Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/1/323830343a353637343a3a2f33322d3332203d3e20323637393939.roa
File:                     323830343a353637343a3a2f33322d3332203d3e20323637393939.roa (raw, json)
Hash identifier:          c7GCeYed5oYXYVPiraaDWvJAVukG5Ks40yEPF9sxOMI=
Subject key identifier:   97:CA:53:A2:81:ED:65:AE:77:F5:EB:EF:0D:8F:65:34:D1:79:CB:97
Certificate issuer:       /CN=387AF1348EDD63172DB6EE8E38682949F9D3E956
Certificate serial:       71BC163F3D40E77667AE0DB43B9501132D24C258
Authority key identifier: 38:7A:F1:34:8E:DD:63:17:2D:B6:EE:8E:38:68:29:49:F9:D3:E9:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/387AF1348EDD63172DB6EE8E38682949F9D3E956.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/1/323830343a353637343a3a2f33322d3332203d3e20323637393939.roa
Signing time:             Tue 26 Dec 2023 16:15:39 +0000
ROA not before:           Tue 26 Dec 2023 16:10:39 +0000
ROA not after:            Tue 24 Dec 2024 16:15:39 +0000
asID:                     267999
IP address blocks:        2804:5674::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:bc:16:3f:3d:40:e7:76:67:ae:0d:b4:3b:95:01:13:2d:24:c2:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=387AF1348EDD63172DB6EE8E38682949F9D3E956
        Validity
            Not Before: Dec 26 16:10:39 2023 GMT
            Not After : Dec 24 16:15:39 2024 GMT
        Subject: CN=97CA53A281ED65AE77F5EBEF0D8F6534D179CB97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3a:b3:c9:17:84:7b:7b:d6:40:d3:6d:d2:80:
                    af:09:33:60:02:cd:56:9b:b4:0f:55:77:ef:d9:df:
                    48:9f:15:4e:99:79:2b:79:68:e6:c1:f0:5f:e4:2d:
                    89:d8:9c:ec:9b:da:3d:9e:63:fc:4f:1b:39:9c:bb:
                    36:d7:1f:ef:56:90:38:90:62:f3:a6:36:86:ca:db:
                    7c:a3:42:66:bc:ca:a4:2c:bc:58:a9:cd:92:05:52:
                    50:db:7c:81:77:16:ee:f8:27:45:0a:de:dc:f4:3a:
                    92:50:da:4a:4f:7b:1d:bd:27:66:5a:31:7d:fe:d5:
                    20:af:c1:46:89:6f:78:e5:90:0f:43:4b:b7:43:53:
                    1c:71:24:f8:84:63:2a:fb:e8:09:11:f9:65:c5:ad:
                    e8:45:ff:2b:20:27:86:7b:20:8c:dc:ff:92:92:1c:
                    ab:a7:d7:25:b0:88:f3:1f:8e:2a:39:18:c8:09:23:
                    37:18:10:b8:50:a7:f5:39:34:68:3d:37:7c:e4:1e:
                    cd:40:fd:19:9d:f1:c9:87:f3:09:8e:ad:05:07:29:
                    b3:56:43:b7:ef:eb:90:ce:c1:2f:3b:05:f8:1a:91:
                    26:b7:c9:eb:c0:87:9a:36:54:7e:ef:59:1a:fd:02:
                    b1:a4:53:c1:8d:22:f5:b4:ba:8a:e6:ea:73:c2:5a:
                    df:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:CA:53:A2:81:ED:65:AE:77:F5:EB:EF:0D:8F:65:34:D1:79:CB:97
            X509v3 Authority Key Identifier:
                keyid:38:7A:F1:34:8E:DD:63:17:2D:B6:EE:8E:38:68:29:49:F9:D3:E9:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/1/387AF1348EDD63172DB6EE8E38682949F9D3E956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/387AF1348EDD63172DB6EE8E38682949F9D3E956.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/1/323830343a353637343a3a2f33322d3332203d3e20323637393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5674::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:b4:6e:0f:43:c4:5d:af:3e:83:96:ba:3a:88:25:13:5a:c2:
         d2:5c:9d:db:e6:39:73:2b:4b:55:60:88:fd:c5:d6:7b:39:d3:
         f5:76:6a:c5:39:de:d3:cb:e7:3c:8a:a1:a4:53:01:e6:36:76:
         d9:28:65:bd:5c:d3:ba:0f:25:7e:0c:a8:cc:a7:20:34:2c:0d:
         07:08:65:0d:37:87:13:79:ad:b7:41:e6:b3:5b:be:2e:f9:dd:
         d5:54:45:23:62:25:11:a7:73:c8:2d:8b:3e:f5:42:8a:6a:c1:
         20:76:5a:70:c6:17:51:0d:c1:4c:4b:53:4f:b3:cd:5f:9e:eb:
         6d:55:0d:8f:03:08:70:64:5e:49:15:0d:9e:7e:37:6f:95:42:
         9d:a8:f5:09:78:bc:e2:12:13:cf:50:75:a6:e0:c1:15:46:4f:
         84:89:7d:b7:f2:a5:d2:4e:8f:75:da:ac:d3:a5:60:ef:fb:36:
         1c:f7:50:c3:01:f6:8c:ad:8d:09:ec:47:2d:97:f4:89:bd:4e:
         2f:3a:a0:c8:dc:a1:ee:46:73:3c:a7:1f:8d:47:77:2b:3e:6e:
         14:6f:a1:9e:96:2e:02:e2:44:f9:32:96:7b:0e:a6:a7:23:cb:
         20:94:6b:f7:14:dd:55:14:e7:f0:a9:fc:f3:69:e7:34:c2:82:
         20:f2:35:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----