Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/0/323830343a336435633a3a2f33322d3336203d3e20323636353236.roa
File:                     323830343a336435633a3a2f33322d3336203d3e20323636353236.roa (raw, json)
Hash identifier:          6hUI2+eG2Vxtt8GOPWGwFyiTgWRnQQHhIphZp13u+A8=
Subject key identifier:   F7:02:C4:44:AC:2C:7A:D8:76:84:B5:F8:78:C3:1E:9A:68:3A:4B:63
Certificate issuer:       /CN=748993B48A5219F255F926698D425D92E397DEDE
Certificate serial:       4B9CC54DF21B0B4035132059593C319FDB7A9B28
Authority key identifier: 74:89:93:B4:8A:52:19:F2:55:F9:26:69:8D:42:5D:92:E3:97:DE:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/748993B48A5219F255F926698D425D92E397DEDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/0/323830343a336435633a3a2f33322d3336203d3e20323636353236.roa
Signing time:             Wed 07 Feb 2024 18:25:13 +0000
ROA not before:           Wed 07 Feb 2024 18:20:13 +0000
ROA not after:            Wed 05 Feb 2025 18:25:13 +0000
asID:                     266526
IP address blocks:        2804:3d5c::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:9c:c5:4d:f2:1b:0b:40:35:13:20:59:59:3c:31:9f:db:7a:9b:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=748993B48A5219F255F926698D425D92E397DEDE
        Validity
            Not Before: Feb  7 18:20:13 2024 GMT
            Not After : Feb  5 18:25:13 2025 GMT
        Subject: CN=F702C444AC2C7AD87684B5F878C31E9A683A4B63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:40:4b:15:56:b8:65:9e:ca:04:dc:fc:ae:77:
                    4b:93:ce:1a:4e:d5:30:b9:10:bf:df:d3:32:d1:19:
                    4a:b7:5b:74:15:d6:9d:69:b6:d8:b9:df:6d:38:98:
                    9e:de:0b:45:6a:a0:12:f9:39:1f:b4:01:40:25:6b:
                    15:92:85:67:ce:1a:ad:c2:fa:c7:0a:f3:1b:ae:a4:
                    ea:42:eb:95:f5:7f:5c:a5:67:66:33:85:af:ec:14:
                    0e:5b:11:a5:ff:fe:44:56:ba:14:14:9a:81:6c:a3:
                    3d:a5:de:48:4e:1b:f8:ca:a0:e4:dc:91:92:46:a7:
                    97:62:86:ef:3e:ce:54:dc:2b:52:15:f7:9d:c6:ea:
                    7b:bb:85:e1:69:d3:09:54:9b:6d:e0:c0:7c:88:ff:
                    ef:e9:8b:73:7c:6e:34:0a:ca:40:6a:31:29:b5:22:
                    e1:4e:d2:18:34:ef:5e:1f:b9:8c:c7:35:84:a5:41:
                    a5:7d:82:dd:f4:83:00:d4:09:5b:57:79:77:35:fe:
                    72:43:40:09:69:ee:2c:62:f8:5d:07:dc:9a:c6:cd:
                    d3:d6:60:71:91:07:6c:6c:2c:f1:0c:25:33:e6:0b:
                    19:b2:6f:7f:0c:fd:49:cb:a6:ec:93:74:d0:e8:71:
                    ac:75:d1:84:0e:64:05:6c:77:03:46:b4:07:7f:c6:
                    4c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:02:C4:44:AC:2C:7A:D8:76:84:B5:F8:78:C3:1E:9A:68:3A:4B:63
            X509v3 Authority Key Identifier:
                keyid:74:89:93:B4:8A:52:19:F2:55:F9:26:69:8D:42:5D:92:E3:97:DE:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/0/748993B48A5219F255F926698D425D92E397DEDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/748993B48A5219F255F926698D425D92E397DEDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/0/323830343a336435633a3a2f33322d3336203d3e20323636353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d5c::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:fa:b8:4b:52:8b:f6:32:8d:4a:52:11:3b:73:97:41:b3:69:
         fd:d5:b7:3d:c3:84:6c:db:e4:a6:ee:92:4c:11:c5:af:2d:49:
         ce:08:2c:db:6f:44:77:02:ff:bf:86:15:97:e4:0b:71:88:44:
         0d:5b:45:1f:82:a7:db:f9:b0:58:9f:b5:5b:f4:3c:63:d9:90:
         75:d0:8d:0e:13:68:44:7c:51:89:4e:41:ed:2d:88:52:a4:d4:
         bf:2d:c4:cc:e9:1d:60:7d:d2:e6:1c:72:7b:96:48:de:02:63:
         ff:5a:2a:39:05:fb:5c:1e:96:5a:c7:7e:0a:94:39:4c:61:9f:
         1f:13:86:b9:05:20:ae:58:46:f1:dc:84:94:61:0c:53:7c:8c:
         65:ec:15:0d:55:8f:75:66:7f:ba:0e:37:cd:3f:2d:57:a1:d9:
         9c:65:d9:a6:85:c4:52:37:d8:d5:81:db:f6:13:2b:8f:24:50:
         f9:fe:3a:88:63:f7:55:47:4d:79:26:cd:13:d4:42:45:7c:1a:
         6b:9a:ee:e1:f4:b5:97:67:45:90:2f:cf:4f:4d:be:1a:9b:3e:
         d3:3b:22:e9:b0:45:a1:95:2e:ba:05:53:0b:dd:68:84:82:40:
         d9:39:56:2f:91:9a:cd:69:16:5d:ab:9a:52:89:a3:55:11:a3:
         ca:40:4b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----