Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/323830343a323265383a3a2f33322d3332203d3e20323634313330.roa
File:                     323830343a323265383a3a2f33322d3332203d3e20323634313330.roa (raw, json)
Hash identifier:          WPqEbQXkZXHakSFLOPGbay8rnnfzNQX6DGMCWY63s0Q=
Subject key identifier:   7B:14:C1:D7:D5:2E:86:55:20:38:E9:E6:48:B6:BF:02:D4:D7:4D:D4
Certificate issuer:       /CN=2F50A43881343E0EF5A462969662F8F38F32ECB8
Certificate serial:       1FAA428C4A8A88C80A60E560FB5B04903C69EBCD
Authority key identifier: 2F:50:A4:38:81:34:3E:0E:F5:A4:62:96:96:62:F8:F3:8F:32:EC:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F50A43881343E0EF5A462969662F8F38F32ECB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/323830343a323265383a3a2f33322d3332203d3e20323634313330.roa
Signing time:             Thu 21 Mar 2024 17:12:29 +0000
ROA not before:           Thu 21 Mar 2024 17:07:29 +0000
ROA not after:            Thu 20 Mar 2025 17:12:29 +0000
asID:                     264130
IP address blocks:        2804:22e8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:aa:42:8c:4a:8a:88:c8:0a:60:e5:60:fb:5b:04:90:3c:69:eb:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F50A43881343E0EF5A462969662F8F38F32ECB8
        Validity
            Not Before: Mar 21 17:07:29 2024 GMT
            Not After : Mar 20 17:12:29 2025 GMT
        Subject: CN=7B14C1D7D52E86552038E9E648B6BF02D4D74DD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:30:a6:e2:97:f6:8a:1c:e5:81:99:fe:d4:73:
                    d4:cc:b3:6f:31:89:58:c2:01:ca:34:be:27:79:2a:
                    ac:d8:93:9c:e1:9f:18:83:51:32:7f:1d:86:07:36:
                    ac:4d:31:f8:34:1e:64:8d:43:7c:75:90:41:b5:61:
                    c4:74:a3:3a:75:3d:ef:bf:41:c9:fa:1a:6b:64:32:
                    3b:1a:d7:e1:68:79:b2:6f:11:10:37:ae:42:81:7c:
                    08:09:de:04:39:bf:0a:93:3b:7d:e5:d3:ec:f3:84:
                    17:8f:8d:b2:bd:c9:35:42:a2:bd:bc:ca:b9:ab:75:
                    da:8d:79:31:3e:be:82:82:1f:c4:7e:e8:fa:64:66:
                    45:61:c8:85:4d:82:a5:59:9d:77:36:fa:f5:87:53:
                    e1:0c:2c:cf:04:6c:c5:56:ee:4c:ec:b3:f7:29:47:
                    eb:84:08:64:e4:52:54:16:a3:6a:2c:eb:8f:2b:f7:
                    47:54:f3:f2:ec:b0:13:cf:45:a4:65:76:28:97:25:
                    c0:7f:9c:e3:af:24:95:b6:e0:c3:79:bb:5e:f2:eb:
                    47:f2:c9:89:5f:1e:fc:2f:b6:24:14:a3:33:35:cb:
                    d9:fd:e0:6e:10:4f:52:61:10:56:ca:b0:ed:c2:37:
                    c1:ed:51:39:69:ef:64:fb:5b:bf:99:d3:75:2a:82:
                    88:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:14:C1:D7:D5:2E:86:55:20:38:E9:E6:48:B6:BF:02:D4:D7:4D:D4
            X509v3 Authority Key Identifier:
                keyid:2F:50:A4:38:81:34:3E:0E:F5:A4:62:96:96:62:F8:F3:8F:32:EC:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/2F50A43881343E0EF5A462969662F8F38F32ECB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F50A43881343E0EF5A462969662F8F38F32ECB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/323830343a323265383a3a2f33322d3332203d3e20323634313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:22e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:17:4e:b7:02:c3:9c:e0:11:f0:04:0c:dc:51:73:93:fb:fe:
         6c:bb:05:7a:62:06:2a:4f:ad:12:10:3e:c4:6d:98:e9:40:9c:
         bb:89:55:b9:c3:b4:e7:3f:66:68:bd:19:44:ae:8a:d2:c6:88:
         10:15:2d:b2:b3:59:8d:fc:b1:e3:92:97:c8:9b:4b:08:c3:08:
         38:31:e6:9b:c3:a2:4a:24:4a:2d:75:dd:3c:be:01:dd:76:df:
         cb:aa:c8:65:09:b5:41:ff:f8:4d:b3:df:c9:d8:02:9e:f9:d0:
         4a:eb:5b:a0:fe:1d:df:54:2a:77:66:bd:59:e2:82:5f:8b:87:
         d0:6d:43:24:01:56:15:fd:5e:05:67:e7:63:de:60:80:4d:0c:
         ca:91:28:7b:09:d5:6c:b0:b8:b7:59:3f:3f:e5:36:45:c9:19:
         ac:98:bc:9b:c1:6f:8c:2a:d0:7f:24:f4:64:db:60:2f:19:42:
         91:ae:27:d7:c3:c4:fe:f3:02:ff:a5:6a:eb:d9:e9:9e:77:98:
         29:ac:ea:bc:44:72:03:ca:fc:ad:46:b4:59:70:88:fa:f0:18:
         76:ba:d9:d5:d0:c0:78:f5:fc:82:e5:d2:7b:a2:ec:c8:d3:a5:
         0c:ee:f9:3f:2b:0b:fc:e6:3e:07:05:64:1b:cf:a0:e2:98:06:
         e8:3c:e7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----