Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/1/323830343a333163633a3a2f33322d3332203d3e20323635303338.roa
File:                     323830343a333163633a3a2f33322d3332203d3e20323635303338.roa (raw, json)
Hash identifier:          z+01tdVB4RUIXuzBa/0GgzJthSFebwNXTCrhTmgAJSs=
Subject key identifier:   52:93:C9:97:C8:9A:34:87:62:B9:ED:FB:3A:D5:82:47:2D:2D:3C:F3
Certificate issuer:       /CN=72C60932E11BF52F00E37EBC4445CD6E838E3AF5
Certificate serial:       61BA8FFFD8202677770962CE9504CB056BE291F2
Authority key identifier: 72:C6:09:32:E1:1B:F5:2F:00:E3:7E:BC:44:45:CD:6E:83:8E:3A:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72C60932E11BF52F00E37EBC4445CD6E838E3AF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/1/323830343a333163633a3a2f33322d3332203d3e20323635303338.roa
Signing time:             Thu 04 Apr 2024 09:18:24 +0000
ROA not before:           Thu 04 Apr 2024 09:13:24 +0000
ROA not after:            Thu 03 Apr 2025 09:18:24 +0000
asID:                     265038
IP address blocks:        2804:31cc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ba:8f:ff:d8:20:26:77:77:09:62:ce:95:04:cb:05:6b:e2:91:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72C60932E11BF52F00E37EBC4445CD6E838E3AF5
        Validity
            Not Before: Apr  4 09:13:24 2024 GMT
            Not After : Apr  3 09:18:24 2025 GMT
        Subject: CN=5293C997C89A348762B9EDFB3AD582472D2D3CF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3b:43:28:2e:41:95:59:e6:09:ff:ad:1f:ff:
                    1e:1c:33:e0:49:2d:99:2e:5f:b8:71:fe:d3:88:ca:
                    02:52:1f:0d:da:a2:73:4c:b8:55:48:fe:4f:19:4f:
                    35:dd:be:2a:30:c1:26:4f:34:1e:96:ab:1c:76:d3:
                    f5:45:bb:79:a9:9e:18:55:76:5a:1b:b7:cb:8b:4e:
                    3a:a3:9f:c0:18:c5:0d:8d:60:44:3c:1b:f9:54:45:
                    f9:2a:36:2b:82:5c:c0:d1:17:dc:f7:e5:ab:66:ec:
                    01:c2:94:f7:f1:31:c5:cf:38:15:8f:51:44:e4:2e:
                    be:d4:5d:24:76:51:d3:e2:a8:22:f7:b6:37:71:2c:
                    fe:09:ad:69:f1:e1:39:1e:c7:b6:f6:e4:a7:53:a5:
                    13:e8:ae:93:db:51:7a:a1:8e:b4:fe:1e:7d:75:1c:
                    0d:cd:4f:cf:37:4d:c2:09:6c:17:55:51:70:8a:97:
                    cb:87:bb:1b:b2:b5:54:ee:e6:84:dd:88:9e:a4:05:
                    c5:b5:f7:32:be:67:63:41:ee:ca:2e:93:5d:f5:b1:
                    4f:8b:70:a9:f5:e0:0a:7d:9d:a5:ea:f4:90:7c:89:
                    9d:37:6e:cb:1e:06:89:e6:f6:c8:6c:a3:db:d7:7f:
                    f7:58:77:4a:a8:4e:e0:5e:4f:04:c3:66:5c:07:64:
                    42:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:93:C9:97:C8:9A:34:87:62:B9:ED:FB:3A:D5:82:47:2D:2D:3C:F3
            X509v3 Authority Key Identifier:
                keyid:72:C6:09:32:E1:1B:F5:2F:00:E3:7E:BC:44:45:CD:6E:83:8E:3A:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/1/72C60932E11BF52F00E37EBC4445CD6E838E3AF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72C60932E11BF52F00E37EBC4445CD6E838E3AF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/1/323830343a333163633a3a2f33322d3332203d3e20323635303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:31cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:99:4e:74:eb:c1:ca:8d:3c:c4:5f:3f:2d:da:6f:f7:85:10:
         ce:4e:ad:f9:8d:f8:81:1c:15:37:64:17:e4:73:2f:e6:26:44:
         04:31:fd:53:5f:79:a0:b1:15:17:45:66:5e:2d:4e:ea:fc:07:
         56:23:a4:12:ac:78:a2:af:98:d3:80:a3:a9:a1:7f:3a:55:89:
         0f:41:2e:1e:1f:06:74:59:91:b6:76:be:bb:1e:6f:d0:b8:3b:
         ef:ef:f1:f1:c1:a3:e4:9c:df:06:c9:5d:65:b1:3b:df:77:38:
         c5:f7:6e:93:c8:a5:5a:3c:36:46:7b:f1:b3:31:e1:00:4c:24:
         22:55:1f:74:30:dd:cf:7b:75:07:b5:32:0f:68:b1:31:53:d8:
         25:75:51:a2:ba:70:88:fb:4a:f8:a5:13:89:e1:7f:9d:92:55:
         e9:a1:55:08:9b:18:7d:ee:d3:41:84:0b:d5:a5:2f:4c:f8:36:
         f1:08:d7:af:a4:4b:3a:a8:09:8e:37:6e:4c:6f:60:97:05:bb:
         b8:15:a8:7b:0e:2e:4d:e9:9e:09:1e:13:39:0e:e2:9e:c0:b5:
         c5:5e:b4:4c:6f:bd:4f:ab:3d:16:8f:c7:36:f7:a7:df:18:e4:
         1a:89:9a:56:09:50:27:c5:b9:57:4a:20:2c:88:59:4a:24:93:
         38:5d:d6:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----