Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJuKfhS9a4erZEpGVrtYZMtX2hwAurQpN8MiYr7QZrJ3/0/323830343a343432303a3a2f33322d3438203d3e20323637363034.roa
File:                     323830343a343432303a3a2f33322d3438203d3e20323637363034.roa (raw, json)
Hash identifier:          /UB39gJFUX3X2kkbRWrPzBVpuRooXNFgZ2H7+6kH1aI=
Subject key identifier:   E7:46:DA:B0:14:C3:C9:0F:DA:C1:84:D5:DA:FE:11:32:87:FE:AF:04
Certificate issuer:       /CN=52F8111BF509CE4749E50167E62D9A46C4581780
Certificate serial:       45998BF690F47699A599534C5357E604BDA7DAAE
Authority key identifier: 52:F8:11:1B:F5:09:CE:47:49:E5:01:67:E6:2D:9A:46:C4:58:17:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52F8111BF509CE4749E50167E62D9A46C4581780.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJuKfhS9a4erZEpGVrtYZMtX2hwAurQpN8MiYr7QZrJ3/0/323830343a343432303a3a2f33322d3438203d3e20323637363034.roa
Signing time:             Thu 13 Jul 2023 14:32:07 +0000
ROA not before:           Thu 13 Jul 2023 14:27:07 +0000
ROA not after:            Thu 11 Jul 2024 14:32:07 +0000
asID:                     267604
IP address blocks:        2804:4420::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:99:8b:f6:90:f4:76:99:a5:99:53:4c:53:57:e6:04:bd:a7:da:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52F8111BF509CE4749E50167E62D9A46C4581780
        Validity
            Not Before: Jul 13 14:27:07 2023 GMT
            Not After : Jul 11 14:32:07 2024 GMT
        Subject: CN=E746DAB014C3C90FDAC184D5DAFE113287FEAF04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b0:d2:32:ec:b3:ac:f9:48:5a:b7:5e:d7:d1:
                    d0:5f:6d:f8:80:31:0c:90:96:e4:96:1d:b6:43:a0:
                    8a:8c:54:e1:36:10:b2:cc:c7:d3:8f:9b:e1:69:44:
                    a2:8a:3b:9a:b4:fe:17:87:f5:10:87:70:6b:ca:9d:
                    b4:84:ba:1e:bd:9d:77:a5:5f:5f:97:91:93:f7:4d:
                    5b:33:c8:ad:8c:52:d9:cc:99:07:47:31:50:40:6e:
                    e2:82:bc:74:0f:65:2b:77:96:88:79:8d:98:e1:d4:
                    a1:cc:c4:ba:82:23:39:d7:2f:b0:68:14:08:6d:79:
                    6e:62:97:23:6b:50:26:79:fe:13:ba:33:30:3a:b2:
                    09:b3:17:3a:5c:d4:25:4b:d7:91:0c:6a:05:82:44:
                    3f:40:c9:3c:1a:f4:aa:54:db:92:48:e4:03:30:21:
                    fe:38:b0:35:14:27:f3:a1:36:49:f6:15:60:c7:75:
                    5c:f8:c2:87:11:7f:56:a8:70:f5:72:be:9f:55:86:
                    0d:03:9f:4a:a4:64:e7:64:32:7d:2a:3e:8e:a3:14:
                    fd:36:28:23:67:94:10:27:72:e1:e4:f0:c8:ea:a8:
                    66:42:91:1d:25:00:97:8e:0b:7e:64:11:b5:ca:f3:
                    3f:fd:06:37:5d:9b:b0:a5:c7:3e:d4:7f:75:15:30:
                    78:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:46:DA:B0:14:C3:C9:0F:DA:C1:84:D5:DA:FE:11:32:87:FE:AF:04
            X509v3 Authority Key Identifier:
                keyid:52:F8:11:1B:F5:09:CE:47:49:E5:01:67:E6:2D:9A:46:C4:58:17:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJuKfhS9a4erZEpGVrtYZMtX2hwAurQpN8MiYr7QZrJ3/0/52F8111BF509CE4749E50167E62D9A46C4581780.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52F8111BF509CE4749E50167E62D9A46C4581780.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJuKfhS9a4erZEpGVrtYZMtX2hwAurQpN8MiYr7QZrJ3/0/323830343a343432303a3a2f33322d3438203d3e20323637363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4420::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:27:a5:fe:06:0d:cf:07:c6:df:1d:8c:cb:dc:89:ec:c6:6d:
         97:8a:31:e4:83:09:ff:ef:e1:7b:da:b9:bd:7d:a7:01:2e:a9:
         f5:75:3e:e0:6d:d0:0b:cb:58:25:03:eb:dc:13:41:f0:f9:11:
         2c:b5:94:c0:17:2c:f9:87:9a:3e:2a:ca:17:cf:08:c1:6f:b7:
         76:b9:f7:ec:35:21:70:44:c8:39:b0:e1:f3:43:74:86:fc:de:
         4c:6b:5c:bc:44:36:4b:6f:de:96:08:a7:9c:25:d5:73:29:1d:
         17:2b:ff:bc:32:14:69:fd:b0:79:da:13:e6:e1:f9:94:cd:22:
         d8:47:89:64:b9:19:8d:9f:6e:22:48:93:96:0e:da:af:22:a1:
         f5:5c:b8:56:65:92:3f:56:fd:b3:76:dc:31:d4:36:d6:74:95:
         1f:2f:cf:bf:a0:9b:51:f5:b8:b8:be:ea:76:7d:b3:00:a1:0e:
         e0:59:ce:0a:f6:ce:95:c6:3b:ac:13:de:66:2a:cc:a8:61:ea:
         ab:a8:8a:e1:34:e1:6a:2e:cf:54:44:82:dc:15:fa:c1:7a:6b:
         35:a5:b9:4b:eb:8a:7f:d2:44:86:76:e3:0c:2e:2d:44:27:05:
         fc:3d:3c:33:bf:bb:7d:f9:80:99:ac:6d:1e:d5:2c:ca:e6:96:
         08:6a:1f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----