Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/0/323830343a363133303a3a2f33322d3332203d3e20323639323139.roa
File:                     323830343a363133303a3a2f33322d3332203d3e20323639323139.roa (raw, json)
Hash identifier:          T5K2J+hc9vMry6VWZARqHe7apcous1VSe0y7JN31vZk=
Subject key identifier:   63:CA:B5:1F:34:90:FD:D8:14:3C:C5:FE:91:D4:A6:23:6D:E2:2B:B7
Certificate issuer:       /CN=E5254B5B54A18C6FE2479968F3E3B34DE54ABD57
Certificate serial:       1590C0A3DD6F461EB481EE3254A5C1C246C8CE56
Authority key identifier: E5:25:4B:5B:54:A1:8C:6F:E2:47:99:68:F3:E3:B3:4D:E5:4A:BD:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5254B5B54A18C6FE2479968F3E3B34DE54ABD57.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/0/323830343a363133303a3a2f33322d3332203d3e20323639323139.roa
Signing time:             Sat 10 Feb 2024 20:51:50 +0000
ROA not before:           Sat 10 Feb 2024 20:46:50 +0000
ROA not after:            Sat 08 Feb 2025 20:51:50 +0000
asID:                     269219
IP address blocks:        2804:6130::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:90:c0:a3:dd:6f:46:1e:b4:81:ee:32:54:a5:c1:c2:46:c8:ce:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5254B5B54A18C6FE2479968F3E3B34DE54ABD57
        Validity
            Not Before: Feb 10 20:46:50 2024 GMT
            Not After : Feb  8 20:51:50 2025 GMT
        Subject: CN=63CAB51F3490FDD8143CC5FE91D4A6236DE22BB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:71:eb:ec:2e:d3:1c:63:2f:a9:b2:c0:fd:b4:
                    82:7e:84:f5:7f:3c:fd:aa:b5:d0:b2:05:eb:93:6e:
                    82:db:6d:b7:64:34:6b:5d:cd:6a:ed:94:74:ee:c0:
                    be:ca:a2:19:45:10:43:68:e7:a8:72:a4:31:18:c1:
                    a0:7a:18:4f:b2:dc:d9:bb:3a:44:c6:e3:11:a3:d0:
                    54:0e:33:da:80:62:de:00:c8:c9:28:06:40:81:74:
                    f1:8f:ee:a0:f1:25:e9:1c:a7:be:ac:27:49:b6:2d:
                    39:99:28:fa:6f:7c:c1:f4:ec:40:c4:b3:21:41:ee:
                    d8:ed:ec:2e:48:e8:42:cf:11:09:4e:43:5d:e5:2d:
                    b4:e7:2b:bb:a5:ed:35:4e:12:34:56:96:e4:b5:ed:
                    70:33:c4:f7:cc:67:13:35:18:0c:84:46:74:68:d5:
                    71:b7:9c:60:0f:c7:e8:ab:ba:37:6d:90:69:0f:43:
                    47:93:37:ae:7a:21:14:03:f1:03:3c:e1:5c:5f:9a:
                    89:c5:15:1b:19:d3:f8:c3:21:9a:aa:8b:c0:95:00:
                    00:84:66:b2:33:96:c5:1e:9f:ef:16:e8:37:b9:0e:
                    23:ea:6e:01:fe:c7:84:28:71:20:b4:ac:16:f9:42:
                    93:07:56:d0:3d:77:e6:b9:83:1f:fa:3b:ce:e1:e0:
                    1c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:CA:B5:1F:34:90:FD:D8:14:3C:C5:FE:91:D4:A6:23:6D:E2:2B:B7
            X509v3 Authority Key Identifier:
                keyid:E5:25:4B:5B:54:A1:8C:6F:E2:47:99:68:F3:E3:B3:4D:E5:4A:BD:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/0/E5254B5B54A18C6FE2479968F3E3B34DE54ABD57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5254B5B54A18C6FE2479968F3E3B34DE54ABD57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/0/323830343a363133303a3a2f33322d3332203d3e20323639323139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6130::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:ed:22:a9:42:cd:34:54:d1:95:82:8a:09:c1:86:80:e4:3f:
         60:84:50:47:9f:e9:3b:51:d2:07:dd:46:de:ad:91:72:17:51:
         18:1c:e1:1d:95:24:75:c6:4a:2f:f6:05:a1:05:53:0a:74:ec:
         b6:79:13:35:f7:5e:d1:46:02:b2:7f:d6:18:53:6d:52:d4:b6:
         3c:7f:8b:e1:a3:d7:c1:c9:79:59:fc:2a:07:2e:a1:13:21:23:
         d6:2f:d8:1d:af:4d:cc:d9:09:c3:2e:60:b3:cd:90:0b:ae:22:
         f9:95:79:a3:e1:5b:0e:87:22:6a:7b:a7:cb:7f:da:70:59:6e:
         01:6d:9d:1e:dd:1d:0d:a6:39:48:64:5c:3c:6c:24:c7:93:12:
         9d:3f:dd:d4:11:09:61:f5:68:2f:75:ce:d6:c0:1a:f7:8d:c4:
         61:6c:73:87:fb:01:e1:dc:29:f4:34:0a:f3:26:d7:60:93:52:
         87:d4:58:ef:ef:70:d4:f1:f3:d2:c7:e9:7f:ce:ad:2e:5f:40:
         e8:f6:05:23:7d:55:be:32:8f:06:f7:33:33:7b:2b:28:d3:74:
         6b:1c:4e:ca:8e:de:e1:24:f5:1f:fa:5b:9f:6a:08:aa:bb:e0:
         65:54:5c:80:fd:c8:28:7a:f1:55:51:02:78:b4:b1:bf:2e:dd:
         2e:b3:32:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----