Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/323830343a326332303a3a2f33322d3438203d3e20323635313937.roa
File:                     323830343a326332303a3a2f33322d3438203d3e20323635313937.roa (raw, json)
Hash identifier:          mtNF3LQYejT1yJT2KupH+OcU51Urirsd5W86EbHXisc=
Subject key identifier:   27:93:81:A3:6B:8C:B6:31:F9:BA:27:AE:B8:30:C2:51:90:F8:2A:77
Certificate issuer:       /CN=EE2EC71ECC9E7BD6A4E89AAC11060412CE5DE69A
Certificate serial:       7415719CF8E04A6DF62B35F3EB47B036FE655BCF
Authority key identifier: EE:2E:C7:1E:CC:9E:7B:D6:A4:E8:9A:AC:11:06:04:12:CE:5D:E6:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE2EC71ECC9E7BD6A4E89AAC11060412CE5DE69A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/323830343a326332303a3a2f33322d3438203d3e20323635313937.roa
Signing time:             Wed 25 Oct 2023 13:56:00 +0000
ROA not before:           Wed 25 Oct 2023 13:51:00 +0000
ROA not after:            Wed 23 Oct 2024 13:56:00 +0000
asID:                     265197
IP address blocks:        2804:2c20::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:15:71:9c:f8:e0:4a:6d:f6:2b:35:f3:eb:47:b0:36:fe:65:5b:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE2EC71ECC9E7BD6A4E89AAC11060412CE5DE69A
        Validity
            Not Before: Oct 25 13:51:00 2023 GMT
            Not After : Oct 23 13:56:00 2024 GMT
        Subject: CN=3082010A0282010100B0CEE542F8F80991FEB6C0FBB33AB0A5896F3B57F15A37B99FEBAB7D9150C135770307151B3288AC727A0DC925DA1102569CD6E1F002C5A323B3D546C1BA52BAD09F1C23090CD24444253710A80C91853E6F524FEAE8095A816656D455B5497DBE69ED1B1A3094821CA0D0631F96D65216D9FE5921A1743C0FEB6EE56AADDB156C4FD974721646D5634DB2844EC6E107A878DEF55D6EA7F16D344250F58318651C5C2F9FEFF42933019D4F3DB93B04348B17F1D87E7EF54C0CE9B44AAC085D7535C81B8870C3DC3019B120B16CC82B4B8D78742ED5D2F64D1502DD9502D33E8D3C0D986C6A8BFD19675BAE170246919634B51B5D244C5EF41C31920ACEA5D9C10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ce:e5:42:f8:f8:09:91:fe:b6:c0:fb:b3:3a:
                    b0:a5:89:6f:3b:57:f1:5a:37:b9:9f:eb:ab:7d:91:
                    50:c1:35:77:03:07:15:1b:32:88:ac:72:7a:0d:c9:
                    25:da:11:02:56:9c:d6:e1:f0:02:c5:a3:23:b3:d5:
                    46:c1:ba:52:ba:d0:9f:1c:23:09:0c:d2:44:44:25:
                    37:10:a8:0c:91:85:3e:6f:52:4f:ea:e8:09:5a:81:
                    66:56:d4:55:b5:49:7d:be:69:ed:1b:1a:30:94:82:
                    1c:a0:d0:63:1f:96:d6:52:16:d9:fe:59:21:a1:74:
                    3c:0f:eb:6e:e5:6a:ad:db:15:6c:4f:d9:74:72:16:
                    46:d5:63:4d:b2:84:4e:c6:e1:07:a8:78:de:f5:5d:
                    6e:a7:f1:6d:34:42:50:f5:83:18:65:1c:5c:2f:9f:
                    ef:f4:29:33:01:9d:4f:3d:b9:3b:04:34:8b:17:f1:
                    d8:7e:7e:f5:4c:0c:e9:b4:4a:ac:08:5d:75:35:c8:
                    1b:88:70:c3:dc:30:19:b1:20:b1:6c:c8:2b:4b:8d:
                    78:74:2e:d5:d2:f6:4d:15:02:dd:95:02:d3:3e:8d:
                    3c:0d:98:6c:6a:8b:fd:19:67:5b:ae:17:02:46:91:
                    96:34:b5:1b:5d:24:4c:5e:f4:1c:31:92:0a:ce:a5:
                    d9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:93:81:A3:6B:8C:B6:31:F9:BA:27:AE:B8:30:C2:51:90:F8:2A:77
            X509v3 Authority Key Identifier:
                keyid:EE:2E:C7:1E:CC:9E:7B:D6:A4:E8:9A:AC:11:06:04:12:CE:5D:E6:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/EE2EC71ECC9E7BD6A4E89AAC11060412CE5DE69A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE2EC71ECC9E7BD6A4E89AAC11060412CE5DE69A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/323830343a326332303a3a2f33322d3438203d3e20323635313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:1d:3b:b3:73:6f:71:80:cd:9c:f0:5f:60:2f:37:30:22:65:
         b0:6d:3b:85:2d:91:5c:40:99:91:4d:5d:d3:66:87:fc:b1:d0:
         59:d8:20:4a:f5:33:9b:1d:de:70:ed:fa:d9:35:0a:3a:fa:aa:
         a8:30:75:ac:24:18:16:38:24:1f:3d:e1:32:e7:b1:62:fb:12:
         4d:a8:f6:05:d6:c6:43:bb:a8:78:3d:22:d9:28:de:b0:00:14:
         52:d2:66:47:eb:12:1e:3c:5e:ca:a1:e8:cd:20:3b:c0:1c:ab:
         f4:80:be:04:81:38:7f:b0:eb:ca:ce:cb:4c:e1:17:38:bb:cb:
         4a:db:0f:12:87:09:ab:7f:4c:f9:17:1d:77:77:e1:67:a0:9a:
         92:0d:be:07:10:c7:c3:05:88:a1:78:b4:47:8f:45:fa:ca:a8:
         12:fd:04:ba:c1:82:2a:c9:7d:3e:8f:41:be:c1:83:02:61:70:
         2a:db:01:1a:77:51:98:51:45:0a:b1:86:49:a8:57:81:fe:56:
         6e:4b:cb:ba:dd:96:ec:66:e4:ff:b1:95:9f:c6:44:44:9a:ef:
         f6:55:66:be:5c:16:6b:c1:15:aa:45:4d:af:a5:7e:7d:a5:1a:
         21:5b:60:31:b4:cd:c4:18:1c:61:2c:d9:30:96:27:2d:0a:0a:
         1c:e7:6b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----