Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0/323830343a346630303a3a2f33322d3332203d3e20323638323937.roa
File:                     323830343a346630303a3a2f33322d3332203d3e20323638323937.roa (raw, json)
Hash identifier:          b1MHNCPkGbblhFbyQQyf8tNgNp10u72m8dXRSCFHz+c=
Subject key identifier:   01:F8:37:5A:BA:60:F1:73:8F:22:1B:89:AE:18:51:F1:43:59:82:64
Certificate issuer:       /CN=90487C5691390B1D7F5E129EBFEA377AA41D94C0
Certificate serial:       5454E62720CF73725CA6C53A501D48168250EF5F
Authority key identifier: 90:48:7C:56:91:39:0B:1D:7F:5E:12:9E:BF:EA:37:7A:A4:1D:94:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90487C5691390B1D7F5E129EBFEA377AA41D94C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0/323830343a346630303a3a2f33322d3332203d3e20323638323937.roa
Signing time:             Tue 05 Dec 2023 15:44:39 +0000
ROA not before:           Tue 05 Dec 2023 15:39:39 +0000
ROA not after:            Tue 03 Dec 2024 15:44:39 +0000
asID:                     268297
IP address blocks:        2804:4f00::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:54:e6:27:20:cf:73:72:5c:a6:c5:3a:50:1d:48:16:82:50:ef:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90487C5691390B1D7F5E129EBFEA377AA41D94C0
        Validity
            Not Before: Dec  5 15:39:39 2023 GMT
            Not After : Dec  3 15:44:39 2024 GMT
        Subject: CN=01F8375ABA60F1738F221B89AE1851F143598264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ae:9a:96:73:0b:0c:e5:6f:7d:26:39:49:d6:
                    46:75:bd:f6:14:da:11:ea:f2:77:3f:08:6a:b8:3b:
                    a2:1c:36:5e:17:01:a6:74:c3:f7:e6:d6:88:64:d3:
                    59:5e:bd:f4:3e:0e:0e:b7:1b:39:83:c3:c7:27:b9:
                    4a:28:fa:f7:04:a8:93:2a:5a:97:86:76:34:31:91:
                    c9:be:b3:f6:0a:14:81:1f:e3:00:2f:da:18:69:d9:
                    a2:5d:5f:15:f5:7f:df:17:4b:0d:eb:3b:9e:e4:ad:
                    cb:89:e4:06:a7:8a:bb:21:25:89:db:8c:62:b0:e0:
                    a6:c9:b9:52:58:7a:f2:db:65:09:d2:dd:8f:3c:8e:
                    40:1f:9a:2d:39:93:0a:f0:8e:23:ef:b3:42:e5:71:
                    b5:83:81:3b:a2:d0:b9:9c:47:1c:25:ea:89:a2:d1:
                    30:71:08:fb:b6:2e:80:86:e5:26:cb:6a:6c:22:bd:
                    b0:84:26:75:67:9d:61:52:ac:01:a6:66:b9:02:b5:
                    9c:fe:41:17:89:7d:4d:e5:a2:dc:05:a5:d1:82:d7:
                    98:ef:5e:5c:81:9e:63:af:96:9b:d6:11:8b:62:4a:
                    21:b2:bd:3f:d3:e4:c4:9d:e5:88:51:28:e0:cf:58:
                    a7:e3:6f:10:51:b8:ab:4a:42:4e:67:6c:9c:5d:93:
                    0d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F8:37:5A:BA:60:F1:73:8F:22:1B:89:AE:18:51:F1:43:59:82:64
            X509v3 Authority Key Identifier:
                keyid:90:48:7C:56:91:39:0B:1D:7F:5E:12:9E:BF:EA:37:7A:A4:1D:94:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0/90487C5691390B1D7F5E129EBFEA377AA41D94C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90487C5691390B1D7F5E129EBFEA377AA41D94C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0/323830343a346630303a3a2f33322d3332203d3e20323638323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         c5:ea:a3:01:55:48:14:d2:ba:68:03:67:ae:77:76:e9:f0:f3:
         a1:83:e0:99:52:2c:ee:9c:a6:b2:26:20:18:05:66:eb:43:ce:
         47:8c:51:29:43:0e:62:6b:ad:6e:3a:6a:01:e2:b7:8a:2b:b2:
         7d:af:d5:46:ff:fc:e2:a9:3f:17:ee:a5:97:a8:88:4c:d9:f6:
         20:9f:08:fe:ab:24:d4:7b:10:9d:e9:e2:10:df:7b:0c:40:ce:
         a0:9f:04:00:eb:8b:95:a2:79:51:0b:81:da:21:e1:63:ef:7b:
         d7:69:2f:10:38:56:05:96:f4:48:f2:77:39:5a:3f:2d:2d:a3:
         22:57:43:17:f5:4b:09:ce:c2:77:f7:20:86:df:55:21:02:27:
         b0:77:b0:2f:d9:10:00:ea:a6:d8:20:9b:d9:dc:8d:eb:f0:d2:
         33:bb:98:85:61:82:d9:de:80:33:30:4e:98:27:9c:be:93:6b:
         29:d9:8f:98:40:32:0b:a1:7f:c3:66:52:87:50:99:5d:3c:be:
         e2:d6:1b:8a:9e:9d:3a:85:c9:5b:87:6e:16:f0:4b:68:43:71:
         61:2a:83:6e:c2:e1:f2:a1:df:61:04:d0:2f:85:c9:75:d0:42:
         c0:95:4c:08:91:cf:fd:26:42:8a:fc:68:d7:f3:6c:7a:60:55:
         a8:0a:b5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----