Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/1/323830343a323366343a3a2f33322d3438203d3e20323634313933.roa
File:                     323830343a323366343a3a2f33322d3438203d3e20323634313933.roa (raw, json)
Hash identifier:          mM/7mOOEmlxbUQE7/oFATmweLWw+MnUBKHxeScidf/Q=
Subject key identifier:   EC:70:76:A5:07:66:07:EA:D6:18:C2:B6:38:7B:BB:79:70:63:86:EB
Certificate issuer:       /CN=746AC2B5044A56E55A7067FE4877098554974FB8
Certificate serial:       342F090B0B0FB357938FE9C630F124EFB312A7AC
Authority key identifier: 74:6A:C2:B5:04:4A:56:E5:5A:70:67:FE:48:77:09:85:54:97:4F:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/746AC2B5044A56E55A7067FE4877098554974FB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/1/323830343a323366343a3a2f33322d3438203d3e20323634313933.roa
Signing time:             Thu 04 Apr 2024 10:40:55 +0000
ROA not before:           Thu 04 Apr 2024 10:35:55 +0000
ROA not after:            Thu 03 Apr 2025 10:40:55 +0000
asID:                     264193
IP address blocks:        2804:23f4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:2f:09:0b:0b:0f:b3:57:93:8f:e9:c6:30:f1:24:ef:b3:12:a7:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746AC2B5044A56E55A7067FE4877098554974FB8
        Validity
            Not Before: Apr  4 10:35:55 2024 GMT
            Not After : Apr  3 10:40:55 2025 GMT
        Subject: CN=EC7076A5076607EAD618C2B6387BBB79706386EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2b:00:06:3c:8b:50:81:4c:b8:dd:fd:7b:e3:
                    d3:3d:fa:49:a1:2e:63:86:17:d5:73:77:4b:e6:30:
                    22:67:bc:92:2b:fc:fb:25:4d:0f:88:60:aa:c3:d6:
                    36:06:4a:72:04:9c:19:55:a2:5c:0f:ba:c9:ce:88:
                    e7:ce:01:a9:a5:34:c4:10:39:ef:9b:30:09:1a:fd:
                    d2:ff:09:d6:6a:84:89:4f:46:5e:c6:dd:5d:2e:f9:
                    a1:f8:cf:5a:ea:a7:84:2d:f1:40:c1:09:8d:bd:49:
                    86:f1:e1:ce:41:5b:68:a1:47:fe:a4:b7:ea:59:92:
                    de:14:36:c7:27:a0:c6:1a:a8:ab:4a:75:21:15:64:
                    2d:19:a7:0e:f8:73:1b:f7:d0:0e:7a:1d:91:f2:34:
                    75:5a:25:bd:51:6b:41:61:b2:5c:3b:8c:67:1b:d5:
                    58:5f:c0:0f:e1:ed:c0:3c:78:73:77:3c:be:a4:4c:
                    8d:78:31:10:e8:5d:56:59:3c:f9:41:77:28:4c:19:
                    86:78:5b:68:c1:5d:cc:67:da:17:31:88:da:56:59:
                    fd:2e:56:aa:1f:95:b9:d5:1e:26:96:60:ac:75:fa:
                    8c:81:8a:68:aa:b6:6e:9f:e9:69:5e:90:9c:ee:46:
                    cf:d6:da:f9:be:8a:2b:4c:5c:50:bb:83:63:13:23:
                    95:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:70:76:A5:07:66:07:EA:D6:18:C2:B6:38:7B:BB:79:70:63:86:EB
            X509v3 Authority Key Identifier:
                keyid:74:6A:C2:B5:04:4A:56:E5:5A:70:67:FE:48:77:09:85:54:97:4F:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/1/746AC2B5044A56E55A7067FE4877098554974FB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/746AC2B5044A56E55A7067FE4877098554974FB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/1/323830343a323366343a3a2f33322d3438203d3e20323634313933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:23f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:b1:49:de:cd:02:d8:6d:1d:67:0a:49:76:22:97:df:80:36:
         19:6c:7f:4e:2e:24:e1:5d:4c:b3:ed:25:33:d6:4c:c6:89:e1:
         0e:80:6e:d6:03:2b:af:a6:cf:8d:0f:49:71:00:53:91:a5:7c:
         4b:f3:4d:61:6c:9c:76:52:17:b0:48:38:d8:6b:6c:c2:ca:b0:
         2a:e2:31:a0:f6:43:7e:54:ff:33:71:96:e4:20:40:dd:21:81:
         ab:58:a7:41:29:8d:60:0a:f7:11:ce:39:ac:3e:43:15:e9:41:
         82:5c:d3:d5:9c:f9:48:cf:4e:4d:8c:1c:4b:bc:d3:60:ac:ec:
         9c:09:a8:b5:0f:74:c4:75:c3:30:c7:eb:f8:b3:41:e8:b1:54:
         6c:e9:00:88:16:8b:d0:21:3d:40:b5:90:33:b1:c1:86:28:5e:
         25:8c:2c:e9:e0:1c:83:3a:a4:fc:b2:d7:00:75:48:a6:49:bb:
         ce:8f:df:b7:fe:7b:2d:36:a8:7d:31:c4:a6:41:ed:99:ab:b3:
         e1:e6:fc:17:a0:61:b8:43:3b:74:b1:b5:bf:6a:46:5a:8b:50:
         3f:9b:78:2f:9b:e3:82:b7:1a:ec:c5:6e:f6:15:69:d9:9f:4c:
         2c:59:05:94:2d:58:f0:42:e2:2f:c9:61:79:35:7c:57:47:38:
         a7:ed:84:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----