Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/323830343a366439633a383030303a3a2f33342d3334203d3e20323730353434.roa
File:                     323830343a366439633a383030303a3a2f33342d3334203d3e20323730353434.roa (raw, json)
Hash identifier:          s+BhVBWdMOUWQ+x95eFoBjt3TBP+wuvDCoPzvxbnxFA=
Subject key identifier:   3D:E3:82:FB:2F:5D:B7:0E:70:C5:59:27:77:68:26:58:D0:1B:4D:90
Certificate issuer:       /CN=B224E79ACF8AC68E9C68317AB6507068C8F22F7C
Certificate serial:       110ABA5CB3AB70F756CA94BBCAA70ECF94959F44
Authority key identifier: B2:24:E7:9A:CF:8A:C6:8E:9C:68:31:7A:B6:50:70:68:C8:F2:2F:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B224E79ACF8AC68E9C68317AB6507068C8F22F7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/323830343a366439633a383030303a3a2f33342d3334203d3e20323730353434.roa
Signing time:             Mon 30 Oct 2023 12:47:03 +0000
ROA not before:           Mon 30 Oct 2023 12:42:03 +0000
ROA not after:            Mon 28 Oct 2024 12:47:03 +0000
asID:                     270544
IP address blocks:        2804:6d9c:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:0a:ba:5c:b3:ab:70:f7:56:ca:94:bb:ca:a7:0e:cf:94:95:9f:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B224E79ACF8AC68E9C68317AB6507068C8F22F7C
        Validity
            Not Before: Oct 30 12:42:03 2023 GMT
            Not After : Oct 28 12:47:03 2024 GMT
        Subject: CN=3DE382FB2F5DB70E70C5592777682658D01B4D90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d7:12:61:c8:d1:c2:5e:60:ca:10:8c:8e:6f:
                    86:ab:f5:3a:a3:9f:3a:9f:64:c7:fd:a2:b7:53:72:
                    7c:27:24:cd:5b:b2:f0:48:7d:d9:24:1e:20:25:0a:
                    03:af:73:24:d2:13:01:1f:91:97:92:67:03:ec:d4:
                    16:a2:e1:47:1f:e8:86:30:0d:76:2f:98:b5:7d:40:
                    fc:7b:bf:c7:03:38:ef:44:c0:cc:9c:1d:36:e8:bd:
                    33:24:fc:ae:85:9a:f3:12:7a:ac:97:1f:36:83:d0:
                    a5:0f:60:2d:a8:7a:78:38:0f:a6:35:00:30:55:80:
                    5e:60:fa:1d:6c:52:9f:62:69:df:ec:de:f3:22:94:
                    c5:9c:ef:e1:3e:23:f0:73:b9:03:53:a3:52:f3:0a:
                    92:f6:0b:24:e9:6b:e7:1e:7f:9a:1a:dd:13:0a:6e:
                    ac:b6:67:bd:eb:17:a5:61:f2:2e:eb:c6:78:ad:ec:
                    c1:ca:b0:23:d1:72:bc:26:44:73:76:fe:6a:68:52:
                    74:52:43:a3:e7:ec:e8:ee:38:df:0e:e0:18:d2:bd:
                    5a:1e:ec:30:c7:a8:5b:b4:92:d9:88:d2:7f:55:61:
                    09:b1:70:81:29:80:d5:57:d2:7a:98:7a:fe:ab:34:
                    92:ab:5a:6f:4e:e8:e8:40:e9:31:41:48:39:dc:cc:
                    c5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E3:82:FB:2F:5D:B7:0E:70:C5:59:27:77:68:26:58:D0:1B:4D:90
            X509v3 Authority Key Identifier:
                keyid:B2:24:E7:9A:CF:8A:C6:8E:9C:68:31:7A:B6:50:70:68:C8:F2:2F:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/B224E79ACF8AC68E9C68317AB6507068C8F22F7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B224E79ACF8AC68E9C68317AB6507068C8F22F7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/323830343a366439633a383030303a3a2f33342d3334203d3e20323730353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6d9c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         49:aa:f0:f4:ec:a1:ef:52:15:eb:4a:60:25:1e:72:10:69:16:
         f7:6c:d6:b6:26:bf:de:4a:d4:43:41:da:f2:04:de:75:50:70:
         d2:3c:61:ec:0b:3f:86:8f:10:c4:00:b7:41:37:04:f3:e6:48:
         82:a6:17:05:8b:4b:10:31:6a:49:a3:b9:9f:35:f5:b8:c2:20:
         b9:14:7a:42:c8:d8:42:26:c0:f7:11:5d:fa:96:78:98:36:3f:
         2b:71:cf:69:fb:6d:ab:35:c5:6d:8e:6e:c3:a0:bb:49:62:86:
         f1:8a:bc:e2:9f:50:65:03:4c:17:fa:38:2f:c7:07:7b:09:5b:
         26:5d:bd:ec:ea:4b:46:59:c2:b5:90:f6:59:09:9b:0f:f6:ab:
         df:ee:85:99:a4:8d:56:22:83:7f:5f:7a:2a:9e:9c:a9:86:f7:
         49:78:74:d4:2c:f9:49:70:8c:c2:ab:3c:08:98:86:bc:3c:d7:
         54:c5:ed:29:82:2a:ac:c2:06:35:90:9c:3f:47:86:2d:4e:ba:
         5c:59:be:29:0a:2a:ce:3c:1b:3c:9e:8f:74:b7:a3:6c:08:df:
         52:8f:9c:66:8c:e6:88:92:81:49:8f:b5:e5:b9:33:b6:5c:61:
         22:bc:aa:dd:2e:59:e1:78:3e:c7:01:4a:96:49:7c:fd:b0:e7:
         86:8b:a8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----