Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/323830343a326236383a3a2f33332d313238203d3e20323635313532.roa
File:                     323830343a326236383a3a2f33332d313238203d3e20323635313532.roa (raw, json)
Hash identifier:          ixRzuzjayFJcFf2M0U1dFQeKQTHQ+yXW2r8pZPaQ0XA=
Subject key identifier:   0B:10:40:20:73:CE:63:DA:E6:A5:99:27:2D:15:69:B5:FC:9D:12:48
Certificate issuer:       /CN=81322C566E24B41E61B4AD67166BF432862840AC
Certificate serial:       05DFA9E995A41F29B3788FFC4EADB6EE08DAEFCC
Authority key identifier: 81:32:2C:56:6E:24:B4:1E:61:B4:AD:67:16:6B:F4:32:86:28:40:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81322C566E24B41E61B4AD67166BF432862840AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/323830343a326236383a3a2f33332d313238203d3e20323635313532.roa
Signing time:             Fri 23 Feb 2024 18:13:40 +0000
ROA not before:           Fri 23 Feb 2024 18:08:40 +0000
ROA not after:            Fri 21 Feb 2025 18:13:40 +0000
asID:                     265152
IP address blocks:        2804:2b68::/33 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:df:a9:e9:95:a4:1f:29:b3:78:8f:fc:4e:ad:b6:ee:08:da:ef:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81322C566E24B41E61B4AD67166BF432862840AC
        Validity
            Not Before: Feb 23 18:08:40 2024 GMT
            Not After : Feb 21 18:13:40 2025 GMT
        Subject: CN=0B10402073CE63DAE6A599272D1569B5FC9D1248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5e:df:80:25:cc:2f:5e:1c:9e:6b:85:3a:45:
                    05:f1:08:dc:ba:31:19:b5:4f:67:10:62:4c:1e:e1:
                    2c:c0:0e:a2:ec:51:d7:0b:74:51:72:55:ab:11:61:
                    45:b6:79:6b:05:4f:e2:b2:f9:15:60:d3:01:53:18:
                    b3:01:59:18:ff:47:82:39:ab:aa:ef:73:13:f9:15:
                    87:fb:55:1c:59:7b:c3:43:e5:57:cd:c6:f4:05:09:
                    8e:9b:fc:17:cc:cf:f6:5c:f7:0c:29:3c:c3:59:86:
                    b7:22:3d:ac:c1:9c:00:44:d1:f9:14:2b:2e:c8:79:
                    1a:f0:10:b6:07:a0:e4:33:28:6a:97:24:f8:43:de:
                    3f:3e:62:32:d1:5a:ee:7e:a6:c8:9f:e1:d1:08:83:
                    c4:c8:03:c3:f3:16:85:f1:8e:37:20:a9:0c:43:a3:
                    32:eb:7f:98:ba:ea:b8:4d:8b:f0:72:70:e0:ae:ec:
                    69:65:a6:25:27:1e:e7:34:f9:2e:d6:c9:49:02:67:
                    3d:7b:e9:66:d9:82:84:4f:9b:f7:38:b6:9f:95:37:
                    6a:96:8e:b0:da:f8:36:f1:fd:71:4f:f3:a6:f1:45:
                    97:32:6a:1b:f8:33:ad:ed:69:9e:bd:52:fd:e6:a6:
                    72:ee:e1:0d:79:f3:7b:b5:92:6c:e5:e1:e5:d1:ed:
                    39:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:10:40:20:73:CE:63:DA:E6:A5:99:27:2D:15:69:B5:FC:9D:12:48
            X509v3 Authority Key Identifier:
                keyid:81:32:2C:56:6E:24:B4:1E:61:B4:AD:67:16:6B:F4:32:86:28:40:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/81322C566E24B41E61B4AD67166BF432862840AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81322C566E24B41E61B4AD67166BF432862840AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/323830343a326236383a3a2f33332d313238203d3e20323635313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b68::/33

    Signature Algorithm: sha256WithRSAEncryption
         b3:0a:0e:c1:00:fd:99:5e:8d:a0:d4:b6:8f:c7:76:c8:4c:98:
         b3:93:d6:65:9b:66:f1:38:57:66:be:6d:f9:2b:e6:79:0d:4c:
         21:91:e8:8e:3c:d3:3a:ec:75:31:31:3d:fd:62:1a:f5:3f:84:
         a5:e5:67:dc:c2:a5:14:e4:23:22:1f:68:3b:59:76:90:33:1c:
         02:6d:22:ae:ba:b4:62:e1:96:67:f4:fd:b1:78:df:4b:14:cc:
         70:ff:a5:24:4a:2f:7a:d2:2f:8c:cb:fe:4b:8e:2a:83:1a:06:
         28:3f:0a:25:6d:22:ab:0e:f9:74:cf:7e:f7:61:8c:18:3c:9a:
         f9:19:79:78:ec:d9:25:f7:7c:d8:13:54:ca:cc:89:07:e6:bc:
         93:f1:33:bb:fa:05:b5:b0:a8:05:4a:88:eb:c0:3b:63:f6:d0:
         ad:ef:96:aa:13:10:49:aa:25:52:28:0b:0d:c4:2b:40:d1:4a:
         34:d1:94:bf:84:0f:3a:d1:ea:3f:a2:33:aa:cf:0c:3b:2c:90:
         c5:4d:b8:7a:0f:0e:b5:29:d0:94:ee:08:c4:36:b4:94:ed:39:
         58:8c:78:a5:b6:4d:4c:32:70:ff:41:1f:cf:27:9a:4e:a9:c0:
         17:dc:be:71:ed:fd:c6:7c:10:f4:aa:84:1d:43:b8:ac:28:d4:
         46:6a:e8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----