Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/323830343a326663383a3a2f33352d3335203d3e20323632363131.roa
File:                     323830343a326663383a3a2f33352d3335203d3e20323632363131.roa (raw, json)
Hash identifier:          oSkcFLLMal4EqlJAiqv+Zj/TOZrKX0NVCvb0S52t/M0=
Subject key identifier:   2D:FD:43:5B:82:E7:2E:82:CE:94:9E:4D:4D:D9:BF:92:5D:16:12:C4
Certificate issuer:       /CN=ADAED9008F24F5B61987180BB1C1D68810BA17CC
Certificate serial:       2EEE05EA54213FC8B3365ED1715803BEEC90D7B6
Authority key identifier: AD:AE:D9:00:8F:24:F5:B6:19:87:18:0B:B1:C1:D6:88:10:BA:17:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAED9008F24F5B61987180BB1C1D68810BA17CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/323830343a326663383a3a2f33352d3335203d3e20323632363131.roa
Signing time:             Fri 11 Aug 2023 11:30:00 +0000
ROA not before:           Fri 11 Aug 2023 11:25:00 +0000
ROA not after:            Fri 09 Aug 2024 11:30:00 +0000
asID:                     262611
IP address blocks:        2804:2fc8::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ee:05:ea:54:21:3f:c8:b3:36:5e:d1:71:58:03:be:ec:90:d7:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADAED9008F24F5B61987180BB1C1D68810BA17CC
        Validity
            Not Before: Aug 11 11:25:00 2023 GMT
            Not After : Aug  9 11:30:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:86:19:cd:57:4d:a5:1d:bc:06:34:b4:85:53:
                    85:ee:6c:20:33:02:b3:af:a6:b7:ad:e8:d5:c5:f5:
                    65:f3:25:03:a6:4c:5d:5c:7b:64:98:e1:c1:14:94:
                    87:de:f4:96:41:26:3d:94:d0:7b:28:eb:d9:08:16:
                    e4:9a:f6:22:c9:c7:2b:ed:f3:57:fa:89:75:e9:d1:
                    a7:4f:32:da:8f:b2:19:9b:95:37:b6:6d:ea:10:cb:
                    65:3c:0e:15:09:22:6e:86:04:3b:8e:e3:8e:19:91:
                    e1:b8:a1:c5:26:c7:c3:d6:b1:cb:a9:4e:50:45:1e:
                    36:99:64:a4:5d:55:2d:f8:b4:10:c6:48:2b:a9:d9:
                    d6:7b:ca:97:aa:c4:9f:f2:9b:d0:11:88:55:a6:27:
                    9a:0f:f0:33:9a:1e:89:38:d8:06:bc:d0:38:75:e2:
                    e7:dc:c6:25:85:f0:ea:83:f8:cb:0e:a3:d2:db:f5:
                    a5:2c:59:5e:e5:7d:19:b0:8b:b6:aa:32:c8:79:27:
                    2b:09:0a:50:c3:53:14:14:8b:a8:ae:61:1b:71:ca:
                    ef:36:cc:9c:e8:f6:ce:a9:7d:ee:1b:2f:b5:fe:97:
                    cf:12:8f:38:72:d4:ec:d9:9f:2e:17:62:48:10:23:
                    6a:66:a8:ef:26:12:21:47:e3:45:81:1b:88:68:51:
                    f7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:FD:43:5B:82:E7:2E:82:CE:94:9E:4D:4D:D9:BF:92:5D:16:12:C4
            X509v3 Authority Key Identifier:
                keyid:AD:AE:D9:00:8F:24:F5:B6:19:87:18:0B:B1:C1:D6:88:10:BA:17:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/ADAED9008F24F5B61987180BB1C1D68810BA17CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAED9008F24F5B61987180BB1C1D68810BA17CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/323830343a326663383a3a2f33352d3335203d3e20323632363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2fc8::/35

    Signature Algorithm: sha256WithRSAEncryption
         70:04:c2:19:ac:c0:30:68:20:a1:65:0e:52:cb:c2:3e:51:9b:
         68:c5:cb:7e:d1:c9:58:0a:71:87:94:a0:7c:3f:77:78:e6:4d:
         0b:81:62:9f:47:7a:cf:a0:a7:2d:f5:03:4d:97:f2:44:8d:df:
         87:9f:32:9a:45:36:d9:c6:73:bb:05:d8:86:5c:a2:90:53:e2:
         47:4b:0a:dc:04:2e:a2:39:10:24:ff:1d:e3:f8:b3:34:2e:69:
         53:fc:ca:af:64:5e:02:dc:d9:f3:d6:f5:10:98:23:95:43:cf:
         2c:a7:a5:dd:b0:e2:00:00:b4:bc:f5:de:e8:c7:b4:68:2e:93:
         eb:e8:ee:fc:99:93:c4:4b:ff:8c:3a:ea:75:32:10:cb:3a:3c:
         9b:d6:a8:7f:6c:0b:57:a6:50:88:10:80:14:09:d9:f2:f5:f9:
         cb:59:67:d7:5f:aa:dc:dd:e0:89:62:96:ad:13:95:a2:d2:88:
         71:1c:eb:a0:10:60:ee:b9:ad:c5:75:cb:65:4b:f9:ef:17:d1:
         6d:f3:41:9b:95:30:29:44:91:f4:2a:6e:b6:1a:40:4b:f1:fa:
         ed:e4:10:57:1f:de:0a:74:7f:02:4b:b2:66:56:c4:33:75:a4:
         1c:d2:8b:0a:2a:36:69:06:80:cb:49:d2:13:82:74:4a:ac:02:
         ee:04:14:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----