Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/323830343a313038303a3a2f33322d3438203d3e203238323837.roa
File:                     323830343a313038303a3a2f33322d3438203d3e203238323837.roa (raw, json)
Hash identifier:          Zk0T56QmfS4uVE2Y4O1eyLnWqXJi8fIIXdF1gtDqvzY=
Subject key identifier:   25:41:66:45:00:B8:00:8B:59:DC:11:E8:35:FC:15:06:65:DB:58:5C
Certificate issuer:       /CN=0234F91A291644025C2C2460D355272A046B58DD
Certificate serial:       416912EE6E58BD40842741F96D3F09219B58771F
Authority key identifier: 02:34:F9:1A:29:16:44:02:5C:2C:24:60:D3:55:27:2A:04:6B:58:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0234F91A291644025C2C2460D355272A046B58DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/323830343a313038303a3a2f33322d3438203d3e203238323837.roa
Signing time:             Mon 22 Jul 2024 18:02:16 +0000
ROA not before:           Mon 22 Jul 2024 17:57:16 +0000
ROA not after:            Mon 21 Jul 2025 18:02:16 +0000
asID:                     28287
IP address blocks:        2804:1080::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:69:12:ee:6e:58:bd:40:84:27:41:f9:6d:3f:09:21:9b:58:77:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0234F91A291644025C2C2460D355272A046B58DD
        Validity
            Not Before: Jul 22 17:57:16 2024 GMT
            Not After : Jul 21 18:02:16 2025 GMT
        Subject: CN=2541664500B8008B59DC11E835FC150665DB585C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:36:38:19:68:83:25:45:54:75:b2:f9:92:a1:
                    a4:6b:66:72:ae:c5:1c:a7:95:dd:c8:a3:ac:89:0f:
                    d9:2d:fa:d4:25:e8:f1:1d:95:ba:9f:06:cc:ac:0f:
                    41:62:1e:37:81:c5:e0:09:e0:c5:26:60:45:ab:a8:
                    e4:57:f4:04:49:fe:cc:05:7c:cb:37:e8:c8:6e:44:
                    a5:08:85:14:8c:2e:2d:d0:16:6f:a9:0a:63:04:ad:
                    a3:81:91:a7:11:fd:ef:19:4f:b1:7b:74:1d:3e:56:
                    a5:6f:11:e2:9e:5f:22:b0:a3:24:5a:ce:62:a5:a8:
                    37:be:86:2f:03:55:26:68:8c:8f:5a:84:03:47:b3:
                    8f:be:f3:66:a0:56:54:e4:3d:07:14:7e:e8:44:71:
                    df:8e:88:79:7c:4b:6c:3f:19:9e:1f:76:91:76:4d:
                    a7:95:73:13:3e:01:1c:a3:7c:0f:79:59:a8:f6:e9:
                    c5:e7:ee:fb:73:c6:db:10:7b:ce:2a:b5:3b:4e:3f:
                    73:30:67:04:71:bc:e6:63:0f:f2:ff:bb:29:8f:b9:
                    6f:2a:8c:d5:1b:3f:6a:dd:21:d8:40:63:5f:fa:84:
                    bc:3f:61:03:85:8b:aa:e0:f5:17:40:10:0c:ce:4c:
                    06:f9:38:9f:73:b9:5e:37:81:9e:17:9c:d5:a1:35:
                    05:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:41:66:45:00:B8:00:8B:59:DC:11:E8:35:FC:15:06:65:DB:58:5C
            X509v3 Authority Key Identifier:
                keyid:02:34:F9:1A:29:16:44:02:5C:2C:24:60:D3:55:27:2A:04:6B:58:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/0234F91A291644025C2C2460D355272A046B58DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0234F91A291644025C2C2460D355272A046B58DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/323830343a313038303a3a2f33322d3438203d3e203238323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1080::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:4a:48:82:8a:c2:b1:de:19:2e:7b:61:f9:55:5c:10:6b:96:
         34:01:cc:f7:57:99:11:01:a7:57:f1:19:47:4d:7e:8a:05:62:
         b1:b8:0e:98:16:be:b2:35:a9:3c:47:a7:ee:71:35:77:ea:6b:
         a7:af:3d:1a:32:6f:13:ab:fc:ca:60:32:6d:6a:5e:48:ae:dc:
         5b:20:cc:d4:a9:32:c6:07:e3:59:79:90:0a:2e:e8:72:79:7a:
         b2:d4:da:0f:e7:33:cd:7e:87:e2:39:a2:7f:17:79:17:6a:6c:
         9b:9a:57:28:d6:30:1a:84:e7:8a:ad:a5:a3:e2:66:c6:c4:e7:
         b0:2b:67:fa:f7:42:75:05:fb:07:64:06:9d:1f:20:90:4f:93:
         49:34:13:37:ba:49:da:35:59:62:eb:a2:40:e1:9b:8c:2a:54:
         ce:5b:cd:43:83:c0:fe:ca:55:40:d3:06:58:b7:b8:45:08:66:
         4d:99:fc:56:33:39:7a:7f:eb:53:bc:df:be:58:d4:07:4d:a1:
         4d:52:7b:b5:3e:0d:1f:00:b2:75:97:ae:28:3c:6b:66:62:71:
         0a:3b:4e:fd:7b:b2:1d:88:27:07:2c:ca:26:c7:dd:1f:ab:dd:
         d6:da:c4:3b:7c:05:6a:bc:7c:b8:f3:c4:87:bb:c8:0b:09:57:
         90:99:1c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----