Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E92G7efaAGE1ZTViEuJVDXhQ2W4bsfLyevHK7FSeLvBm/0/323830343a386263303a3a2f33322d3438203d3e20323733373536.roa
File:                     323830343a386263303a3a2f33322d3438203d3e20323733373536.roa (raw, json)
Hash identifier:          mxwr9rNSBzeiLboDC5twAgqpvBiXPo3pJCH64A8tFC4=
Subject key identifier:   71:E4:44:73:92:10:79:62:82:69:81:F3:1C:03:41:88:06:5A:3A:1D
Certificate issuer:       /CN=7E19D306A8F5D2160C51E73D76E363F08A42A7A5
Certificate serial:       36000D7F813A29F99528BBB25C5C132FD9DCC76C
Authority key identifier: 7E:19:D3:06:A8:F5:D2:16:0C:51:E7:3D:76:E3:63:F0:8A:42:A7:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E19D306A8F5D2160C51E73D76E363F08A42A7A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E92G7efaAGE1ZTViEuJVDXhQ2W4bsfLyevHK7FSeLvBm/0/323830343a386263303a3a2f33322d3438203d3e20323733373536.roa
Signing time:             Thu 14 Mar 2024 00:28:42 +0000
ROA not before:           Thu 14 Mar 2024 00:23:42 +0000
ROA not after:            Thu 13 Mar 2025 00:28:42 +0000
asID:                     273756
IP address blocks:        2804:8bc0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:00:0d:7f:81:3a:29:f9:95:28:bb:b2:5c:5c:13:2f:d9:dc:c7:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E19D306A8F5D2160C51E73D76E363F08A42A7A5
        Validity
            Not Before: Mar 14 00:23:42 2024 GMT
            Not After : Mar 13 00:28:42 2025 GMT
        Subject: CN=71E4447392107962826981F31C034188065A3A1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a1:57:68:ac:0f:d8:a9:04:4a:ce:dd:04:eb:
                    9d:43:4e:a3:4b:36:e2:ac:2f:01:ad:15:b5:1b:02:
                    29:81:3f:19:96:0d:df:1f:16:c7:1a:bc:89:60:97:
                    be:b2:00:6f:b0:c9:46:17:4d:e8:c0:0a:49:d6:ca:
                    a6:05:c0:3d:cb:6c:cc:c7:05:32:5c:16:ed:53:49:
                    42:e7:29:16:9f:b3:94:2a:6c:aa:25:2e:31:85:ce:
                    f3:cc:ba:ee:c3:65:8d:53:e3:9e:d5:0f:e5:ce:48:
                    86:61:d0:80:48:9a:48:fc:f6:d9:75:0a:fe:23:65:
                    63:a7:e4:df:51:d9:f1:be:3b:a1:9f:e1:a0:67:9a:
                    e6:f9:e9:00:da:27:8a:32:c1:2b:34:f9:67:84:4e:
                    19:54:7f:34:e1:d2:a9:93:a8:2a:e7:1e:d9:e9:c8:
                    94:d9:a8:8c:35:38:88:19:e2:d2:ba:1f:52:dd:7a:
                    bd:45:e5:39:cc:fc:aa:97:2a:b1:a3:73:88:c3:0b:
                    bd:c0:e3:17:42:8e:b9:a0:1a:97:6c:79:4b:3a:98:
                    f7:34:31:cf:f9:7c:62:2b:ef:6e:b1:07:ff:31:0a:
                    a2:14:6f:a0:8f:18:0a:cd:92:9d:68:0c:44:59:f7:
                    38:f0:26:16:1d:00:19:0b:c5:67:6e:f0:8b:47:7d:
                    3a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E4:44:73:92:10:79:62:82:69:81:F3:1C:03:41:88:06:5A:3A:1D
            X509v3 Authority Key Identifier:
                keyid:7E:19:D3:06:A8:F5:D2:16:0C:51:E7:3D:76:E3:63:F0:8A:42:A7:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E92G7efaAGE1ZTViEuJVDXhQ2W4bsfLyevHK7FSeLvBm/0/7E19D306A8F5D2160C51E73D76E363F08A42A7A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E19D306A8F5D2160C51E73D76E363F08A42A7A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E92G7efaAGE1ZTViEuJVDXhQ2W4bsfLyevHK7FSeLvBm/0/323830343a386263303a3a2f33322d3438203d3e20323733373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8bc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:d3:bf:f2:fd:a1:78:c0:5b:ed:e4:c3:8e:00:42:ed:ac:c1:
         94:d3:4c:49:31:76:3a:ea:f6:ee:9c:06:75:58:8a:d3:ab:b3:
         4a:9b:27:2c:e4:e8:bc:50:6c:d2:41:06:ea:31:48:0f:2e:0e:
         39:f1:ce:0f:c4:7c:25:b7:d5:35:32:5d:e9:87:36:9f:60:66:
         82:b5:79:56:b7:84:8c:85:36:0e:77:bc:85:e0:03:41:b4:6a:
         7c:7a:e3:b4:eb:64:01:bb:31:ce:24:be:6b:f3:fd:49:11:30:
         d8:dc:57:82:81:fe:59:84:72:77:2a:c3:d2:02:e9:8b:52:25:
         62:1e:b1:21:67:48:ca:5d:7e:37:fa:1a:ce:4c:2a:7c:a9:43:
         10:36:ee:f7:58:fc:eb:72:4e:94:60:71:58:6e:b8:94:c7:22:
         f2:d9:bb:4b:1c:d5:ed:72:a1:63:93:2f:80:d9:98:0b:3a:4c:
         40:f0:63:8d:f3:eb:e4:a2:4c:bd:e6:35:53:e8:e5:22:11:42:
         ba:bd:a6:1e:e3:ee:64:10:c8:d1:ad:1e:a5:a1:b1:d7:c7:d7:
         f3:f7:1a:83:9a:0b:a2:19:d2:4f:9f:a4:a9:f1:58:7f:dd:9b:
         d3:a8:1b:f2:3a:da:a6:86:e4:db:b6:40:b8:3b:73:a1:3d:7d:
         e2:0f:e4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----