Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/323830343a316633633a3a2f33362d313238203d3e203532393130.roa
File:                     323830343a316633633a3a2f33362d313238203d3e203532393130.roa (raw, json)
Hash identifier:          bfXCXxbOeZgsKX/TQWxTL+xtWWgPgWoY/wLJtn+7cPo=
Subject key identifier:   A4:08:F5:15:DD:9F:C6:72:B5:C6:93:B9:B0:E9:84:86:DC:B8:54:E9
Certificate issuer:       /CN=5AE731E8E9FF77141833C41154EB6ED7C33E5095
Certificate serial:       492AEB456A224F57B960198FFE07AD08CB11BC7F
Authority key identifier: 5A:E7:31:E8:E9:FF:77:14:18:33:C4:11:54:EB:6E:D7:C3:3E:50:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AE731E8E9FF77141833C41154EB6ED7C33E5095.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/323830343a316633633a3a2f33362d313238203d3e203532393130.roa
Signing time:             Tue 04 Jun 2024 12:22:54 +0000
ROA not before:           Tue 04 Jun 2024 12:17:54 +0000
ROA not after:            Tue 03 Jun 2025 12:22:54 +0000
asID:                     52910
IP address blocks:        2804:1f3c::/36 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:2a:eb:45:6a:22:4f:57:b9:60:19:8f:fe:07:ad:08:cb:11:bc:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AE731E8E9FF77141833C41154EB6ED7C33E5095
        Validity
            Not Before: Jun  4 12:17:54 2024 GMT
            Not After : Jun  3 12:22:54 2025 GMT
        Subject: CN=A408F515DD9FC672B5C693B9B0E98486DCB854E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:34:5d:88:77:e5:b8:b2:af:95:cb:8b:50:d7:
                    8d:ba:50:e4:51:3b:c9:6d:d5:61:d0:72:54:8a:55:
                    ec:86:ef:c7:d4:87:53:65:a3:a0:05:d3:ee:c5:03:
                    61:04:e3:d3:d5:24:c0:7c:e5:f2:63:f0:0e:2a:b0:
                    e4:11:dd:5d:c6:8b:bc:70:9c:3b:b4:f8:fe:31:4b:
                    ff:58:b7:1e:98:09:05:6f:42:fa:d5:e9:0b:e4:1c:
                    a5:cb:af:65:52:ad:a3:71:29:73:9c:b2:86:c9:3b:
                    70:d6:5e:35:fc:d1:9b:04:1c:62:94:c9:97:d0:18:
                    19:7b:5f:bc:98:b4:5f:de:16:8b:f1:e3:2e:f5:d1:
                    f1:01:89:4b:7a:bf:78:9f:43:e3:26:b8:82:34:53:
                    3a:23:1b:9a:da:ef:9d:e4:86:88:21:db:8e:47:ab:
                    c3:17:15:74:02:7b:07:1c:f6:56:a4:ef:69:39:b6:
                    bf:0e:85:af:93:93:08:d7:0e:34:34:31:7b:3d:74:
                    e8:6e:e1:17:d8:7c:76:35:b8:e9:c9:c4:b1:c6:46:
                    03:c7:06:44:d8:f6:75:18:f7:bc:a6:92:9c:85:d9:
                    9b:be:1c:d2:a7:52:c2:43:a6:36:8d:97:7d:01:de:
                    8b:93:41:b9:27:28:56:7f:d5:21:64:20:d9:ea:6b:
                    33:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:08:F5:15:DD:9F:C6:72:B5:C6:93:B9:B0:E9:84:86:DC:B8:54:E9
            X509v3 Authority Key Identifier:
                keyid:5A:E7:31:E8:E9:FF:77:14:18:33:C4:11:54:EB:6E:D7:C3:3E:50:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/5AE731E8E9FF77141833C41154EB6ED7C33E5095.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AE731E8E9FF77141833C41154EB6ED7C33E5095.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/323830343a316633633a3a2f33362d313238203d3e203532393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1f3c::/36

    Signature Algorithm: sha256WithRSAEncryption
         4c:67:8b:50:4d:67:6a:7a:95:5e:8c:86:7d:1a:0d:63:d6:a5:
         f0:ea:3b:f0:c5:a9:a9:95:b2:f9:08:47:9c:7b:dc:0e:58:99:
         6d:57:0b:f3:b0:76:d6:f1:95:43:45:60:46:8f:f2:54:4b:38:
         a6:e9:ad:39:e2:3e:bb:ed:64:f7:e7:b7:d0:98:57:75:fe:3e:
         dd:17:85:fb:37:ef:cb:c2:7f:29:51:82:e2:14:a3:af:17:da:
         e0:d4:28:bb:3a:38:f9:1a:17:cc:24:66:c7:80:a0:44:5c:08:
         23:8e:1f:da:c7:4f:6a:fb:24:c0:e0:37:6e:b3:32:38:5c:74:
         1a:ac:ba:73:d3:ae:b4:06:32:9d:0d:31:34:b3:ca:70:16:42:
         f4:0a:5c:04:3d:21:29:5c:eb:19:bb:c7:02:a5:7b:fe:ab:f1:
         ff:97:63:91:9c:39:83:88:33:cb:59:70:63:b8:08:0c:21:97:
         a4:7e:32:b9:ef:63:88:6c:2a:c5:0a:ad:6e:74:b3:61:09:80:
         47:f7:d6:24:48:77:f8:a6:49:b8:53:fb:75:82:6e:83:80:c7:
         74:77:a7:05:d8:a4:b6:cf:ee:b1:91:6a:34:3f:fc:6b:00:6d:
         ae:ec:8b:0c:cb:c4:24:81:f6:2d:90:7a:5a:42:5d:36:cf:be:
         59:c3:db:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----