Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AX7UD3Y8rRAG7dzG47CaHiUShNgBfKf2EH24iXL3v3bc/0/323830343a333830383a3a2f33322d3332203d3e20323636343531.roa
File:                     323830343a333830383a3a2f33322d3332203d3e20323636343531.roa (raw, json)
Hash identifier:          OGelcPBlDv1YVoG1l26jUVDNo+B9Crrs1wJ1kWanT2g=
Subject key identifier:   FE:EC:81:44:BC:D5:9B:C1:25:7A:7F:84:29:B1:7A:47:B0:13:E0:B0
Certificate issuer:       /CN=66E18DB07F3005DF457EA73CEE84BE082FC266E1
Certificate serial:       6107B23B910AFC4CA2C710D0D53F6464A70F6AF7
Authority key identifier: 66:E1:8D:B0:7F:30:05:DF:45:7E:A7:3C:EE:84:BE:08:2F:C2:66:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66E18DB07F3005DF457EA73CEE84BE082FC266E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AX7UD3Y8rRAG7dzG47CaHiUShNgBfKf2EH24iXL3v3bc/0/323830343a333830383a3a2f33322d3332203d3e20323636343531.roa
Signing time:             Tue 16 May 2023 14:44:31 +0000
ROA not before:           Tue 16 May 2023 14:39:31 +0000
ROA not after:            Tue 14 May 2024 14:44:31 +0000
asID:                     266451
IP address blocks:        2804:3808::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:07:b2:3b:91:0a:fc:4c:a2:c7:10:d0:d5:3f:64:64:a7:0f:6a:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66E18DB07F3005DF457EA73CEE84BE082FC266E1
        Validity
            Not Before: May 16 14:39:31 2023 GMT
            Not After : May 14 14:44:31 2024 GMT
        Subject: CN=FEEC8144BCD59BC1257A7F8429B17A47B013E0B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0a:30:a8:b0:b0:c3:8a:b0:94:1f:f7:34:cf:
                    15:aa:a4:28:b0:5c:43:dc:83:70:14:50:6b:07:bb:
                    a0:60:03:ca:29:80:ca:a7:9b:25:67:af:e8:bd:26:
                    5b:0a:33:a2:0e:84:53:e9:e0:4d:88:9b:9e:61:0a:
                    45:75:23:db:73:78:e3:f2:14:ff:af:02:52:e8:42:
                    63:88:d8:44:a5:1e:2c:28:5b:93:7c:51:17:15:e2:
                    07:83:3a:0a:83:45:ac:86:88:70:57:70:a7:2f:81:
                    06:90:e9:f4:e1:3b:96:0b:79:a5:69:55:c8:4e:2d:
                    26:19:79:35:10:7a:f5:f5:93:b8:c5:d8:82:ed:e1:
                    79:7c:58:3c:71:8b:4e:8f:3c:1f:e2:ea:c5:d1:ae:
                    ae:95:b6:b0:92:e8:ef:ed:a3:91:9d:27:c3:08:3b:
                    e7:17:8b:6a:af:77:70:41:a0:1e:a4:9f:c4:d8:e4:
                    3e:9f:43:c6:49:0f:f0:fd:32:14:fd:e8:c7:36:4d:
                    2d:5b:fe:c1:70:4f:e2:f8:39:30:2c:e4:2b:30:03:
                    44:5c:ae:a0:18:33:3a:ad:c0:fe:25:74:51:d2:3f:
                    99:e0:bc:89:81:df:67:55:b2:93:1a:3c:ba:bb:7f:
                    43:71:3e:ba:df:d3:90:fe:9f:0e:8a:78:d4:fb:47:
                    4f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:EC:81:44:BC:D5:9B:C1:25:7A:7F:84:29:B1:7A:47:B0:13:E0:B0
            X509v3 Authority Key Identifier:
                keyid:66:E1:8D:B0:7F:30:05:DF:45:7E:A7:3C:EE:84:BE:08:2F:C2:66:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AX7UD3Y8rRAG7dzG47CaHiUShNgBfKf2EH24iXL3v3bc/0/66E18DB07F3005DF457EA73CEE84BE082FC266E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66E18DB07F3005DF457EA73CEE84BE082FC266E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AX7UD3Y8rRAG7dzG47CaHiUShNgBfKf2EH24iXL3v3bc/0/323830343a333830383a3a2f33322d3332203d3e20323636343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3808::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:30:40:39:c6:55:c4:98:2b:2a:fa:96:80:ea:05:e5:23:0a:
         af:60:2f:35:38:f4:ab:10:f5:8d:31:6c:8c:3f:83:14:b7:cd:
         cb:ac:e3:a2:3d:57:42:74:dc:aa:7f:41:16:b4:72:f6:36:15:
         f9:9f:e2:13:1b:22:8c:d0:21:df:99:a3:f4:ea:99:3e:9f:78:
         51:a5:f0:39:3b:8a:8e:55:40:8e:82:d5:48:e4:eb:2a:aa:1b:
         40:88:56:b1:64:36:fb:30:e3:47:26:ae:6f:8c:8c:67:48:3c:
         83:ba:86:42:82:bb:fd:ea:b7:ac:b9:8d:72:1d:58:07:63:3f:
         21:10:74:34:b2:e4:77:f0:f6:0c:72:c1:b2:53:e2:d6:d1:88:
         e8:a4:b8:bb:c2:26:fe:32:33:eb:7b:f5:b2:1e:69:ab:b1:80:
         23:7b:b8:80:f3:cc:5d:33:0c:5d:a4:41:a1:ab:69:2e:67:31:
         be:ca:06:09:03:00:04:bc:31:15:5a:f4:77:2d:8a:9d:79:91:
         09:6a:5c:a3:40:65:1f:27:d9:5e:21:81:56:52:d5:43:8e:ad:
         a8:e7:54:9d:94:04:5f:b6:80:3c:c1:27:83:06:2f:b9:a5:1c:
         63:84:65:fb:f1:30:88:12:37:cd:f0:9c:08:25:20:10:e3:b9:
         81:c8:9b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----