Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/2/323830343a353637343a383030303a3a2f33342d3334203d3e20323637393939.roa
File:                     323830343a353637343a383030303a3a2f33342d3334203d3e20323637393939.roa (raw, json)
Hash identifier:          13jR5FZ9lMKudtXH3G7rCj51zB0Az8qKt3ZPGd4Dg6g=
Subject key identifier:   D8:77:E9:1B:93:DB:51:48:C9:D2:95:C7:C5:8B:39:A4:2B:E2:0E:9F
Certificate issuer:       /CN=97DFA5B9AAD5FA9141F4ECCECB06D72AABDB0E32
Certificate serial:       5D40B72BF1A4871988CC354E750DFB71CBD4C949
Authority key identifier: 97:DF:A5:B9:AA:D5:FA:91:41:F4:EC:CE:CB:06:D7:2A:AB:DB:0E:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97DFA5B9AAD5FA9141F4ECCECB06D72AABDB0E32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/2/323830343a353637343a383030303a3a2f33342d3334203d3e20323637393939.roa
Signing time:             Thu 04 Apr 2024 23:08:49 +0000
ROA not before:           Thu 04 Apr 2024 23:03:49 +0000
ROA not after:            Thu 03 Apr 2025 23:08:49 +0000
asID:                     267999
IP address blocks:        2804:5674:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:40:b7:2b:f1:a4:87:19:88:cc:35:4e:75:0d:fb:71:cb:d4:c9:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97DFA5B9AAD5FA9141F4ECCECB06D72AABDB0E32
        Validity
            Not Before: Apr  4 23:03:49 2024 GMT
            Not After : Apr  3 23:08:49 2025 GMT
        Subject: CN=D877E91B93DB5148C9D295C7C58B39A42BE20E9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:61:24:8a:49:45:bb:8e:97:5c:62:53:1b:25:
                    ea:24:1b:ba:60:41:fc:d9:f1:9d:e2:cb:7c:19:1e:
                    d0:45:68:7e:fd:8b:c6:09:85:41:82:4c:1d:13:9f:
                    8f:4b:1c:3e:df:af:f1:43:0b:8c:fb:91:61:4c:f4:
                    19:22:2c:35:85:ec:a2:92:90:66:6b:bf:93:f0:a2:
                    a5:32:4b:3d:74:2c:fc:71:fe:14:48:2e:09:7a:0a:
                    45:2b:6b:4f:33:48:79:1f:1e:46:f4:71:64:bb:3a:
                    fb:39:ca:8d:d5:45:eb:fe:6d:ed:2b:29:93:d3:c9:
                    07:36:16:bf:65:8f:09:ce:b8:1d:1c:67:6c:c9:c0:
                    75:d9:5b:87:c0:56:5f:69:d9:58:84:b7:92:dd:fd:
                    7e:e0:96:e0:ed:4b:fd:44:db:8f:28:3e:3e:c9:01:
                    93:89:61:64:5f:88:f9:89:46:f2:0d:f4:99:dd:2b:
                    5a:d8:5d:c2:74:22:4e:fb:0a:84:29:d8:ee:8d:8f:
                    bd:ab:40:18:28:0f:e9:d6:70:24:f7:b3:ef:49:ee:
                    81:19:0b:e0:84:59:96:79:57:fa:f1:5e:d9:28:65:
                    e5:d9:74:f8:e3:51:f3:fc:0d:0c:d2:0e:f4:0c:83:
                    f4:b3:e1:03:ca:08:7b:f6:bc:04:5f:7d:c6:42:ad:
                    f0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:77:E9:1B:93:DB:51:48:C9:D2:95:C7:C5:8B:39:A4:2B:E2:0E:9F
            X509v3 Authority Key Identifier:
                keyid:97:DF:A5:B9:AA:D5:FA:91:41:F4:EC:CE:CB:06:D7:2A:AB:DB:0E:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/2/97DFA5B9AAD5FA9141F4ECCECB06D72AABDB0E32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97DFA5B9AAD5FA9141F4ECCECB06D72AABDB0E32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/2/323830343a353637343a383030303a3a2f33342d3334203d3e20323637393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5674:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7d:7e:d5:b9:18:f4:f4:9b:ca:f6:1b:5f:4c:81:a7:a5:64:45:
         c0:ba:25:f9:9c:02:90:7d:ae:1b:cf:1b:64:ae:69:f0:c0:7d:
         48:1b:45:6c:8d:cc:d3:39:cf:69:6c:39:92:d8:3a:69:2a:3a:
         15:13:03:96:1f:7e:82:03:3e:4e:05:f0:7d:ec:54:c1:78:82:
         6a:33:0c:ed:e8:16:da:21:fb:2e:c6:4b:03:e8:f5:63:ce:47:
         c0:9a:55:a7:7a:cc:3c:73:d6:fd:70:d2:53:55:b3:71:db:86:
         79:0d:59:af:ff:79:45:8d:43:28:19:98:bd:b1:1f:73:ed:f0:
         42:5a:66:6d:f6:7e:1d:1e:13:e3:7f:68:89:dd:c0:29:ca:8d:
         a7:bf:30:be:24:f9:77:15:4e:39:54:56:d0:4b:b4:e9:5e:07:
         50:b1:a7:8b:ac:3e:da:ff:de:ed:8a:ce:a2:2e:da:09:a2:15:
         25:dd:95:cc:e0:a6:44:16:cf:51:94:bd:4e:3b:cd:b9:62:e3:
         d4:64:30:be:a5:17:c6:9f:43:ef:11:9e:0d:36:67:94:60:f4:
         d8:f7:51:e0:61:12:23:24:63:fa:5e:36:a1:e1:2b:d9:fa:fb:
         34:0a:45:75:ef:d0:90:28:bc:c8:54:55:1d:0c:5e:16:fd:7c:
         04:ce:bd:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----