Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fqo78X3P4Ubmj7cfPQWRLbtTAbK7DGtcBV9gACHE2kcJ/1/323830343a343161383a3a2f33322d3332203d3e20323637343438.roa
File:                     323830343a343161383a3a2f33322d3332203d3e20323637343438.roa (raw, json)
Hash identifier:          yqeXikIGO0+kloiamDui/WF41Roz0OM1d4dzgNA8Mbc=
Subject key identifier:   8B:EA:E5:88:59:63:44:24:4D:B8:C9:B0:6B:3B:D2:6E:B3:06:23:3E
Certificate issuer:       /CN=E098788220DC9B9F9EB517AEFC6B76A6FD019F77
Certificate serial:       543F534C07015DE2C786078D8D69DCECDA25C81D
Authority key identifier: E0:98:78:82:20:DC:9B:9F:9E:B5:17:AE:FC:6B:76:A6:FD:01:9F:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E098788220DC9B9F9EB517AEFC6B76A6FD019F77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fqo78X3P4Ubmj7cfPQWRLbtTAbK7DGtcBV9gACHE2kcJ/1/323830343a343161383a3a2f33322d3332203d3e20323637343438.roa
Signing time:             Fri 17 May 2024 11:49:36 +0000
ROA not before:           Fri 17 May 2024 11:44:36 +0000
ROA not after:            Fri 16 May 2025 11:49:36 +0000
asID:                     267448
IP address blocks:        2804:41a8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:3f:53:4c:07:01:5d:e2:c7:86:07:8d:8d:69:dc:ec:da:25:c8:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E098788220DC9B9F9EB517AEFC6B76A6FD019F77
        Validity
            Not Before: May 17 11:44:36 2024 GMT
            Not After : May 16 11:49:36 2025 GMT
        Subject: CN=8BEAE588596344244DB8C9B06B3BD26EB306233E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b0:23:6f:4d:be:9a:a0:3f:b1:98:33:46:07:
                    9f:c2:f7:03:7c:73:ac:0c:65:f9:ce:f4:b0:79:48:
                    7f:64:d1:82:25:51:d1:2c:6d:b4:5b:80:b4:d8:74:
                    e2:92:eb:25:0f:fe:a8:cb:4d:d2:26:9b:3c:db:4a:
                    d0:3c:34:cf:fd:44:1c:99:64:9f:74:fd:ce:f2:fc:
                    46:6b:e5:cb:5a:57:40:fb:ce:bc:9a:87:0e:2c:4b:
                    7d:ee:fd:f1:95:95:8c:1a:ff:ae:af:ab:9e:9a:6e:
                    36:f5:a2:d7:c4:55:3d:15:89:8c:8f:b6:8d:12:2c:
                    4a:6a:4e:e8:b9:33:94:ea:40:92:78:f0:0f:48:9f:
                    d9:5d:7c:f6:54:1b:ca:10:dc:ae:0e:5b:df:34:c0:
                    8a:84:87:5a:31:be:66:78:2c:02:fb:09:bf:0d:c3:
                    70:38:e5:43:a7:19:65:e8:10:01:10:fc:a4:f3:8c:
                    52:6d:42:0f:bb:bc:36:2d:ca:c1:5d:a6:11:d5:a8:
                    66:36:d9:4a:fa:2a:a5:35:22:f7:c2:d3:72:c6:1c:
                    9f:88:36:01:80:21:aa:e2:e7:37:cf:bf:94:ff:f1:
                    23:f2:55:99:d1:ea:67:6f:8b:6b:ce:36:51:4c:67:
                    e6:0d:f3:a2:10:96:f4:57:ce:38:96:de:7e:54:d0:
                    81:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:EA:E5:88:59:63:44:24:4D:B8:C9:B0:6B:3B:D2:6E:B3:06:23:3E
            X509v3 Authority Key Identifier:
                keyid:E0:98:78:82:20:DC:9B:9F:9E:B5:17:AE:FC:6B:76:A6:FD:01:9F:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fqo78X3P4Ubmj7cfPQWRLbtTAbK7DGtcBV9gACHE2kcJ/1/E098788220DC9B9F9EB517AEFC6B76A6FD019F77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E098788220DC9B9F9EB517AEFC6B76A6FD019F77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fqo78X3P4Ubmj7cfPQWRLbtTAbK7DGtcBV9gACHE2kcJ/1/323830343a343161383a3a2f33322d3332203d3e20323637343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:92:de:4d:b9:79:03:eb:9c:84:76:74:4d:f1:26:0f:8a:69:
         eb:55:d4:32:5f:1a:8c:83:50:f3:44:5e:91:3b:9a:f2:6b:31:
         09:9f:e3:15:38:26:04:fa:9c:7f:29:13:a0:6f:66:81:9c:6d:
         ee:c0:8e:da:22:b6:29:b8:0d:d9:2d:bd:60:ef:b9:9e:3c:5f:
         76:82:32:ba:02:74:1e:f8:7a:fd:0e:a1:d0:24:82:ac:5b:55:
         84:fd:ed:d4:18:b5:31:62:b5:64:5e:17:a0:36:a7:27:50:44:
         1d:fd:fc:1e:27:1f:a8:13:27:a0:01:00:85:e7:1e:27:16:3f:
         da:56:1a:9b:ab:da:b7:86:20:76:bb:89:ea:fc:74:c6:11:08:
         06:02:e9:a7:a0:9d:a5:f1:c1:51:cc:31:f7:4e:61:b6:52:b8:
         e1:4e:5d:b0:6d:60:25:0a:88:9c:f3:f6:c6:18:f5:17:c1:db:
         c6:ed:ad:28:d2:a1:54:bb:e1:f7:7a:1d:cf:31:c0:fe:1f:8b:
         08:d3:9e:4c:13:fa:0c:d7:08:3a:89:df:cb:41:51:dc:2b:93:
         7f:10:1b:48:8f:1f:79:56:7c:9c:d3:f8:85:a7:cc:74:ce:3c:
         02:0d:1c:18:cf:10:69:97:89:23:87:ba:3a:91:03:0f:10:7a:
         e2:e1:a1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----