Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/323830343a343530383a383030303a3a2f33332d3333203d3e20323637363638.roa
File:                     323830343a343530383a383030303a3a2f33332d3333203d3e20323637363638.roa (raw, json)
Hash identifier:          KN62K9z4iar+RV12TLsmVSEVLUOFZQvqlIZr+rWFCYw=
Subject key identifier:   EE:3D:65:CF:74:1D:45:64:41:E6:1A:EA:92:73:FE:41:AB:06:BF:C6
Certificate issuer:       /CN=D04F30B05726FA543C147DA94BFBD44C1D936300
Certificate serial:       2F333BD47F85FA9AFF20018B8D85E34939F2D9F0
Authority key identifier: D0:4F:30:B0:57:26:FA:54:3C:14:7D:A9:4B:FB:D4:4C:1D:93:63:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D04F30B05726FA543C147DA94BFBD44C1D936300.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/323830343a343530383a383030303a3a2f33332d3333203d3e20323637363638.roa
Signing time:             Tue 13 Feb 2024 19:17:03 +0000
ROA not before:           Tue 13 Feb 2024 19:12:03 +0000
ROA not after:            Tue 11 Feb 2025 19:17:03 +0000
asID:                     267668
IP address blocks:        2804:4508:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:33:3b:d4:7f:85:fa:9a:ff:20:01:8b:8d:85:e3:49:39:f2:d9:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D04F30B05726FA543C147DA94BFBD44C1D936300
        Validity
            Not Before: Feb 13 19:12:03 2024 GMT
            Not After : Feb 11 19:17:03 2025 GMT
        Subject: CN=EE3D65CF741D456441E61AEA9273FE41AB06BFC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:24:dd:97:18:d0:2f:61:1d:83:f8:e6:5d:fc:
                    d9:9f:10:8e:5d:a2:ba:26:10:81:76:a9:43:65:b7:
                    1f:a5:b9:f5:49:87:d7:75:78:36:73:ca:bd:f7:c3:
                    b4:62:31:9a:90:fa:92:aa:9c:b0:36:f6:de:0b:e9:
                    c4:f0:13:2b:b9:9a:30:63:40:2f:0f:ed:e3:bf:ea:
                    59:88:a6:89:ad:44:13:53:b2:d4:04:14:4b:72:f7:
                    00:f2:ab:f3:2f:88:21:dc:7e:74:18:09:0c:4d:4c:
                    ba:09:22:34:ce:60:4a:f8:d9:fd:31:8e:71:55:3c:
                    b8:de:ea:5e:bd:04:f3:c0:84:32:0b:1a:6e:1f:2f:
                    dd:8b:24:48:36:6d:c5:64:41:d9:7e:ec:f8:4f:e1:
                    ed:fb:ae:34:03:a8:8f:ec:ba:e5:65:7a:36:5e:bd:
                    f8:ee:5b:ce:72:11:c8:eb:fa:f6:40:e6:69:11:04:
                    b5:75:27:04:64:35:4d:9a:46:e3:6d:4d:79:4d:06:
                    df:77:5c:7a:73:45:13:bd:b8:ce:7b:2d:99:9d:05:
                    d5:97:07:48:ac:95:e0:a5:4c:5f:e6:88:c4:76:fc:
                    0e:59:e7:e1:ae:80:77:fa:41:f7:63:0d:bd:22:b0:
                    33:65:d4:35:fe:29:f0:45:b2:6c:40:b6:46:68:90:
                    13:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:3D:65:CF:74:1D:45:64:41:E6:1A:EA:92:73:FE:41:AB:06:BF:C6
            X509v3 Authority Key Identifier:
                keyid:D0:4F:30:B0:57:26:FA:54:3C:14:7D:A9:4B:FB:D4:4C:1D:93:63:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/D04F30B05726FA543C147DA94BFBD44C1D936300.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D04F30B05726FA543C147DA94BFBD44C1D936300.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/323830343a343530383a383030303a3a2f33332d3333203d3e20323637363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4508:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         04:62:49:82:85:b1:8f:05:2d:22:02:54:06:4a:4a:25:98:1c:
         40:8b:b1:85:9f:ba:e2:2f:24:a9:ee:ef:76:b4:40:8f:62:39:
         3e:59:12:37:d1:70:6d:c7:bd:f2:df:5f:1e:4b:8c:7d:4f:b0:
         f5:70:6b:22:c3:3b:04:c1:6f:38:0b:bd:5d:8c:94:8c:c3:86:
         c3:fb:c9:4f:38:69:7f:01:c3:b0:7f:72:ad:b9:5a:5b:ef:ae:
         de:44:09:73:77:23:91:53:30:7f:91:2a:66:33:af:ab:8f:8a:
         ed:79:de:e8:a0:42:29:02:0f:27:99:91:cd:df:e8:f8:b6:46:
         d5:d4:51:25:cd:0e:a3:2c:97:d8:87:dc:85:04:26:31:b5:f4:
         51:f9:e5:46:aa:c9:df:53:b0:56:f0:d7:4f:55:74:da:4a:77:
         21:df:7d:28:30:15:8a:e7:5d:a6:cc:d3:9d:7d:05:b6:10:fa:
         24:b3:f6:bf:eb:bc:b8:f8:37:c2:da:bd:be:bd:2e:45:0c:90:
         f0:61:22:c2:38:ac:f3:3f:ad:04:86:77:35:16:d4:29:3f:65:
         6a:32:70:a9:de:17:19:05:a7:7b:4f:09:fe:6e:7f:58:5f:bd:
         aa:a3:54:c0:3c:06:24:54:57:fc:1f:6d:30:8b:a0:ce:c5:86:
         1f:4d:a0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----