Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/0/323830343a343366633a383030303a3a2f33332d3333203d3e20323637363134.roa
File:                     323830343a343366633a383030303a3a2f33332d3333203d3e20323637363134.roa (raw, json)
Hash identifier:          K/T/I8sNAmQK63tvJyDKrqqeb5vquRM8lsq1ao865aU=
Subject key identifier:   AE:C8:C7:6B:3F:2A:8B:2B:42:0A:B3:FE:EB:F7:E8:F5:3E:32:FD:79
Certificate issuer:       /CN=7A3557CA7C2366DC18DEEBB7433B1A3D93D45FFC
Certificate serial:       5252504AA9E0900A7146E5C400C9B714DC456A1A
Authority key identifier: 7A:35:57:CA:7C:23:66:DC:18:DE:EB:B7:43:3B:1A:3D:93:D4:5F:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A3557CA7C2366DC18DEEBB7433B1A3D93D45FFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/0/323830343a343366633a383030303a3a2f33332d3333203d3e20323637363134.roa
Signing time:             Wed 06 Dec 2023 18:21:36 +0000
ROA not before:           Wed 06 Dec 2023 18:16:36 +0000
ROA not after:            Wed 04 Dec 2024 18:21:36 +0000
asID:                     267614
IP address blocks:        2804:43fc:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:52:50:4a:a9:e0:90:0a:71:46:e5:c4:00:c9:b7:14:dc:45:6a:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A3557CA7C2366DC18DEEBB7433B1A3D93D45FFC
        Validity
            Not Before: Dec  6 18:16:36 2023 GMT
            Not After : Dec  4 18:21:36 2024 GMT
        Subject: CN=AEC8C76B3F2A8B2B420AB3FEEBF7E8F53E32FD79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ed:27:db:a0:62:00:35:2f:b1:d0:42:aa:4f:
                    7e:70:8a:bf:5d:97:13:f7:47:36:10:a5:c1:ec:cb:
                    4a:55:c3:a2:9e:21:34:b7:a3:1e:48:a0:b1:83:66:
                    fc:e5:c7:4e:c0:6b:d2:1a:2a:34:29:ab:9e:8e:35:
                    88:ac:91:52:d7:bb:fc:e7:36:5c:b3:fc:09:39:6a:
                    a0:69:53:fc:77:4e:58:72:bf:66:fe:e9:2f:58:f4:
                    77:df:6d:57:14:fb:45:0f:02:f4:f7:bb:0b:2a:fa:
                    6d:27:83:24:a5:9f:3e:45:71:64:86:8d:5f:2c:fe:
                    98:27:a7:99:34:56:c5:9f:b4:b7:b6:7b:6a:76:76:
                    d8:05:01:15:27:52:05:34:eb:a0:5e:fd:75:2c:b7:
                    87:e3:1b:7e:b8:2f:23:33:49:93:bc:9d:0b:09:68:
                    f6:0f:b0:3a:33:74:ec:fd:91:bc:d2:5b:cf:44:8c:
                    30:9b:24:17:d1:c7:fa:80:9b:9f:21:ef:54:52:f1:
                    9c:1a:2c:39:9d:d3:2a:d7:d2:97:f7:b2:92:98:a9:
                    2d:89:95:0c:84:a2:9e:79:95:00:d2:77:49:48:e9:
                    99:e5:71:fd:a9:dc:7e:56:6f:0a:19:0f:b2:c9:19:
                    e9:35:e8:61:d4:b7:a7:24:31:62:92:0a:fc:85:3f:
                    b5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C8:C7:6B:3F:2A:8B:2B:42:0A:B3:FE:EB:F7:E8:F5:3E:32:FD:79
            X509v3 Authority Key Identifier:
                keyid:7A:35:57:CA:7C:23:66:DC:18:DE:EB:B7:43:3B:1A:3D:93:D4:5F:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/0/7A3557CA7C2366DC18DEEBB7433B1A3D93D45FFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A3557CA7C2366DC18DEEBB7433B1A3D93D45FFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/0/323830343a343366633a383030303a3a2f33332d3333203d3e20323637363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43fc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         89:bb:b5:96:89:51:f9:71:b5:68:0e:21:f7:66:c6:44:27:4d:
         ff:95:01:e6:ff:5b:19:18:f0:37:f5:08:67:2b:8f:bb:c9:9f:
         d8:9e:82:8d:17:a6:94:9e:95:6e:29:7e:88:c8:83:a6:17:0b:
         61:a9:be:b9:6e:ca:ce:05:32:b4:bc:e3:71:5c:68:d6:47:21:
         3e:10:b6:87:f1:c8:94:57:86:d5:a3:a7:1c:5e:62:82:b0:38:
         07:11:b8:24:09:13:1e:7b:f8:84:02:68:41:d9:e9:8b:2d:82:
         7f:af:6b:16:0d:1f:58:8f:c9:28:f0:f4:88:b8:2f:f1:88:7c:
         49:42:74:37:f3:bd:53:db:f5:e4:d6:c5:0d:4c:0f:ec:88:f8:
         b6:c7:c0:57:e7:0d:bc:33:72:7e:5d:04:3b:65:bb:8c:6a:6c:
         2b:ce:80:fc:02:a6:7d:df:ec:b8:c4:0f:59:55:8e:22:9c:f6:
         eb:98:3d:a0:57:dd:bd:ce:56:b7:70:c4:30:b8:ea:6f:ab:50:
         91:5b:6e:97:47:bf:1d:c6:0b:ba:f3:51:6c:17:a2:92:be:ab:
         41:24:10:38:f0:99:16:b8:50:93:ad:d4:16:4a:1e:68:cf:51:
         2f:46:9c:ed:dd:f8:d5:20:f1:5a:5f:6d:92:99:cc:f0:f6:2d:
         b6:0d:d1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----