Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a383030303a3a2f33342d3334203d3e20323730343430.roa
File:                     323830343a366330343a383030303a3a2f33342d3334203d3e20323730343430.roa (raw, json)
Hash identifier:          QAJLp8NWtKui18LCeJ7Q5K4dRW/SNQRx7c8GQ4vfgkQ=
Subject key identifier:   6A:35:BA:6E:D3:1E:C1:30:1F:25:FF:C7:8B:28:C4:1F:36:DD:D6:72
Certificate issuer:       /CN=F47E33E6B433A862A7529799B6262FD3B97EBA14
Certificate serial:       4BE31E0EA8D9BE5C10C25EB4180DD34C9C545E23
Authority key identifier: F4:7E:33:E6:B4:33:A8:62:A7:52:97:99:B6:26:2F:D3:B9:7E:BA:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F47E33E6B433A862A7529799B6262FD3B97EBA14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a383030303a3a2f33342d3334203d3e20323730343430.roa
Signing time:             Thu 15 Feb 2024 21:00:01 +0000
ROA not before:           Thu 15 Feb 2024 20:55:01 +0000
ROA not after:            Thu 13 Feb 2025 21:00:01 +0000
asID:                     270440
IP address blocks:        2804:6c04:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:e3:1e:0e:a8:d9:be:5c:10:c2:5e:b4:18:0d:d3:4c:9c:54:5e:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F47E33E6B433A862A7529799B6262FD3B97EBA14
        Validity
            Not Before: Feb 15 20:55:01 2024 GMT
            Not After : Feb 13 21:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b2:29:b4:86:3b:d7:a4:d9:7b:4f:a2:17:74:
                    c0:01:95:eb:92:7f:d6:bd:44:74:a1:1f:23:c3:aa:
                    30:9a:8d:b0:2c:7c:c8:6c:a8:2b:92:2c:a1:cf:5d:
                    06:4d:12:ce:22:1b:25:15:a3:49:2c:f4:d2:81:32:
                    d4:01:fa:77:57:0d:f1:a8:53:48:01:42:f3:4f:55:
                    0a:43:aa:33:8c:af:a4:55:76:04:dd:73:de:37:b5:
                    7f:92:f9:6e:25:21:a5:c1:b1:72:a8:40:db:9f:7e:
                    98:e1:ea:f9:5d:1c:d9:61:76:18:e1:81:88:f1:0e:
                    f9:35:e4:f5:53:2b:93:29:8b:2c:97:1d:09:89:76:
                    7f:40:67:be:cd:0e:f3:d5:12:be:e1:70:44:01:2c:
                    12:51:2a:23:0b:9e:5f:bf:2f:5a:63:ca:ba:0b:41:
                    9e:30:8c:22:1e:99:aa:09:09:b3:d6:b4:00:37:58:
                    73:2b:a3:aa:d9:3c:39:1b:f5:0a:93:a8:6d:20:ac:
                    2b:0a:54:14:33:33:bc:1b:de:54:17:d5:7b:8f:27:
                    36:c5:68:fd:5c:fb:ef:32:2b:0b:f1:ef:9b:35:f4:
                    f0:f0:14:a9:22:6e:d1:e7:dc:f0:25:e4:a4:1d:17:
                    23:ce:cb:36:a8:6a:dc:b6:9c:e7:38:05:3c:71:a2:
                    b9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:35:BA:6E:D3:1E:C1:30:1F:25:FF:C7:8B:28:C4:1F:36:DD:D6:72
            X509v3 Authority Key Identifier:
                keyid:F4:7E:33:E6:B4:33:A8:62:A7:52:97:99:B6:26:2F:D3:B9:7E:BA:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/F47E33E6B433A862A7529799B6262FD3B97EBA14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F47E33E6B433A862A7529799B6262FD3B97EBA14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a383030303a3a2f33342d3334203d3e20323730343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c04:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         37:07:a3:a7:e1:fb:24:50:ce:cd:83:05:f9:ff:cd:aa:bf:ad:
         e4:69:07:2e:14:5e:3e:6b:0f:28:9f:5a:e8:ca:d1:a9:34:92:
         76:13:fd:52:d8:da:13:90:3c:e6:b4:70:92:d1:18:8b:c1:39:
         46:f2:bc:97:16:b2:94:e9:01:27:e2:3b:ef:53:9b:78:33:d0:
         82:ad:35:40:4d:43:4f:41:ef:7c:c8:2d:bb:d5:1e:f7:fc:d2:
         76:aa:1f:68:e5:65:7c:6e:0c:76:ba:64:7d:26:da:59:b9:1c:
         bc:01:f8:71:4c:be:33:9f:1d:6f:43:a0:f0:57:37:e4:a7:e8:
         e4:11:fc:6d:71:5f:67:1e:04:e4:65:b2:1a:23:5c:8d:ae:1f:
         ed:bb:b4:cf:2a:72:6e:8e:ca:6c:cf:eb:e5:6b:99:b6:3f:9a:
         c1:6c:c8:87:10:0f:09:26:7f:28:e5:05:c2:6d:43:28:49:f9:
         cb:a6:1e:72:49:28:e7:df:39:9e:a2:cf:5a:46:ef:3a:e6:36:
         79:3e:34:14:74:4a:27:72:02:45:d8:ba:1f:27:c1:df:67:a4:
         51:20:c4:30:0e:73:53:b0:6e:ea:17:4a:84:de:18:b2:bf:3b:
         d1:11:31:84:f3:fb:81:04:5f:4c:76:e2:54:c6:27:5d:f4:5c:
         1e:44:e8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----