Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EYWeTkrWwop1Lb4DYP6kUmeVkrwWdHXnQ4vmC2Ft3a1t/0/323830343a363433303a3a2f33322d313238203d3e20323639343132.roa
File:                     323830343a363433303a3a2f33322d313238203d3e20323639343132.roa (raw, json)
Hash identifier:          //IzMuHiERFrMTR2TiHPvIgkICjM1AWKRzGhwHg0U24=
Subject key identifier:   D4:83:5A:7B:F4:D8:C4:E6:25:35:1C:80:8A:01:F9:3F:6B:BF:CD:2A
Certificate issuer:       /CN=38EEDC1317812A986BA8575388484225E20BDA35
Certificate serial:       4FB9BF935FC5B942F2BFBB7939087C3F847FB20F
Authority key identifier: 38:EE:DC:13:17:81:2A:98:6B:A8:57:53:88:48:42:25:E2:0B:DA:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38EEDC1317812A986BA8575388484225E20BDA35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYWeTkrWwop1Lb4DYP6kUmeVkrwWdHXnQ4vmC2Ft3a1t/0/323830343a363433303a3a2f33322d313238203d3e20323639343132.roa
Signing time:             Mon 01 Jan 2024 14:39:54 +0000
ROA not before:           Mon 01 Jan 2024 14:34:54 +0000
ROA not after:            Mon 30 Dec 2024 14:39:54 +0000
asID:                     269412
IP address blocks:        2804:6430::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:b9:bf:93:5f:c5:b9:42:f2:bf:bb:79:39:08:7c:3f:84:7f:b2:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38EEDC1317812A986BA8575388484225E20BDA35
        Validity
            Not Before: Jan  1 14:34:54 2024 GMT
            Not After : Dec 30 14:39:54 2024 GMT
        Subject: CN=D4835A7BF4D8C4E625351C808A01F93F6BBFCD2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:38:21:69:d7:5d:37:1e:e9:f5:33:62:fa:a9:
                    0c:e9:39:73:dc:31:b5:a4:ae:c3:54:33:13:91:d0:
                    9f:42:16:59:d1:e4:5e:3e:87:33:00:0f:1a:eb:fa:
                    69:32:17:70:85:1b:4a:46:0f:c9:25:a7:e9:cf:ed:
                    1e:96:2c:d3:03:b3:1a:b4:b8:cb:41:7a:e8:56:0b:
                    79:9e:d6:03:49:c5:07:da:74:4d:20:fd:ab:3c:a4:
                    c9:b0:3b:9d:ad:25:ac:f3:74:1a:5c:73:3d:37:5b:
                    26:61:10:f2:a6:5f:7c:57:6c:8b:36:3a:ff:e1:fe:
                    ea:f1:69:f2:3d:fd:5d:53:39:b0:78:a7:8c:a8:bd:
                    f9:f1:84:83:16:e6:fb:02:2f:18:8b:86:48:ec:f2:
                    20:df:32:79:2e:02:a0:5f:f8:67:eb:75:2c:43:c2:
                    db:b8:ad:0d:03:28:15:02:04:1f:f8:c8:bb:d8:3f:
                    5b:ad:b8:aa:15:8a:27:d4:0c:df:ab:7f:8a:9b:bd:
                    a7:9a:c8:48:84:81:99:97:b7:5d:07:f8:d7:31:07:
                    28:0f:56:3c:70:64:75:38:dd:d5:8b:b1:74:03:f4:
                    96:6c:17:66:e8:d7:3b:73:d3:25:1d:bb:0c:46:92:
                    6a:b2:e3:54:00:46:31:df:16:74:ca:51:55:9a:36:
                    eb:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:83:5A:7B:F4:D8:C4:E6:25:35:1C:80:8A:01:F9:3F:6B:BF:CD:2A
            X509v3 Authority Key Identifier:
                keyid:38:EE:DC:13:17:81:2A:98:6B:A8:57:53:88:48:42:25:E2:0B:DA:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYWeTkrWwop1Lb4DYP6kUmeVkrwWdHXnQ4vmC2Ft3a1t/0/38EEDC1317812A986BA8575388484225E20BDA35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38EEDC1317812A986BA8575388484225E20BDA35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYWeTkrWwop1Lb4DYP6kUmeVkrwWdHXnQ4vmC2Ft3a1t/0/323830343a363433303a3a2f33322d313238203d3e20323639343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6430::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:f6:6e:b7:ba:fc:66:cd:38:6d:a5:96:0c:0d:17:43:6f:99:
         f9:cd:a4:64:09:ed:8f:ed:16:10:3d:8d:4c:64:36:88:81:de:
         e8:a0:25:03:57:78:90:13:25:33:fd:89:db:7c:05:50:64:d0:
         79:ae:75:de:95:c1:7b:68:de:38:e5:19:bb:6b:f4:4d:f6:e6:
         de:40:22:bb:5b:5f:be:78:a9:61:22:81:5c:1c:7a:43:cd:12:
         b7:ad:d4:4f:83:6d:ab:72:b4:42:ab:11:7a:a3:18:c3:7a:6c:
         d3:79:12:3c:ca:e8:ea:1e:c1:1e:89:19:8d:c7:a7:92:1b:ca:
         06:c0:32:78:b3:eb:3e:0d:98:71:98:d8:5d:cf:b0:ec:a3:a9:
         af:86:55:e9:f0:b5:c1:47:24:43:45:3c:44:1c:1f:e6:c7:af:
         df:f4:f2:52:80:f0:e5:89:11:34:6b:37:ee:b9:27:94:fd:25:
         31:c6:46:e8:39:33:dc:0c:83:82:55:b1:c8:c5:8c:da:90:ee:
         c8:8b:79:90:45:f9:ec:66:de:e4:ed:35:73:e6:c3:75:4d:e3:
         bc:6c:b7:fc:fb:89:42:00:3f:e1:97:a2:63:c2:4a:7f:d1:e3:
         a5:0c:3b:38:7a:e2:b0:05:63:a2:30:93:a6:d0:cd:01:fd:85:
         20:cc:36:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----