Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/323830343a313736383a3a2f33322d3332203d3e20323633313434.roa
File:                     323830343a313736383a3a2f33322d3332203d3e20323633313434.roa (raw, json)
Hash identifier:          pQQSl2A7O6WzqRYN5vvw4LwiV9667fRUHUo2RJV/M0o=
Subject key identifier:   A4:97:6E:1F:8E:1A:97:6C:11:D0:A5:98:88:E7:46:4B:B6:10:5B:5F
Certificate issuer:       /CN=DC07F9C4C09D1B377B6BEAE3CAFB18DF8E2AA9AC
Certificate serial:       368A24DC9E3D00510BDFF6E1D79ACDF077BDB33E
Authority key identifier: DC:07:F9:C4:C0:9D:1B:37:7B:6B:EA:E3:CA:FB:18:DF:8E:2A:A9:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC07F9C4C09D1B377B6BEAE3CAFB18DF8E2AA9AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/323830343a313736383a3a2f33322d3332203d3e20323633313434.roa
Signing time:             Tue 05 Sep 2023 12:07:34 +0000
ROA not before:           Tue 05 Sep 2023 12:02:34 +0000
ROA not after:            Tue 03 Sep 2024 12:07:34 +0000
asID:                     263144
IP address blocks:        2804:1768::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:8a:24:dc:9e:3d:00:51:0b:df:f6:e1:d7:9a:cd:f0:77:bd:b3:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC07F9C4C09D1B377B6BEAE3CAFB18DF8E2AA9AC
        Validity
            Not Before: Sep  5 12:02:34 2023 GMT
            Not After : Sep  3 12:07:34 2024 GMT
        Subject: CN=A4976E1F8E1A976C11D0A59888E7464BB6105B5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5f:b7:4b:ba:01:1d:7a:7c:32:92:5e:9a:0c:
                    5b:15:b0:60:ca:0f:31:f5:21:1c:19:f4:9c:a3:3f:
                    f9:bf:bc:43:11:4c:5f:9f:66:14:dc:18:04:7f:f5:
                    02:d8:2b:ab:c0:f6:5d:27:12:08:99:de:63:7a:fd:
                    43:8f:b9:e1:a7:6c:37:9b:3b:93:13:45:db:0e:3d:
                    f5:31:d9:8c:bb:1c:ad:9f:93:ef:e0:71:3c:ff:55:
                    dc:50:8b:7b:d5:41:00:9c:5e:71:18:ca:d6:8f:14:
                    fb:d4:a7:fc:20:31:6b:f3:ed:fc:de:d6:9a:05:0d:
                    ce:99:73:83:3e:cb:c0:3b:f8:c7:6d:b5:49:4b:d1:
                    34:14:85:43:04:3f:18:b2:27:b9:f3:25:40:ee:9e:
                    2b:72:f6:d5:0f:9d:0f:b9:c4:42:9d:69:63:9e:16:
                    65:f7:4e:4c:a2:d6:e1:09:86:98:f3:59:a1:49:95:
                    68:28:ca:1f:a9:74:ad:4f:83:fd:a6:ab:bb:11:24:
                    37:8d:05:a6:2e:6e:4f:6d:87:0a:df:95:66:f6:8f:
                    9f:7f:75:85:5b:63:09:e8:ed:1a:bc:73:60:08:42:
                    64:84:bc:f1:d6:26:77:5d:41:83:d8:fd:b5:06:e1:
                    6c:f5:56:fa:20:4d:2d:43:fc:47:31:bc:ac:e7:1e:
                    b6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:97:6E:1F:8E:1A:97:6C:11:D0:A5:98:88:E7:46:4B:B6:10:5B:5F
            X509v3 Authority Key Identifier:
                keyid:DC:07:F9:C4:C0:9D:1B:37:7B:6B:EA:E3:CA:FB:18:DF:8E:2A:A9:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/DC07F9C4C09D1B377B6BEAE3CAFB18DF8E2AA9AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC07F9C4C09D1B377B6BEAE3CAFB18DF8E2AA9AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/323830343a313736383a3a2f33322d3332203d3e20323633313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1768::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:c4:b0:fa:0d:4d:a5:1e:32:e4:7d:4a:6b:06:ef:35:78:18:
         9a:7b:2f:53:3f:3b:f0:02:e2:38:63:90:0d:d0:63:96:6e:0c:
         db:72:30:92:42:2e:52:57:a5:7d:c1:43:fe:8e:cd:81:5f:c0:
         f7:ac:72:09:aa:81:62:a9:d2:45:d1:d6:d8:3d:f6:df:4e:d4:
         8b:56:47:7e:62:a9:00:9d:45:98:c5:22:58:8e:43:81:a8:84:
         3d:e5:07:20:80:f4:0f:48:1f:7c:f9:16:ea:58:11:de:4f:5f:
         3c:07:ee:cb:26:e1:98:dd:c6:7d:2c:a4:59:92:96:12:73:36:
         57:b5:ac:eb:52:a3:df:7b:63:ca:ca:f1:c7:ff:44:85:4e:ac:
         ab:cb:38:c9:57:fb:fa:b9:0c:43:a3:da:65:ae:10:7b:d3:21:
         d3:e7:63:d3:0d:b6:92:6a:e9:d0:e5:ac:c1:cc:1d:3a:93:af:
         9b:b6:ed:cd:d3:2a:81:a7:1c:1f:ab:0a:33:aa:41:fc:0d:04:
         b3:57:1f:62:06:b0:f9:55:c6:81:6d:08:17:5d:12:93:15:75:
         df:ef:28:61:c4:dd:5d:51:63:ff:c0:33:af:90:e6:9d:cb:5e:
         63:8d:7e:5e:e7:01:e8:fc:63:97:c2:7f:18:e3:c4:2f:eb:93:
         d0:a5:f5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----