Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/0/323830343a343466633a3a2f33322d3438203d3e20323637363635.roa
File:                     323830343a343466633a3a2f33322d3438203d3e20323637363635.roa (raw, json)
Hash identifier:          fz77uuJNWb+MNtdfaBBKpjsEhEw9/npr3bH9pY/Nl90=
Subject key identifier:   86:8E:A5:53:D0:7E:26:34:7A:C7:F1:60:93:1F:D2:8A:02:39:D9:33
Certificate issuer:       /CN=2B824C0913CF71BF98C43B15F88AD1598E1E47DE
Certificate serial:       37845550F76808BA6D773A79080F85EE70DE380E
Authority key identifier: 2B:82:4C:09:13:CF:71:BF:98:C4:3B:15:F8:8A:D1:59:8E:1E:47:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B824C0913CF71BF98C43B15F88AD1598E1E47DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/0/323830343a343466633a3a2f33322d3438203d3e20323637363635.roa
Signing time:             Tue 06 Jun 2023 13:17:14 +0000
ROA not before:           Tue 06 Jun 2023 13:12:14 +0000
ROA not after:            Tue 04 Jun 2024 13:17:14 +0000
asID:                     267665
IP address blocks:        2804:44fc::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:84:55:50:f7:68:08:ba:6d:77:3a:79:08:0f:85:ee:70:de:38:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B824C0913CF71BF98C43B15F88AD1598E1E47DE
        Validity
            Not Before: Jun  6 13:12:14 2023 GMT
            Not After : Jun  4 13:17:14 2024 GMT
        Subject: CN=868EA553D07E26347AC7F160931FD28A0239D933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:11:29:cb:07:ab:b2:50:bb:67:18:5f:ae:09:
                    f4:02:a1:4f:8b:3d:02:3e:06:67:08:15:eb:63:bd:
                    98:d4:9d:1b:f8:9e:fb:74:3d:26:04:6d:52:b9:a7:
                    0b:78:eb:91:6f:4a:55:60:2f:6c:4f:aa:e0:ac:48:
                    48:3c:d1:b9:1d:d9:23:5a:23:15:e1:e9:d6:44:d6:
                    a1:7f:c2:97:a7:96:41:61:c1:b3:29:94:d0:84:4f:
                    48:4a:ad:d3:7a:c9:e6:72:ae:c7:7b:53:f6:25:22:
                    ec:9b:f5:96:8f:97:6c:71:f1:a4:07:1b:ed:96:7e:
                    3d:98:9f:02:81:2f:c4:36:1d:08:84:ce:42:af:c2:
                    5e:49:5f:dd:3d:5b:87:0c:cd:c6:8b:32:53:68:41:
                    f0:c7:5d:70:f8:a7:b3:5e:bc:f8:0f:b0:1d:7f:37:
                    0c:39:d3:a3:01:6a:6c:70:8e:5e:f5:41:8f:2d:fb:
                    f0:8d:1b:81:35:f3:a5:85:d7:27:77:08:de:b6:b1:
                    cd:e3:e8:6f:5a:11:fa:13:94:51:2e:0c:21:8a:6e:
                    d1:ae:50:8d:4f:e7:89:07:69:4a:79:5b:fb:dd:a6:
                    49:0b:2f:16:b9:7d:5e:87:a8:18:ec:51:4c:e9:50:
                    e7:4d:7c:52:a4:d8:d0:53:72:93:04:1d:1e:25:9f:
                    d9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:8E:A5:53:D0:7E:26:34:7A:C7:F1:60:93:1F:D2:8A:02:39:D9:33
            X509v3 Authority Key Identifier:
                keyid:2B:82:4C:09:13:CF:71:BF:98:C4:3B:15:F8:8A:D1:59:8E:1E:47:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/0/2B824C0913CF71BF98C43B15F88AD1598E1E47DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B824C0913CF71BF98C43B15F88AD1598E1E47DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/0/323830343a343466633a3a2f33322d3438203d3e20323637363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:44fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:2b:6d:dc:f8:ff:50:70:2e:67:c8:ef:54:e0:05:26:61:4a:
         fe:4a:0d:0c:90:3a:e3:06:ca:4d:e3:b5:3a:90:7c:90:68:09:
         ae:8a:0d:b5:f5:2a:72:0c:2f:40:8a:60:0d:58:47:97:7c:2a:
         c0:5e:1a:91:74:52:9c:2f:20:68:c2:1c:b7:2b:cf:e0:63:40:
         a7:2f:07:18:fa:65:14:7f:cd:1f:d5:12:0f:fc:06:48:bf:06:
         ca:83:da:ca:7d:25:3c:dc:fe:cc:44:8c:fe:fd:5d:b6:3a:8d:
         36:32:83:fe:1f:01:89:25:96:73:5c:51:b6:88:18:29:3c:b2:
         96:24:6b:ac:cc:6b:7c:d8:15:7a:73:e6:61:04:a2:ab:c1:1e:
         e1:bd:96:9f:63:06:b3:3c:68:4a:b0:94:ec:44:30:28:ad:7a:
         3f:98:94:cb:98:4c:45:11:72:16:03:0a:04:43:e1:4b:db:44:
         e8:6b:60:d2:e8:d1:96:f4:8a:34:62:21:3b:f9:bd:86:0f:f8:
         87:d7:e0:81:5a:d2:ac:7d:32:38:49:00:e4:2a:49:5f:4e:e1:
         65:26:86:33:07:68:0d:a1:06:91:6d:7d:9f:0d:c8:04:da:97:
         a2:cc:08:c8:58:46:77:39:7b:46:58:ec:2c:75:15:12:ad:f9:
         08:d1:f2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----