Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/1/323830343a376130383a3a2f33322d3438203d3e20323731333433.roa
File:                     323830343a376130383a3a2f33322d3438203d3e20323731333433.roa (raw, json)
Hash identifier:          kvEBCLZu1XKNSkalDLROdvMl2qyBOOwF5pRbfhxuQ+0=
Subject key identifier:   4D:9C:02:CE:82:D3:96:0A:4F:49:AF:F3:8A:7B:DE:2E:93:DC:A8:F5
Certificate issuer:       /CN=99DE7BA6BC9BE54FCA330650814B8D01D9E16E82
Certificate serial:       04FD4F2566248B6A66F38E48201C6226CA9AE036
Authority key identifier: 99:DE:7B:A6:BC:9B:E5:4F:CA:33:06:50:81:4B:8D:01:D9:E1:6E:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/99DE7BA6BC9BE54FCA330650814B8D01D9E16E82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/1/323830343a376130383a3a2f33322d3438203d3e20323731333433.roa
Signing time:             Fri 18 Aug 2023 02:18:33 +0000
ROA not before:           Fri 18 Aug 2023 02:13:33 +0000
ROA not after:            Fri 16 Aug 2024 02:18:33 +0000
asID:                     271343
IP address blocks:        2804:7a08::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:fd:4f:25:66:24:8b:6a:66:f3:8e:48:20:1c:62:26:ca:9a:e0:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99DE7BA6BC9BE54FCA330650814B8D01D9E16E82
        Validity
            Not Before: Aug 18 02:13:33 2023 GMT
            Not After : Aug 16 02:18:33 2024 GMT
        Subject: CN=4D9C02CE82D3960A4F49AFF38A7BDE2E93DCA8F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4f:17:c5:b2:38:14:2f:67:2e:26:88:71:6d:
                    1a:6e:57:a5:99:bb:7e:5b:be:9d:96:a6:bc:fa:66:
                    23:16:62:44:2a:76:a6:91:cc:d8:25:f9:6a:93:7f:
                    f7:b5:86:8b:ac:f5:11:f3:bd:6f:ff:ca:92:67:1a:
                    e6:82:83:2d:06:65:29:f3:61:a2:a0:7c:b4:3e:c6:
                    3f:fb:8b:d2:ba:0a:16:60:66:a5:b9:0b:58:cb:fd:
                    3c:db:f3:f1:23:1c:ca:73:be:f1:78:82:e3:61:be:
                    e8:aa:e3:0c:5b:98:8c:06:62:54:87:ce:94:e9:5d:
                    fb:4a:84:77:4c:da:e6:22:04:e0:86:49:54:f2:5d:
                    a7:3e:d0:4c:8a:18:3c:cd:9c:01:46:7a:30:09:6c:
                    06:95:b1:5a:93:20:f3:ce:5d:8f:00:44:2a:c4:7d:
                    25:1f:94:0d:3b:ba:0a:80:9b:e4:cb:57:9a:e7:e8:
                    e7:78:8a:82:66:9e:20:97:9e:c3:3c:a5:2a:21:bc:
                    56:83:d8:23:4e:b4:84:d8:34:87:59:b3:74:69:7d:
                    9c:48:fd:ec:0a:09:2e:4b:db:12:77:6a:5f:28:7f:
                    1e:c4:cd:d8:f6:c3:70:88:f5:85:2f:60:9e:e6:08:
                    e3:7e:1f:0d:e6:6e:95:a4:ff:e5:81:fd:ae:0f:78:
                    fa:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:9C:02:CE:82:D3:96:0A:4F:49:AF:F3:8A:7B:DE:2E:93:DC:A8:F5
            X509v3 Authority Key Identifier:
                keyid:99:DE:7B:A6:BC:9B:E5:4F:CA:33:06:50:81:4B:8D:01:D9:E1:6E:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/1/99DE7BA6BC9BE54FCA330650814B8D01D9E16E82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/99DE7BA6BC9BE54FCA330650814B8D01D9E16E82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/1/323830343a376130383a3a2f33322d3438203d3e20323731333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a08::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:e2:28:b4:40:4c:67:b9:12:6b:33:16:71:f2:dc:75:c7:3a:
         1e:f6:03:e4:8b:3c:e6:58:4e:4f:4a:3e:7c:93:1c:36:cf:6a:
         ed:27:ed:fa:ff:80:1e:6e:6e:6b:e6:76:5b:e9:cd:03:a2:eb:
         31:3f:16:ee:65:3e:7c:92:45:00:cd:a5:c3:0a:8a:59:c3:48:
         77:f3:a7:cf:1c:69:e0:32:a1:8c:88:b4:19:9e:b1:a6:0d:6a:
         ad:8d:d8:33:4d:e1:92:7f:16:b1:bf:53:aa:8f:5f:9f:01:86:
         ac:93:81:cf:94:6f:31:9a:0c:a3:e8:a3:bb:b3:ad:20:5b:00:
         8f:62:50:08:1b:cc:76:07:ef:7f:5e:56:fb:8b:ea:e0:cc:48:
         a8:94:ca:bd:eb:fa:20:89:5a:34:8c:17:83:4f:61:9e:e6:88:
         ca:db:75:c1:8a:20:bc:88:7f:d5:0f:b0:95:98:c4:bd:db:39:
         4c:a9:7c:fe:5d:e5:78:e1:1b:9c:02:80:ff:72:6a:b3:f3:d3:
         ee:88:1e:2b:9b:04:6f:be:89:d6:35:17:3b:69:42:28:20:46:
         58:c9:ae:50:7f:f1:ad:11:be:d4:3c:cb:0a:76:b8:64:62:4e:
         6c:a4:bd:c6:56:2f:ff:82:ec:46:60:13:f5:9c:50:f9:21:c9:
         29:89:78:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----