Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/323830343a6532343a666563303a3a2f34322d3432203d3e20323632343137.roa
File:                     323830343a6532343a666563303a3a2f34322d3432203d3e20323632343137.roa (raw, json)
Hash identifier:          nO2jvfEaZ8cgLPwyBmggGvLoeqAvWXX6eq9y9fpV6Jc=
Subject key identifier:   55:77:EF:5B:89:D3:17:F3:D4:D5:83:91:A8:C5:AC:57:4B:7C:82:51
Certificate issuer:       /CN=97A4AF5A5DAA9301E561374F38352591E093C270
Certificate serial:       63FE1097FB3499B27DE090AF238F250E6707A010
Authority key identifier: 97:A4:AF:5A:5D:AA:93:01:E5:61:37:4F:38:35:25:91:E0:93:C2:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97A4AF5A5DAA9301E561374F38352591E093C270.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/323830343a6532343a666563303a3a2f34322d3432203d3e20323632343137.roa
Signing time:             Mon 11 Dec 2023 17:36:30 +0000
ROA not before:           Mon 11 Dec 2023 17:31:30 +0000
ROA not after:            Mon 09 Dec 2024 17:36:30 +0000
asID:                     262417
IP address blocks:        2804:e24:fec0::/42 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:fe:10:97:fb:34:99:b2:7d:e0:90:af:23:8f:25:0e:67:07:a0:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97A4AF5A5DAA9301E561374F38352591E093C270
        Validity
            Not Before: Dec 11 17:31:30 2023 GMT
            Not After : Dec  9 17:36:30 2024 GMT
        Subject: CN=5577EF5B89D317F3D4D58391A8C5AC574B7C8251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f1:f8:33:f5:17:62:76:f4:1e:eb:a4:8c:c3:
                    dc:5f:3e:9c:80:47:48:58:85:ae:23:16:db:ae:fa:
                    de:b8:f1:f5:c1:c3:2c:7a:f1:dc:25:ff:d3:51:ef:
                    29:6f:ed:6c:4f:54:03:69:06:af:58:12:2b:55:46:
                    ee:28:91:2a:3d:51:6e:13:37:e3:eb:f2:36:bf:9a:
                    d0:92:4f:14:0d:87:a2:a8:29:72:7f:b5:15:31:1a:
                    cc:39:66:19:ec:e6:1d:0d:71:25:58:33:21:a6:a6:
                    09:6f:da:37:26:2e:49:68:73:54:52:4c:fd:6e:f6:
                    ac:66:68:51:5d:4c:d0:52:8a:13:e5:66:7f:b0:98:
                    8e:17:c6:89:3b:33:41:97:aa:19:00:6c:20:81:6e:
                    fb:47:de:58:92:14:75:3e:77:a3:a4:00:67:44:5f:
                    73:a2:44:0a:44:4e:66:fc:95:bd:7f:8c:a2:f7:6f:
                    f1:23:37:01:d7:74:b3:5f:95:3b:10:bf:46:c2:02:
                    79:1a:84:d2:e1:d2:0f:0b:0f:b3:7b:02:fc:3c:fd:
                    0d:cb:b5:4d:f3:93:f4:7c:e2:88:5b:6a:3d:bf:69:
                    05:8f:da:a5:c9:9f:c6:8b:e7:89:9b:34:57:3b:b3:
                    27:cc:3f:8e:e1:e3:17:e2:bc:4a:8c:92:55:0e:f9:
                    79:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:77:EF:5B:89:D3:17:F3:D4:D5:83:91:A8:C5:AC:57:4B:7C:82:51
            X509v3 Authority Key Identifier:
                keyid:97:A4:AF:5A:5D:AA:93:01:E5:61:37:4F:38:35:25:91:E0:93:C2:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/97A4AF5A5DAA9301E561374F38352591E093C270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97A4AF5A5DAA9301E561374F38352591E093C270.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/323830343a6532343a666563303a3a2f34322d3432203d3e20323632343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e24:fec0::/42

    Signature Algorithm: sha256WithRSAEncryption
         0a:aa:e0:a4:ff:e2:9f:dd:39:18:76:24:f2:6d:cf:14:5f:79:
         bf:6a:df:30:34:c6:0f:f4:41:dc:dd:fc:60:a6:b9:59:f2:9a:
         72:12:5b:23:84:31:d3:d8:ff:2f:41:41:48:48:fe:a2:11:19:
         1b:68:9f:2e:c2:b5:9d:1a:99:56:96:12:4c:d3:12:72:cc:ab:
         96:ad:2b:0f:f0:2a:7b:10:8e:c0:cd:dc:96:63:80:0a:0d:ea:
         ea:2a:c2:f7:1c:8f:85:96:19:89:ee:66:db:e7:13:75:38:03:
         32:51:28:79:8f:6f:e4:99:ad:21:5a:61:f3:aa:d8:e2:97:2e:
         a4:c2:b1:8c:a9:cb:88:cf:58:91:86:df:28:a5:e6:9d:5c:09:
         0f:01:2a:df:88:66:c8:20:f9:d8:a7:ab:a5:6f:e7:fb:a0:b3:
         ea:69:46:da:e0:83:98:a0:b6:5c:c6:c6:87:a3:f0:85:0e:25:
         32:56:ad:52:7a:d4:32:ac:50:43:72:95:fe:df:4a:12:7d:36:
         36:24:7f:ac:69:e0:41:de:a2:c2:73:70:58:d7:3f:ee:e0:46:
         92:87:26:ef:01:29:b1:e8:5b:1c:9f:a0:bf:89:df:49:44:52:
         70:d3:d3:f1:ec:04:6f:37:e4:46:4b:5e:cd:97:01:21:ce:d8:
         1c:49:df:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----