Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/0/323830343a3434633a3a2f33322d3438203d3e20323632373631.roa
File:                     323830343a3434633a3a2f33322d3438203d3e20323632373631.roa (raw, json)
Hash identifier:          oq1SUzlTKxDTiYJpcVjLQQaP7v6NFqGzVb2QaVHxNmo=
Subject key identifier:   E3:80:FD:A7:96:E6:79:E9:7A:18:E1:01:5B:DD:38:38:6A:9F:4E:16
Certificate issuer:       /CN=50DE94754136B9FEA0BC6F60B9C1AD054D25E337
Certificate serial:       1F24D6D9865DE8B8C34AB4F048EDAA0287D39F45
Authority key identifier: 50:DE:94:75:41:36:B9:FE:A0:BC:6F:60:B9:C1:AD:05:4D:25:E3:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/50DE94754136B9FEA0BC6F60B9C1AD054D25E337.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/0/323830343a3434633a3a2f33322d3438203d3e20323632373631.roa
Signing time:             Mon 27 Nov 2023 17:52:00 +0000
ROA not before:           Mon 27 Nov 2023 17:47:00 +0000
ROA not after:            Mon 25 Nov 2024 17:52:00 +0000
asID:                     262761
IP address blocks:        2804:44c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:24:d6:d9:86:5d:e8:b8:c3:4a:b4:f0:48:ed:aa:02:87:d3:9f:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50DE94754136B9FEA0BC6F60B9C1AD054D25E337
        Validity
            Not Before: Nov 27 17:47:00 2023 GMT
            Not After : Nov 25 17:52:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:51:6c:81:12:8e:d2:47:27:6a:1e:b3:2a:20:
                    54:65:2e:58:ff:4f:93:f4:d4:ea:98:bd:e0:5e:0d:
                    17:2d:19:59:f6:6a:f4:04:83:d5:36:79:a7:8a:ef:
                    10:40:97:bc:5f:f8:7f:6b:55:59:21:6c:9b:f6:91:
                    69:9b:85:04:fd:16:ca:86:fe:6f:94:df:0a:2a:8b:
                    e3:4a:d7:7f:53:0b:9b:65:4e:05:30:7f:36:2f:b6:
                    17:11:22:54:75:30:8e:cd:a7:0c:4b:b9:ba:c0:89:
                    aa:f5:5c:9c:1c:ba:5b:44:05:46:ab:59:2f:f8:9f:
                    07:8e:36:1e:dc:35:45:4b:8a:5f:c5:5b:9a:14:68:
                    33:dd:dc:e5:55:bc:51:d5:c2:a1:14:08:ba:46:51:
                    a0:32:07:37:62:dd:d2:5e:b3:57:fd:ff:45:f6:f8:
                    5b:24:e8:6b:8c:9f:5d:b7:25:56:ee:b7:ca:63:70:
                    3e:cc:af:13:cd:9d:c2:94:3d:2f:11:0b:9a:35:12:
                    81:79:c7:57:a5:6b:ee:3b:22:0c:2c:aa:70:1f:bc:
                    b9:7f:9a:cc:f9:7b:73:38:80:80:b0:e2:e2:06:f9:
                    e4:bd:a4:a9:a6:b0:42:55:a4:2a:27:14:64:d6:4e:
                    84:ac:68:da:a9:b0:05:e0:a3:36:ea:f8:26:a5:ba:
                    63:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:80:FD:A7:96:E6:79:E9:7A:18:E1:01:5B:DD:38:38:6A:9F:4E:16
            X509v3 Authority Key Identifier:
                keyid:50:DE:94:75:41:36:B9:FE:A0:BC:6F:60:B9:C1:AD:05:4D:25:E3:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/0/50DE94754136B9FEA0BC6F60B9C1AD054D25E337.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/50DE94754136B9FEA0BC6F60B9C1AD054D25E337.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/0/323830343a3434633a3a2f33322d3438203d3e20323632373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:44c::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:20:49:14:9c:33:3d:e5:d5:21:21:e2:51:d2:da:ec:44:7f:
         21:f8:b9:25:bd:d5:ff:4c:e4:0e:f9:ce:78:a5:55:4c:af:01:
         b2:a7:4a:81:e8:de:5e:c8:d9:49:16:d2:7b:0d:7c:f6:9e:f3:
         e9:f2:a0:1b:6a:02:4e:c4:aa:1b:bb:55:fc:fc:53:bf:1b:fa:
         62:27:4f:8a:b3:ee:25:29:fe:44:63:07:00:6e:f5:a6:0b:1e:
         a9:c2:ec:39:e1:48:9c:6c:43:d8:d1:e8:74:1d:bc:4e:63:c8:
         1b:48:39:10:f1:90:7a:f8:5c:23:9f:16:cb:a4:e2:f2:e6:64:
         06:61:92:f9:c6:b8:d8:34:d5:1e:36:b3:e4:c8:30:b8:d4:a3:
         ec:d2:a6:f1:ac:38:fc:d7:f5:a5:06:54:a6:04:f0:9d:48:fe:
         e7:ba:11:98:98:de:02:79:17:fc:07:04:d9:1b:ae:fb:bb:30:
         19:35:ce:9d:a6:e2:5a:ad:02:c9:84:4f:8b:74:b5:6c:d5:71:
         69:39:6b:a9:fd:be:15:c8:05:86:2a:eb:3e:26:df:e4:b4:7d:
         45:ae:3a:96:82:72:45:e6:19:b9:fe:a5:25:2b:02:c8:cc:94:
         01:07:d8:54:76:fe:fc:43:5f:98:67:ac:3e:ba:19:9a:3e:af:
         5a:06:97:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----