                    66:86:d4:5c:36:7b:18:b4:a4:36:2d:04:44:42:b5:
                    9e:80:22:fb:9c:7b:9f:66:e4:64:50:33:7e:d5:9c:
                    a7:38:0a:f5:6c:5c:e5:bb:04:8f:44:76:2c:28:7d:
                    7f:24:09:0d:af:a8:2e:c1:49:08:00:40:ec:7d:99:
                    64:66:6c:7b:70:a8:08:85:e0:47:6d:be:53:70:84:
                    97:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:1A:A0:89:88:CF:22:1A:08:8D:5E:CA:FE:0F:1A:C8:36:52:3D:B8
            X509v3 Authority Key Identifier:
                keyid:8C:AF:26:5B:3A:FB:DA:95:BC:45:DB:4B:C0:86:68:17:03:F3:A6:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGaHd24P3Dw81GNN7R7gzeBCQc6o3Q2Ax9QVC6dD7B6h/0/8CAF265B3AFBDA95BC45DB4BC086681703F3A66C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8CAF265B3AFBDA95BC45DB4BC086681703F3A66C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGaHd24P3Dw81GNN7R7gzeBCQc6o3Q2Ax9QVC6dD7B6h/0/323830343a376338633a3a2f33322d3332203d3e20323731353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c8c::/32

    Signature Algorithm: sha256WithRSAEncryption
         bf:a7:72:fe:b9:2b:80:f0:9a:85:6b:00:e8:60:c8:f3:b3:92:
         c7:ae:7a:01:08:cb:d0:22:75:cb:a9:d9:6b:b8:39:e9:82:66:
         bb:fe:bf:8b:19:0e:83:65:96:dd:16:81:8e:9b:09:85:60:e6:
         31:42:70:20:37:5b:b6:32:4c:96:de:31:a1:d0:eb:08:96:55:
         dd:79:ad:a8:e3:45:52:02:44:48:c8:6d:dd:e0:83:d3:97:e5:
         f0:38:08:00:4c:32:88:77:6f:47:67:14:50:54:64:9d:a1:e0:
         37:0e:45:03:a0:5b:d1:71:b7:df:7f:16:39:f0:46:66:95:d3:
         50:ba:d8:6f:69:3e:f0:cf:39:ad:4e:2f:ce:6a:52:c1:77:7a:
         ef:64:0b:ce:6f:34:30:56:33:06:20:62:58:d3:a3:e9:ce:e2:
         7f:df:9d:02:d8:0a:3f:29:1c:2e:3b:f9:af:46:65:1b:c3:c5:
         a0:77:eb:19:33:d1:84:67:66:2f:41:66:86:b1:4e:48:9f:d4:
         22:ef:e3:3f:8c:57:ac:f7:62:a1:d3:88:8f:8a:73:0f:98:98:
         a8:8e:64:49:63:e0:ff:29:7f:0f:ca:b8:a3:27:fb:48:2f:1b:
         6c:3e:31:1d:d7:2a:88:d9:ba:8e:56:cc:13:1d:53:26:68:ef:
         93:21:c9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----